We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you two Citrix podcasts. Learn about 2020 trends and get answers to your biggest Citrix questions!Listen Now


Problems with Group Policies in Windows Server 2003 AD

Medium Priority
Last Modified: 2013-11-05
This is my first AD build from the ground up on an existing system that has not been a migration or an upgrade.  The problem is that I have an OU such as IS and in that OU I have secuirty groups and users from the IS department.  Now for example I apply the GPO to the IS OU lets say to disable the control panel.  I enable Enforce on the GPO and I login underneath an IS user account on a windows XP PC.  Now once logged in I run the GPUDATE /force and then the GPRESULT and I can see that the GPO was applied so I login/logout and still can access the control panel.  I then reboot the PC and still can access the control panel.  I then download the GPMC and use that instead to run the wizard against the account I am using and it says that the GOP is being applies but again I can still access the control panel.  Am I forgetting something here?
Watch Question

are there any other GPO's that run after the IS policy has applied.

you should be able to see the order they run in from GPMC.

also, are you applying User policy's or computer policies? what are you putting in the Security filtering section of GPMC? is it applying to the correct users.


My secuirty filtering is set to Authenticated Users.  The computers are listed by department such as IS resources in another OU so it is user policy only.  This is the one and only one so far in the list for GPO's except for the default domain GPO.
the setting should be: admintemplates > control panel > prohibit access to the control panel - and it should be set to ENABLE, not disable....

i know ive made that mistake before, as the wording gets you.


Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts


You are awesome and I cant believe I overlooked that like 100 times and every time I deleted it and recreated it.  It is always better two have mulitple heads then one.


no probs...
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.