GPO changes not taking effect

[jbob]

We are running Windows 2000 server with AD. I am changing some GPO settings domain wide and they are not taking effect on some Windows 2000 SP4 machines. They seem to be working on XP, but not one of the 2000 machines. Is there a way to force this manually? I've tried logging off and restarting. The user is a local admin.

 

[packmule]

Are these PC's logging into the domain? Have you run the secedit command in a DOS window? secedit refreshpolicy_machine policy is the command I think off the top of my head. Also look in the event logs, you shold see some bangs in there for group policy in there if the group policy is erroring out. Once you have an event code look it up at www.eventid.net

 

[MulLa]

You might want to make sure that these W2K machines arn't in their own OU which is blocking the GPO. Make sure they are not in any groups which has deny read / apply permissions.

 

[stash]

Look for userenv errors in the application log. What settings are you trying to apply?

 

[gaidin123]

Adding to the list of things to check...

Make sure the policies you are trying to apply are not Windows XP and higher only. Also check for replication issues among your DCs.

Gaidin

 

[jbob]

Got this figured out. One Windows 2000 and three XP machines were not updating. I did run secedit for the Win2k box, for XP, the command is gpupdate. After running the commands, it prompted me to logoff, I did that and the pol did not refresh, I restarted, and they were updated.

Thanks for the replies.