W2K Experts! (GPO Help needed)!!

[MulLa]

Hi all.

I was trying to apply GPO to my domain which consist of 2 machines 1 running W2K-AS and one running W2K-Pro.

I have configured the policy at the domain level on the AS well I am only testing the "Disable personalise menu" policy. I Disabled it and restarted the AS and it worked fine as the personalise menu setting is no longer visible.

Then when I went over and log on to the Pro the setting was still there. I know that the GPO at the domain lever should override the local settings. I checked the local settings anyway and that particluar setting was not configured under local setting.

I made sure that no one is set to "Deny" access for the "Apply policy" check box.

Would someone have any idea as to why this is happening? Is there some other setting that I may have forgotten to set?


Thank you in advance.

 

[igiveup]

NOT AN EXPERT:
I realize this is stupid of me to state, but did you double check to make sure win 2k pro machine was part of the domain? Little weak on OU's and domains, trees, forests, etc. Just tryin to help. Luck. Sometimes its the obvious. I do know you are right on the "domain should override local" though.

Oh, did you reboot the pro after changing the AS box? Has to refresh security settings and such on login.

 

[MulLa]

Well thank you for trying to help me out. Yer I tried all that you have mentioned. Making sure I am loggon onto the domain and restarting and trying to log in under an administrator and a normal user account.

I did find out something new in the logs today. They are as follows:


Description:
Failed to read redirection settings for policy Default Domain Policy. The following error occurred while accessing the initialization file:
The network location cannot be reached. For information about network troubleshooting, see Windows Help.


Description:
The Group Policy client-side extension Folder Redirection was passed flags (0) and returned a failure status code of (1231).


Description:
Windows cannot access the registry information at \\akachan.com\sysvol\akachan.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\registry.pol with (53).


Description:
Security policy cannot be propagated. Cannot access the template. Error code = 3.
\\akachan.com\sysvol\akachan.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.


Description:
The Group Policy client-side extension Security was passed flags (1) and returned a failure status code of (3).


So somehow it's just not making the connection....

 

[jaywallen]

Hi,

Is the adapter to which file and printer sharing is bound at the top of the Adapters and Bindings list?

Did you force a GPO refresh for the W2K Pro machine?

SECEDIT /REFRESHPOLICY MACHINE_POLICY /ENFORCE

and

SECEDIT /REFRESHPOLICY USER_POLICY /ENFORCE

Hope you find a solution.

Regards,
Jim

 

[Shadow07]

I have seen this error message before. At first, it looks like a permissions error, but if your client machine is part of the domain, then it is not a permissions problem. I would run the SECEDIT program from a DOS prompt on your client machine. If this still does not work, have you searched TechNet? If I find anything related to this problem, I will post the KB link.

And, if you are able to resolve it, please post back with your resolution.

 

[MulLa]

Thank you all for your kind help. I will check out that binding suggestion in a minute. Well I didn't enforce a GPO refresh but I did restart the Pro machine. I believe that does the same thing?!

Found this link on techweb

http://support.microsoft.com/support/kb/articles/Q258/9/60.ASP?LN=EN-US&SD=tech&FR=0&qry=event%20id%201001&rnk=1&src=DHCS_MSPSS_tech_SRCH&SPR=WIN2000

But I don't have that much IPs assigned in the first place. Besides I disabled RRAS which reduced all the IPs assigned to the server down to 1. Nothing happened either after doing that!