Group Policy Problem

[vermin]

On my test domain I am playing around with policies. I have set up a policy in AD for an OU called staff. In here i have specified desktop setting, ie no run/help/ etc. When i log on as that user on a win2kpro machine, none of the policies are being applied. Any ideas ?

 

[treyormsbee]

Check to see if DNS is correctly configured... Be sure you can do an ns lookup from the client machine.

 

[tlcscousin]

Have you gone into the permissions on the GPO and given read and apply group policy permissions to the users?

 

[vermin]

The users do have read and apply permission to the GPO, so that is okay..I am trying to get my head around DNS and not doing that well currently. What does NSlookup do ??

 

[tlcscousin]

NSLOOKUP is a service to look up information in the DNS (Domain Name System [RFC1034, RFC1035]). Basically, DNS maps domain names to IP addresses. Although this service can query a specific DNS server, in most cases it may be sufficient and convenient just to use the KLOTH.NET default server "ns4.coastlandtech.com".
To resolve an IP address by reverse lookup (get a computer's name if you only have its IP address), try a PTR query instead of ANY. This reverse lookup will only work if the IP address owner has inserted a PTR record in the DNS. If you don't get a PTR information about a specific computer from a NSLOOKUP query.

Have you given enough time for the policy to replicate?
The users are in the OU or is there a group inside the OU containing the users.
Group policy applies against users or machines not groups.