• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 206
  • Last Modified:

Problems with Group Policies in Windows Server 2003 AD

This is my first AD build from the ground up on an existing system that has not been a migration or an upgrade.  The problem is that I have an OU such as IS and in that OU I have secuirty groups and users from the IS department.  Now for example I apply the GPO to the IS OU lets say to disable the control panel.  I enable Enforce on the GPO and I login underneath an IS user account on a windows XP PC.  Now once logged in I run the GPUDATE /force and then the GPRESULT and I can see that the GPO was applied so I login/logout and still can access the control panel.  I then reboot the PC and still can access the control panel.  I then download the GPMC and use that instead to run the wizard against the account I am using and it says that the GOP is being applies but again I can still access the control panel.  Am I forgetting something here?
0
james_in_hardware
Asked:
james_in_hardware
  • 3
  • 2
1 Solution
 
theoaksCommented:
are there any other GPO's that run after the IS policy has applied.

you should be able to see the order they run in from GPMC.

also, are you applying User policy's or computer policies? what are you putting in the Security filtering section of GPMC? is it applying to the correct users.
0
 
james_in_hardwareAuthor Commented:
My secuirty filtering is set to Authenticated Users.  The computers are listed by department such as IS resources in another OU so it is user policy only.  This is the one and only one so far in the list for GPO's except for the default domain GPO.
0
 
theoaksCommented:
the setting should be: admintemplates > control panel > prohibit access to the control panel - and it should be set to ENABLE, not disable....

i know ive made that mistake before, as the wording gets you.

thanks
0
 
james_in_hardwareAuthor Commented:
You are awesome and I cant believe I overlooked that like 100 times and every time I deleted it and recreated it.  It is always better two have mulitple heads then one.

Thanks,
0
 
theoaksCommented:
no probs...
0

Featured Post

Microsoft Certification Exam 74-409

VeeamĀ® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now