Windows 2003 Group Policy in 2000 Domain 1

[mattjurado]

Hello, I'm trying to add a 2003 Server running Citrix, to a 2000 AD Domain. I'm applying the Group Policy only to a single group, and denying the ability to apply the policy to domain admins, enterprise users, authenticated users. Its not taking effect, am I missing something here? Or can 2003 simply not accept 2000 Group Policies?

Matt J.

Please always take the time to backup any and all data before performing any actions suggested for ANY problem, regardless of how minor a change it might seem. Also test the backup to make sure it is intact.

 

[MikeBatters]

2003 can be managed using Windows 2000 GPs but obviously you end up missing some of the 2003 GP features.

It sounds like you might have missed a permission somewhere along the way.

The easiest way to do this (rather than using explicit deny settings) is to make sure that the group that you want it applied to is the only one if the GP Security settings to have the "Apply Group Policy" setting ticked.

I take it that the W2003 server is in the Domain etc....(stupid question i know).

 

[mattjurado]

Yes, I figured it out right after I made this thread. I removed the authenticated users alltogether, then added the group in question, then it seemed to work. Strange, I was pretty sure I had the permissions right, but whatever...

Actually, the first time through I removed all the groups, this killing my ability to administer the policy I created. Since I had only defined one policy, and it didn't take effect anyways, I'm not too worried about it, but apparently there is a utility I can get off of cd that will give me a command to do it, from what I found on google.

Matt J.

Please always take the time to backup any and all data before performing any actions suggested for ANY problem, regardless of how minor a change it might seem. Also test the backup to make sure it is intact.