Topic: Problems with group policies

[mscdex]

For the past few days now I've been struggling with trying to get group policies set up correctly on a small network of Win2k machines here.

I initially created several different NTConfig.POL files and copied them to the netlogon share without any success. For some reason the policies were not being applied when I set them using for a single group, they only got applied when I set them to Domain Users instead (why is this the case?). After I got the policy working, I realized I made it way too restrictive and attempted to overwrite the existing NTConfig.POL on the server. Rebooting either the workstation OR the SME server did not make the workstation pick up the new changes after logon. I even completely removed the NTConfig.POL file and tried rebooting both and yet it still magically applied the policy.

What am I doing wrong that is making the policies stick forever? Is there a cache for policies locally?

[brentonv]

i was having the same problem. see http://forums.contribs.org/index.php?topic=39882.msg185825#msg185825. i have been away from my linux projects for a while but you could try running "gpupdate" or "gpupdate /force" from command prompt on the client machine. you may also incorporate this into the netlogon script so that workstations update policy regularly. let me know how you go.

regards,
brentonv

[mscdex]

i was having the same problem. see http://forums.contribs.org/index.php?topic=39882.msg185825#msg185825. i have been away from my linux projects for a while but you could try running "gpupdate" or "gpupdate /force" from command prompt on the client machine. you may also incorporate this into the netlogon script so that workstations update policy regularly. let me know how you go.

regards,
brentonv

It seems gpupdate is XP only All the machines here only have win2k (sp4). I did some digging and it seems the win2k counterpart is "secedit" which can do a forced refresh too. I will try it as soon as I can and report back.

[brentonv]

any update on how you went with this issue as i am keen to find a solution also.

regards,
brentonv