troubleshooting Question

AD Group Policies not being applied to computers

Avatar of dkitts
dkitts asked on
Windows Server 2003
15 Comments1 Solution1929 ViewsLast Modified:
I have just completed the migration of my NT4 domain to Windows2003/Active Directory.
I have created new logical OU's that make sense to our company and moved all computers, users and groups to appropriate OU structures.

My Group Policies are not working on any new OU that I create.

If I right click on mydomain.com, and go to the policies tab, I can edit the policies and those get pushed down fine. It only works at this level.

Here is what I have tried...
Made a new OU on the root of mydomain.com called TESTOU
I moved the computer that I want to push policies to into this OU.
I then created a group in this OU called MYPOLICYGROUP
Then I created a new policy and applied that policy to the group "MYPOLICYGROUP"
Edit the policy and took away the start/run.
Replicated Active Directory. (no errors)
Ran gpupdate /force from the client.
Rebooted the client.
I "DO NOT" get the new policy....ugh!

I then ran GPRESULT, it never shows the policy being applied or denied for any reason.

I can get this to work only if I put the user and computer into the same OU.
For many reasons this is not a viable solution.

Does anyone have any ideas why this may be doing this?

Thanks
DK
Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 15 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 15 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros