Hi all
I have problem with the group police effect , i have OU's
and each has group police , the effect for group police
for OU not working , all my changes for it dosen't take
any effect why , and this is the same problem with the DC
group POlice any changes , no any effect
How i can fix the problem.
Pls help.

The user/computer that you are trying to enforce the policy on must be within the
scope of influence of the GPO. For instance if you configure Group Policy for an OU,
the user or computer must reside in that OU structure. Keep in mind that for domain
user accounts that password/account policy can only be applied at the domain level.
Nediag and gpresult are two great tools to troubleshoot GP problems. I would run
netdiag on the computer you are having a problem with first looking for any failed
tests that may indicate why policy is not applying to that machine or user logging
onto the machine. In particular look for failed tests/errors for dns,dclist, and
domain membership. Gpresult will show where policy is being applied to a
user/computer and the last time policy was refreshed. Remember policy will not be
applied immediately though a reboot. logoff/logon, or using secedit can speed up most
policy propagation. -- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;301423 --- works on non
servers also.

"Roma" wrote in message
news:18e0401c4211e$25496900$a601280a@phx.gbl...
> Hi all
> I have problem with the group police effect , i have OU's
> and each has group police , the effect for group police
> for OU not working , all my changes for it dosen't take
> any effect why , and this is the same problem with the DC
> group POlice any changes , no any effect
> How i can fix the problem.
> Pls help.

Thank's for you

But the GP it was worked perfect , but the server it was
hacked. i used the Tools it's gave me all test ok
but any changes to the GP no any effect , thsi the
problem .

>-----Original Message-----
>The user/computer that you are trying to enforce the
policy on must be within the
>scope of influence of the GPO. For instance if you
configure Group Policy for an OU,
>the user or computer must reside in that OU structure.
Keep in mind that for domain
>user accounts that password/account policy can only be
applied at the domain level.
>Nediag and gpresult are two great tools to troubleshoot
GP problems. I would run
>netdiag on the computer you are having a problem with
first looking for any failed
>tests that may indicate why policy is not applying to
that machine or user logging
>onto the machine. In particular look for failed
tests/errors for dns,dclist, and
>domain membership. Gpresult will show where policy is
being applied to a
>user/computer and the last time policy was refreshed.
Remember policy will not be
>applied immediately though a reboot. logoff/logon, or
using secedit can speed up most
>policy propagation. -- Steve
>
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;301423 --- works on non
>servers also.
>
>"Roma" wrote in
message
>news:18e0401c4211e$25496900$a601280a@phx.gbl...
>> Hi all
>> I have problem with the group police effect , i have
OU's
>> and each has group police , the effect for group police
>> for OU not working , all my changes for it dosen't take
>> any effect why , and this is the same problem with the
DC
>> group POlice any changes , no any effect
>> How i can fix the problem.
>> Pls help.
>
>
>.
>

Other things to check for a Group Policy problem include that the GPO is linked to
the container, that the policy is enabled in the Group Policy options page, that
computer and or user configuration is enabled in Group Policy properties page, that
"no override" is not selected for a GPO in the Group Policy options page at a upper
level such as domain that may not allow the changes to take effect if they are
defined in the GPO where no override is configured, and that the user/group has
read/apply permissions and no "deny" permissions to the GPO in the
properties/security page. Normally "authenticated users" has read/apply permissions.
Domain computers are also members of the authenticated users group. The everyone
group should have read permissions to the sysvol share on the domain controller and
authenticated users need at least read/list/execute ntfs permissions to it. Also
check the Event Viewer on the domain controller for any pertinent error messages. The
links below may be helpful. --- Steve

http://www.microsoft.com/windows2000/techinfo/planning/management/groupsteps.asp
http://support.microsoft.com/default.aspx?scid=KB;EN-US;q250842&

"Roma" wrote in message
news:03f301c42480$14accfa0$a501280a@phx.gbl...
> Thank's for you
>
> But the GP it was worked perfect , but the server it was
> hacked. i used the Tools it's gave me all test ok
> but any changes to the GP no any effect , thsi the
> problem .
>
> >-----Original Message-----
> >The user/computer that you are trying to enforce the
> policy on must be within the
> >scope of influence of the GPO. For instance if you
> configure Group Policy for an OU,
> >the user or computer must reside in that OU structure.
> Keep in mind that for domain
> >user accounts that password/account policy can only be
> applied at the domain level.
> >Nediag and gpresult are two great tools to troubleshoot
> GP problems. I would run
> >netdiag on the computer you are having a problem with
> first looking for any failed
> >tests that may indicate why policy is not applying to
> that machine or user logging
> >onto the machine. In particular look for failed
> tests/errors for dns,dclist, and
> >domain membership. Gpresult will show where policy is
> being applied to a
> >user/computer and the last time policy was refreshed.
> Remember policy will not be
> >applied immediately though a reboot. logoff/logon, or
> using secedit can speed up most
> >policy propagation. -- Steve
> >
> >http://support.microsoft.com/default.aspx?scid=kb;en-
> us;301423 --- works on non
> >servers also.
> >
> >"Roma" wrote in
> message
> >news:18e0401c4211e$25496900$a601280a@phx.gbl...
> >> Hi all
> >> I have problem with the group police effect , i have
> OU's
> >> and each has group police , the effect for group police
> >> for OU not working , all my changes for it dosen't take
> >> any effect why , and this is the same problem with the
> DC
> >> group POlice any changes , no any effect
> >> How i can fix the problem.
> >> Pls help.
> >
> >
> >.
> >