Group Policy not applying 1

[edie209]

My group polies have stopped working, when i say stopped working what I mean is new settings are not being implemented. I noticed this the other day when I had to change to a new proxy address.

I have run GPResult and according to that all policies are being applied. So I created a new policy that just changed the desktop and applied it to a group of users, when I logged on as one of these users the desktop change did not happen I tried gpupdate still nothing changed. Although when I ran GPResult again it tells me the policy has been applied.

Is there anything I may have missed? or another tool I can use check my setup.

 

[porkchopexpress]

Have you tried to force a refresh using gpupdate /force command?


You could also try teh RSOP tool to see what policies are applying.

http://support.microsoft.com/default.aspx?scid=kb;en-us;323276

 

[edie209]

Hi thanks for your reply, I tried the gpupdate /force and that did nothing. So I then tried the RSOP tool I found two adm's that were not readable but that was not the problem I have also found two minor problems with my policy but that still is not the problem.

If I right click on computer configuration, select properties, and then select error information the 4th title down is scripts which states there is an error and to see below for more information but there is no more information below, is there a switch I can used to find out if the script problem is causing my problem.

 

[porkchopexpress]

Are your policies running any logon scripts?

 

[edie209]

Hi I did have a script running at logon and logoff so I have removed them and the error has gone, but I still can't get the policies to apply to any users.

 

[porkchopexpress]

DO you have a copy of GPMC running this will tell you if any policies are blocked

http://www.microsoft.com/downloads/...24-8CBD-4B35-9272-DD3CBFC81887&displaylang=en

Can you put some users in a test OU and create a new policy to apply to it?

 

[edie209]

Thanks again for your reply porkchopexpress I am using GPMC and no policies are blocked according to it.

I have also created a test OU and two test users and the same thing happens no policies are applied

 

[porkchopexpress]

Hi there

You haven't had any changes that could affect your DNS have you?

How is it setup do your clients all point to your windows DNS server?

 

[edie209]

Yes a new DNS server was implemented about a week ago

 

[porkchopexpress]

I would say that is likely to be the issue.

How many servers do you have and how many are now running the DNS service?

 

[edie209]

We have 1 exchange server, 1 file and print server, 3 terminal servers, and 1 Linux server, the exchange server and the linux server handle DNS the new DNS server is the linux server, all the other servers are 2003.

 

[porkchopexpress]

Does the Exchange server have Active Directory and DNS installed as well?

 

[porkchopexpress]

What i'm asking is which server holds the Windows DNS server or are you using a BIND compatible DNS server on a LInux box?

 

[edie209]

Yes the exchange server does have them both

 

[porkchopexpress]

Are all of your Windows boxes (servers and cients) looking to your Windows DNS server for name resolution not the Linux box?

 

[edie209]

They are looking at both DNS servers the Linux server as primary and the Windows server as Secondary

 

[porkchopexpress]

Change that around on a client to test but that should sort it.

 

[edie209]

I will try tomorrow morning once I'm back at work thanks for all your help so far

 

[porkchopexpress]

No probs.

Is your handle a robocop ED209 reference by any chance?

 

[edie209]

yeh one of my mates named me