• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 623
  • Last Modified:

Local Security Policy not applied

I have define Local Security Policy with GPedit.msc in Windows XP. However, after the Computer is rebooted. I use RSOP.msc to check but all the settings appeared as not define. Why?
0
johnpun2005
Asked:
johnpun2005
  • 7
  • 3
  • 3
  • +1
1 Solution
 
kevin_uk05Commented:
What version of windows are you running. Is the Machine standalone or on a Domain?
0
 
threedaysatseaCommented:
Also, were you logged in as an Administrator when you made the changes to GPEDIT?
0
 
johnpun2005Author Commented:
We are running in a Windows XP in Workgroup.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
johnpun2005Author Commented:
We are login as local Administrator when runnning RSOP
0
 
johnpun2005Author Commented:
Policy is checked both computer and user policy is enabled
0
 
kevin_uk05Commented:
Is this Windows XP Pro or Home?
0
 
johnpun2005Author Commented:
Windows Pro XP2
0
 
kevin_uk05Commented:
So can i confirm.

You are clicking Start > Run and typing GPEDIT.msc and pressing OK

When this opens up you are then making your policy changes. When you reboot those changes are not taking affect?
0
 
johnpun2005Author Commented:
yes
0
 
matrixnzCommented:
Hi John

Can you check that C:\Windows\System32\GroupPolicy exists and that the .pol files timestamp changes when making these changes within GPEdit.msc.

Also can you try GPUpdate /Force after making these changes.

Cheers

0
 
johnpun2005Author Commented:
I have check the *.pol is exists and the GPUpdate /force is done. but RSOP still not show the effective setting. I think rsop.msc cannot show the result of the local policy. Can you suggest another method to verify the local policy is applied other than gpresult and ROSP because gpresult is not details enough.
0
 
matrixnzCommented:
Hi John

Can you please try the following:

Click Start
Click Run
Type: MMC.exe
Click OK
Click File
Select Add/Remove Snap-in
Click Add...
Select Resultant Set of Policy
Click Add
Click Close
Click OK
Right Click "Resultant Set of Policy"
Select "Generate RSoP Data..."
Click Next
Select Logging mode
Click Next
Select This computer
Uncheck "Do not display policy settings for the selected computer in the results (display user policy settings only)
Click Next
Select Current user
Click Next
Check "Gather extended error information.  This may take several minutes."
Click Next
Click Finish

Are the results the same?

Cheers
0
 
johnpun2005Author Commented:
They are the Same result.
0
 
matrixnzCommented:
Does the following file exist %windir%\debug\usermode\UserEnv.log

Here's some info regarding Group Policy logging that may help.
http://technet2.microsoft.com/windowsserver/en/library/0907105e-7856-4c93-b97f-a9a306623af51033.mspx?mfr=true

Cheers
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 7
  • 3
  • 3
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now