[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now


Re:Group Policy

Posted on 2004-10-24
Medium Priority
Last Modified: 2010-04-14

I have applied an group policy on my domain controller in windows 2000 server.But the thing iam facing problem is my group policies are not applied to all the computers which are added to the domain,instead it applies to my domain controller system only.I have not created OU's.So is that the problem why iam not able to apply GP's.i tried using the command secedit on my other systems but unable to apply it.what could be the problem.can anyone help it out ?

Vinod Kumar R
Question by:r4vinodtpr
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2

Expert Comment

ID: 12393272
You must place the .pol file into C:\WINNT\SYSVOL\sysvol\yourdomain\SCRIPTS (the directory witch is shared as NETLOGON)

Accepted Solution

mrielf earned 100 total points
ID: 12393313

Expert Comment

ID: 12394860
sounds like you created a group policy for the domain controllers only....

try this if you haven't already...

open active directory users and computers---select then right click the domain name (should be at the top)---select properties---select the group policy tab----make sure default domain policy is selected---click edit (near bottom of the window)

set your policy here and it should be applied to all computers in your domain
On Demand Webinar: Networking for the Cloud Era

Did you know SD-WANs can improve network connectivity? Check out this webinar to learn how an SD-WAN simplified, one-click tool can help you migrate and manage data in the cloud.


Expert Comment

ID: 12394865
make sure that this policy is not disabled or blocked in anyway...

let us know if you need more clarification.

Expert Comment

ID: 12394884
there are other things to check on but this is a good starting point.... it should work for  you...

but if you don't mind, please tell us the steps you took to create the policy that you already created...that could shed some light on what might be amiss.

Author Comment

ID: 12398461
Hi Paul,

 What i have created is detailed in step by step as follows

I have created a domain controller and added 15 computers to the domain as such.I have not created any OU's.

Then opened Active Directory users and computers.on that right click my domain name focus.com and went to Group Policy Tab settings.There i have edited the Group Policy in administratie templates for internet settings for disabling the connections tab.

Then i used the command secedit on my domain controller machine.Group policy has been applied successfully on my domain controller machine.But when i checked the other computers it has not been applied after using secedit too.

Could u plz help me out what should be done to apply the GP settings on my domain computers.

Thanks in advance

Vinod Kumar R

Expert Comment

ID: 12399045
to troubleshoot use gpresult and gpotool, i believe they are in the resource kit... when used on the computer they check to see if the computer is finding gpo's or not....

on the default domain policy try checking no override.....

in both user and computer administrative templates, make sure that the group policy refresh interval is set to whatever time you desire....

after running secedit /refreshpolicy machine_policy and user_policy check in event viewer application log for sceCli events, those tell you that the policy has been applied

go to the same place where you created the policy and click properties... check to see that the policy is linked to the domain ..... if it is linked to the domain it should be applied to the computers ou

other resource kit utilities to troubleshoot with: dcdiag and netdiag

you can try readding one of the computers to the domain to see if that fixes the probem....


Expert Comment

ID: 14270067
If the asker does not respond.... split the points?

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Desired Skill Set for Microsoft Dynamics CRM Technical Resources – Part III
This tutorial will teach you the special effect of super speed similar to the fictional character Wally West aka "The Flash" After Shake : http://www.videocopilot.net/presets/after_shake/ All lightning effects with instructions : http://www.mediaf…
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"! Step 1: Open a new google tab Step 2: Go to the left hand upper corn…
Suggested Courses

649 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question