Group policies not applying

[whatsthehampton]

Hi,

Our GPO's are just not applying - we have tried everything.
GPUDATE/FORCE on all machines inc. the server
All are in the correct Group/OU

The client machine error log states a userenv 1030.

I am suspecting a permissions and security problem with the sysvol folder as these were changed inadvertently

Would anyone be able to tell me the correct security and sharing permissions for the sysvol folder or have any other ideas why this may be happening?

Kind regards,

J

 

[megadan2000]

Have you enforced the policy in gp management console? Who is the policy applied to ? Are the people/machines you applying to in the correct group? These are normally the problems I have come across.

 

[whatsthehampton]

Thanks megadan2000,

Yes policy is enforced and the 'users/machines' are in the correct group.

Would the sysvol issue have any impact on this as that is where the policies are stored?

Thanks again

j

 

[WANguy2k]

Here's a "catch all" document that takes you through the most common causes of this problem.

http://support.microsoft.com/default.aspx?scid=kb;en-us;887303

By the way, I had a similar problem accessing shares on the servers. Your shortest solution might be to turn off SMB signing on your network. To do this, you can set the following policies in BOTH your default domain policy and your default domain controller policy. You'll need to force a policy refresh on all machines after doing so.

Local Policies/Security
Microsoft Network Client
Microsoft network client: Digitally sign communications (always) Disabled
Microsoft network client: Digitally sign communications (if server agrees) Disabled

Microsoft Network Server
Microsoft network server: Digitally sign communications (always) Disabled
Microsoft network server: Digitally sign communications (if client agrees) Disabled

Good luck!

 

[jonhowe]

Are you running a login script as part of the Group Policy ?

I have seen GPOs appear to do nothing if the login script does not run all the way through as expected e.g. it trys to map drives but fails.

Try removing the login script and see if the other GPO settings start working.

Jonathan