Group policies not working

Hello experts!

My problem is that I can't get any recent group policy object to work, neither can I get the changes to the old ones working.

I use GPMC to make and configure the objects. Let's take the following example:

I created a new GPO to remove the screen saver tab from display properties with GPMC. I linked the object to an OU and refreshed the group policy on both, domain controller and client computer. Here's the RSOP report from the client computer:

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 8.6.2006 at 10:25:03


RSOP results for Domain1\User1 on Computer1 : Logging Mode
-----------------------------------------------------

OS Type:                     Microsoft Windows XP Professional
OS Configuration:            Member Workstation
OS Version:                  5.1.2600
Domain Name:                 Domain1
Domain Type:                 Windows 2000
Site Name:                   Domain1
Roaming Profile:
Local Profile:               C:\Documents and Settings\User1
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
    CN=Computer1,OU=Atk7,OU=Testou,OU=Domain Computers,DC=Domain1,DC=cc
    Last time Group Policy was applied: 8.6.2006 at 9:42:45
    Group Policy was applied from:      Controller1.Domain1.cc
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
    -----------------------------
        Testobject11
        Computer classes
        GPO1
        Domain Group Policy
        Local Group Policy

    The computer is a part of the following security groups:
    --------------------------------------------------------
        BUILTIN\Administrators
        Everyone
        Debugger Users
        BUILTIN\Users
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        Computer1$
        Domain Computers


USER SETTINGS
--------------
    CN=User\, Name,OU=Testou,OU=Domain Users,DC=Domain1,DC=cc
    Last time Group Policy was applied: 8.6.2006 at 10:24:19
    Group Policy was applied from:      Controller1.Domain1.cc
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
    -----------------------------
        Local Group Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Domain Group Policy
            Filtering:  Not Applied (Empty)

        New Group Policy Object
            Filtering:  Not Applied (Empty)

    The user is a part of the following security groups:
    ----------------------------------------------------
        Domain Users
        Everyone
        BUILTIN\Users
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        LOCAL
        Testusers
        Testusers2

The new object I created and linked to this specified OU is called Testobject11 so according to RSOP report it seems to be applied. Still I can find the screen saver tab on display properties.

Now I tried to change the old existing GPO's so that I removed the screen saver tab from a GPO called "Computer classes" which has some features that are actually working at the moment. Still no success, after refreshing I found the screen saver tab from display properties.

I'm hopeless, what can cause these changes not to work? If the RSOP report shows that Testobject11 is applied why isn't it working then? I tried "no override" tap as well, no success. And if the "old" objects are working just fine, why arent the changes that I made to them working?

Any help would be appreciated.
helppariAsked:
Who is Participating?
 
mdiglioConnect With a Mentor Commented:
OK, there is a group policy setting made for this scenario.
Its called Loopback processing and can be found here:
Computer Configuration > administrative templates > system > Group Policy > Use Group Policy Loopback Processsing Mode. You'll probably set it to 'Merge'

This will force all users who log into a specific set of computers to have whatever user settings are enabled in that policy applied to them.

Loopback Processing of Group Policy
http://support.microsoft.com/?id=231287

0
 
Jay_Jay70Commented:
Hi helppari,

have you tried a gpupdate /force on the client?
0
 
Jay_Jay70Commented:
some may even need a restart
0
Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

 
helppariAuthor Commented:
Yes, I have forced the update. It doesn't help.
0
 
mdiglioCommented:
Hello,

According to that output the Testobject11 GPO is being applied to the computer object.
The policy for the screen saver tab is a user policy and needs to be linked to an OU that contains the users.
( unless you have defined loopback processing in Testobject11 )
0
 
helppariAuthor Commented:
Interesting.

The thing is that I need the sceen saver tab to be removed only in specific computers, no matter who's using them. A single user can have a pc somewhere else in the domain where the tab is supposed to be visible, still this user shouldn't see it on these computers where I'm trying to apply the policy to.
0
All Courses

From novice to tech pro — start learning today.