Problem with Policy

[MattWray]

I'm trying to apply a policy to a laptop, and it is not working the way I want it to. I have set some options in Computer Config and made sure Read and Apply Group Policy are checked for that machine account. It is in the OU with no override applied, but it doesn't work unless I move a user into the OU and logon as him. I thought it was possible to apply GPO's to machines as well as users.

What could I be doing wrong?

Thanks,

Matt Wray

GFH

http://www.sss-steel.com

 

[qtin]

Try turning on Loopback processing in the policy

Computer
-Admin Templates
-System
-Group Policy

 

[MattWray]

That looked like it would work, but it didn't. Thanks for the try, any other ideas? This is very irritating, it should be working...

Thanks,

Matt Wray

GFH

http://www.sss-steel.com

 

[TheMac28nearly]

Did you have any Joy with this Matt, im having the same trouble with the loopback not working, im using w2k3 but i dont think it'll be much different to w2k

 

[aznluvsmc]

I assume you gave the SYSTEM group the correct permissions?

Steven S.
MCSA
A+, Network+, Server+, i-Net+

 

[SGTRawlins]

not so sure you can apply GPO to a computer, if the user logging onto this macine is in a different OU then you will no doubt get some form of conflict.

Why is it that you cant just apply the GPO to the user rather than the machine?

 

[TheMac28nearly]

I want the user to get a restrictive gpo applied when he logs onto a citrix server (drives hidden etc) but when the same user logs onto his local XP machine on the same domain, the same gpo does not get applied

Does that make sense ?

 

[aznluvsmc]

GPOs can be applied to either the user or the computer. What settings did you configure for the Computer policy?

Steven S.
MCSA
A+, Network+, Server+, i-Net+

 

[TheMac28nearly]

The only thing ive applied there is the user group policy loopback processing mode. Then ive applied various user settings.

The computer settings on their own are not sufficient to lock the citrix server down from user access

 

[MattWray]

I was able to get it working. I had to move a user into the OU, and log in as him. Once I did this, it applied to all who logged in. It took a few minutes to "kick in" for some strange reason. It wasn't replication, because I forced that after applying the settings, but it took about 5 minutes and then voila, it worked...

Thanks,

Matt Wray

GFH

http://www.sss-steel.com

 

[TheMac28nearly]

Thanks Matt

So your saying that the way it is meant to work is have the machine in the ou, switch on loopback as well as applying your user settings and that should be ok

but what you had to do as well is put the user in the ou. Did you end up taking the user back out of the ou once its working ?

 

[MattWray]

Yes, I took him back out and it kept working. It acts kinda buggy when you remove or add machines to the OU, but once it starts working it keeps on. Try adding a machine and a test user, then log onto that machine as the test user. Then <this worked for me, but I don't know why> wait about 15 minutes, and try to logon with a normal user account. The policies should apply...

Make sure you force replication if you have multiple DC's...

Thanks,

Matt Wray

GFH

http://www.sss-steel.com

 

[TheMac28nearly]

I do have 2 dc's which may not have helped, but someone on another thread just simply advised me to reboot the ts server which i wanted to apply the loopback to and it worked

Thanks anyway

Andy