Group policies not working

Hello experts!

My problem is that I can't get any recent group policy object to work, neither can I get the changes to the old ones working.

I use GPMC to make and configure the objects. Let's take the following example:

I created a new GPO to remove the screen saver tab from display properties with GPMC. I linked the object to an OU and refreshed the group policy on both, domain controller and client computer. Here's the RSOP report from the client computer:

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 8.6.2006 at 10:25:03

RSOP results for Domain1\User1 on Computer1 : Logging Mode

OS Type:                     Microsoft Windows XP Professional
OS Configuration:            Member Workstation
OS Version:                  5.1.2600
Domain Name:                 Domain1
Domain Type:                 Windows 2000
Site Name:                   Domain1
Roaming Profile:
Local Profile:               C:\Documents and Settings\User1
Connected over a slow link?: No

    CN=Computer1,OU=Atk7,OU=Testou,OU=Domain Computers,DC=Domain1,DC=cc
    Last time Group Policy was applied: 8.6.2006 at 9:42:45
    Group Policy was applied from:
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
        Computer classes
        Domain Group Policy
        Local Group Policy

    The computer is a part of the following security groups:
        Debugger Users
        NT AUTHORITY\Authenticated Users
        Domain Computers

    CN=User\, Name,OU=Testou,OU=Domain Users,DC=Domain1,DC=cc
    Last time Group Policy was applied: 8.6.2006 at 10:24:19
    Group Policy was applied from:
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
        Local Group Policy

    The following GPOs were not applied because they were filtered out
        Domain Group Policy
            Filtering:  Not Applied (Empty)

        New Group Policy Object
            Filtering:  Not Applied (Empty)

    The user is a part of the following security groups:
        Domain Users
        NT AUTHORITY\Authenticated Users

The new object I created and linked to this specified OU is called Testobject11 so according to RSOP report it seems to be applied. Still I can find the screen saver tab on display properties.

Now I tried to change the old existing GPO's so that I removed the screen saver tab from a GPO called "Computer classes" which has some features that are actually working at the moment. Still no success, after refreshing I found the screen saver tab from display properties.

I'm hopeless, what can cause these changes not to work? If the RSOP report shows that Testobject11 is applied why isn't it working then? I tried "no override" tap as well, no success. And if the "old" objects are working just fine, why arent the changes that I made to them working?

Any help would be appreciated.
Who is Participating?
mdiglioConnect With a Mentor Commented:
OK, there is a group policy setting made for this scenario.
Its called Loopback processing and can be found here:
Computer Configuration > administrative templates > system > Group Policy > Use Group Policy Loopback Processsing Mode. You'll probably set it to 'Merge'

This will force all users who log into a specific set of computers to have whatever user settings are enabled in that policy applied to them.

Loopback Processing of Group Policy

Hi helppari,

have you tried a gpupdate /force on the client?
some may even need a restart
Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

helppariAuthor Commented:
Yes, I have forced the update. It doesn't help.

According to that output the Testobject11 GPO is being applied to the computer object.
The policy for the screen saver tab is a user policy and needs to be linked to an OU that contains the users.
( unless you have defined loopback processing in Testobject11 )
helppariAuthor Commented:

The thing is that I need the sceen saver tab to be removed only in specific computers, no matter who's using them. A single user can have a pc somewhere else in the domain where the tab is supposed to be visible, still this user shouldn't see it on these computers where I'm trying to apply the policy to.
All Courses

From novice to tech pro — start learning today.