Server 2003 Group Policy issue by Loki
Started on : 06-01-2011 05:17 PM
Replies : 10
Last post by : Loki on 06-01-2011 06:53 PM
Jun 1st, 2011
Loki Member Posts: 8453 From: Dallas, TX Registered: Mar 2000
Here at my new job I am trying to get some security set up. Starting small I went in and set up the screensaver to kick on after 180 seconds and require a password. Yet nothing is being pushed to the PC end. Been a LONG time since I have dealt with GP and was wondering what I might need to look at?
------------------Michael Geddie Photography
IP: Logged
05:17 PM
PFF
System Bot
FieroRumor Member Posts: 35007 From: New York Registered: Dec 2001
Did you reboot the client machine? or try gpupdate /force may need to do it in an admin cdm window...
IP: Logged
05:21 PM
Loki Member Posts: 8453 From: Dallas, TX Registered: Mar 2000
Client machines have been rebooted.. Ill try the force.
IP: Logged
05:26 PM
Loki Member Posts: 8453 From: Dallas, TX Registered: Mar 2000
No go on the force.. Ugh
IP: Logged
05:33 PM
kwagner Member Posts: 4258 From: Pittsburgh, PA Registered: Apr 2005
Yeah group policy pushes are sketchy. gpupdate /force as rumor said seems to be the most likely to work, though still not a full guarantee from my experience. Give it a few reboots.
Edit: run rsop (I think rsop.msc) on the client to see if it's getting the policy you think it should be getting. Maybe it's not the right area to affect it the way you want.
[This message has been edited by kwagner (edited 06-01-2011).]
IP: Logged
05:34 PM
FieroRumor Member Posts: 35007 From: New York Registered: Dec 2001
You can also check the event logs to see if there are events listed related to the GP...
When I do a test GPs, I usually include a script which creates a folder on the client machine. That way, I can tell if the dang thing ran or not...
[This message has been edited by FieroRumor (edited 06-01-2011).]
IP: Logged
05:36 PM
FieroRumor Member Posts: 35007 From: New York Registered: Dec 2001
Also depends on where you created the GP! (which DC)
it takes time to propagate...
if the client doesn't hit that server when the users tries to login, that GP is PROBABLY not gonna run...
[This message has been edited by FieroRumor (edited 06-01-2011).]
IP: Logged
05:37 PM
Loki Member Posts: 8453 From: Dallas, TX Registered: Mar 2000
rsop isnt showing what it should be getting, even after reboots and forces. Ugh. Maybe ill go kick the server
IP: Logged
05:38 PM
Loki Member Posts: 8453 From: Dallas, TX Registered: Mar 2000
.83 is our DC.. Every PC hits it. But just found out from the network admin some funky stuff has been going on that he is looking into anyway. sigh
IP: Logged
05:52 PM
86GT3.4DOHC Member Posts: 10007 From: Marion Ohio Registered: Apr 2004
Are you linking it to the appropriate group? That is you cant run a computer script against a user group, as you cant run user configurations against machines.
IP: Logged
06:01 PM
Loki Member Posts: 8453 From: Dallas, TX Registered: Mar 2000
Under user config > admin templates > control panel > display
IP: Logged
06:53 PM
PFF
System Bot