Link to home
Start Free TrialLog in
Avatar of rookery-IT
rookery-ITFlag for United Kingdom of Great Britain and Northern Ireland

asked on

GPO - User configuration settings not applying

GPO - User configuration settings not applying

I have a newly installed Windows 2003  server with a few client machines.
One of the client machines is a public access computer that also needs to be used by members of our staff. I am trying to apply GP settings via AD by using the User Configuration setting in the group policy editor. i.e. Log on as a public user - receive different gpo settings than another user.
Settings I am trying to apply are GUI lockdown, restrict access to system settings etc.

Non of the user settings are applying. I am using loopback processing but to no avail.

My AD structure is as follows -
2 user OU's. 1 for public users, 1 for staff
2 computer OU's - 1 public, 1 staff

I have other OU's that are applying settings just fine i.e the staff user and computer gpo's are ok.
I can't work it out.

Any help much appreciated !!
Avatar of JohnGerhardt
JohnGerhardt
Flag of Switzerland image

Are the user settings disabled?
Right click at the top of the policy in question (on its name) and then choose properties..
There are check marks at the bottom... Is there any thing checked...?
Avatar of rookery-IT

ASKER

No settings are not disabled.
Avatar of Brian Pierce
The user configuration will be applied on the basis of which OU the users actual account is in As the computer setting get applied first then the user the computer settings will apply if there is any conflict - unless you use LOOPBACK
My OU structue is as follows:

Users_Staff_OU: 5 users
Users_Public_OU: 1 user
Computers_Staff: 5 PC's
Computers_Public: 1 PC

Within the Users_Public I have all the GPO settings defined in User Configuration - No Computer Configuration settings are applied except Loopback.


Where are you linking the policy, if you link it to an OU with computers in it, then the user settings will not be appllied (as there are no user accounts in that OU)
Policy is linked to Users_Public which only contains one user, no computers. The computer is linked to Computers_Public
maybe you can run a gpresult /R at command and show us the results?
In that case if the user who is in the Users_Public OU logs on then the policy should apply - bit it will not apply to anyone else.

Are you using the GPMC? If not download and install it now http://www.microsoft.com/downloads/details.aspx?FamilyID=0a6d4c24-8cbd-4b35-9272-dd3cbfc81887&displaylang=en it will greatly assist troubleshooting
Avatar of IQComp
IQComp

Is the policy applied to the OU?  Is the user(s) in the OU?  Is the Windows Firewall enabled?  I have run into problems with applying GPO's when the Windows Firewall is turned on.
Hi,

Silly but I have to ask is the policy enforced? If not try this as it will ensure conflicting policy settings are overidden. You should obviously check that it is 'enabled' as well.
If that fails try running gpupdate /force on the machines that are playing up, answer no to both questions and then reboot the machine.

Regards,

Fraser.
Hi in answer to the posts above:

jjmartineziii - thats a good idea. Im away from that dept for a day or two but I will try that - thanks.

IQComp: - Ill try the firewall - its possible it might be enabled - thanks


fraserc: Yes the policy is enforced. Ive done gpupdate /force but its not picking up the GP settings- thanks


Will post back soon. Thank you all.
Hi,

Unless I'm mistaken there is no /R switch for gpresult.
I think you must have meant to use verbose...
gpresult /V
Or superverbose
gpresult /Z

F,
Ok, Ive tried Gpresult and it gives me 'INFO: The policy object does not exist' -  any more ideas?

I also deleted all my GPO's and created a new one with which to test.
All thats in it is a logon script that pops up a message - still wont work.

I have several other domain controllers in the organisation and they are all fine - I simply cannot work out why it isnt distributing the gp's
ASKER CERTIFIED SOLUTION
Avatar of rookery-IT
rookery-IT
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Nice to know! Good you got it taken care of.