policies stopped working

[KWestos]

Our policies have suddenly stopped working - please help. All the kids have access to everything now!

[Dom_]

What troubleshooting have you done so far?

[SYNACK]

What does the event log of an affected client say, have you had a look at the RSoP snappin on a client pc. Is there anything in the server event log and can you get to the \\domain-name\netlogon folder?

[KWestos]

What troubleshooting have you done so far?

The only thing so far is to reboot the servers. We are trying to find out right now!!!!!!!!!!!!!! Don't really know yet, on the face of it, some are applying OK - this does not make sense

[Dom_]

Check "details" for the policies not being applied, make sure they haven't been set to disabled!

[elsiegee40]

Do go through your Group Policy Management console and check they are still "Link enabled" (right click on the policy) my red-face moment was when I 'unticked' this to do something and forgot to redo it. Everything looked fine, but the policy concerned wasn't applying

[FN-GM]

What happens when you try and edit policies?

I hope for your sake the sysvol isnt messed up.

[a_monkey_hint]

The only thing so far is to reboot the servers. We are trying to find out right now!!!!!!!!!!!!!! Don't really know yet, on the face of it, some are applying OK - this does not make sense

What does gpresult from a client come up with? Check the client event log to see if any messages regarding policies are being flagged up. Is it happening for specific users or iscolated to particular machines? Try removing the profile from a student and check whether policies reapply. Is this happening to both staff and students?

[Michael]

If you have multiple domain controllers, make sure the File Replication Service is running on both servers.

I also agree with previous comments - if you haven't already, install GPMC; a really useful Microsoft tool which allows you to see just what policies are being applied.

[rh91uk]

Might possibly be a file replication error.

Again, I really hope your sysvol isn't messed up!

[ricki]

HI

Dont forget to make sure that clients and servers are time synced otherwise kerberos will not work properly.

Richard

[IanT]

check DNS Servers all up and running, I had a problem before when my DNS was down, policies wouldn't load.

worth checking Group Policies Results app I think.

[ricki]

HI

Have you done a netdiag and a dcdiag

Richard

[KWestos]

Hi, many thanks for all your comments.

It turns out it was in DHCP. The DNS entry in scope options disappeared- don't know how. But we put the entry back in and for now - it's working