Default Domain Policy on DC

[snootalope]

The 'active' GPO for the domain propogates down to the containers and OU's right? I'm just curious, because I spent an hour going through a GPO and then none of the settings have taken affect yet. I finished it about 30 minutes ago..

We have everyone loggin into the PC's as Power Users on the local machine. We just added *DOMAIN*\Domain Users to Power Users local groups.. that wouldn't be conflicting my GPO would it? All I want to do is unlock the toolbars, change desktop settings to be enabled, ect.. Can someone please help? I'm getting reall confused here.. "tis better to be thought of as a fool then open your mouth and remove all doubt" Mark Twain

"I should of been a doctor.." Me

 

[GiaBetiu]

Strange.
Normally, after you restart the system the machine policy is downloaded, then after user authentication, the user policy is downloaded and applied.
The order for GPO is: locally, site, domain, OUs.
If you didn't block policy inheritance, then the policy should propagate.
The fact that you add your domain users to Power Users local has no influence in this case.
Instead check the Security for that GPO. Your users has to have Read and Apply Policy rights. And of course the users should belong to that domain (I suppose that you didn't log on that machines with a local account). Gia Betiu
m.betiu@chello.nl
Computer Eng. CNE 4, CNE 5