Group Policy not applying

[edie209]

I have a very strange group policy problem here is the setup

 

Win2003 Domain, XP CLients SP2

 

I have a policy to set the proxy for my Students "IE Proxy and home page" but the policy does not work. So I have run GPresult and it confirms that the policy is being applied. I have checked for typos and everthing is fine.

 

I applied this policy to test group so I could look at IE's configuration and nothing is in the proxy at all not even greyed.

 

Anyone have any idea how this could be happening?

[ChrisH]

I have found the proxy setting always to be a pita to update and thats why ideas of blocking internet access using this method usually end up in tears. There is another IE setting somewhere that states about checking and applying setting for IE I will see if I can find it.

[Geoff]

Are you using Application Data folder redirection..?

[edie209]

Yes I am using Application Data folder redirection, but I have only just recently. Could it be this simple?

[Geoff]

Yes. See this previous post.

 

http://www.edugeek.net/index.php?name=Forums&file=viewtopic&p=24557#24557

[spc-rocket]

Hi,

 

Any errors in the event viewer. Does the application or system error have anthing with userenv and specifically GPO Branding etc?

 

Ashok.

[edie209]

I'm still having problems with this GPO I totaly removed folder redirection and still the proxy will not apply although Gpresult says that it is applying. A whole weekend wasted on this one, and still no closer any ideas

[edie209]

It seems that no matter what I do to the GPO nothing is reflected in the user account when they logon, I have changed a couple of settings just to try and nothing happens (i.e changing the desktop).

 

Is there anything that can be set to stop the policy applying? But the really strange thing is GPResult reports that the policy is applying :?

[DMcCoy]

Is it a roaming profile? If so, was it copied from the gui tool, in computer properties.

 

If if is not copied with the gui then you cannot reset the security within the resgistry file (file permissions are not enough). Without using the "copy profile to" and selecting a group to reset the permission to, no one will have write access to the registry. This means that gpos are not applied as they cannot be written to the relevant locations.

[edie209]

HI DMcCoy thanks for replying

 

The staff are using roaming profiles, but students are not and this seems to be a problem for everyone on the domain.

 

It seems to have started after we had terminal sevices set up last week I know a few new policies were created for terminal services but this shouldn't have any knock on effect, should it? all policies worked fine before.

[edie209]

I have found a tool rsop.msc which gives a good amount of information I have found two ADM files that were not readable by my users but that is still not the problem. I have also found a referance in rsop.msc to user scripts in the GPO being accessable but I have no referances to any scripts in my GPO. confused

[alan-d]

I had a similar problem when creating a new policy before the summer.

 

I created a new one from scratch and it worked. No reason for it - both were identical

 

(Maybe the 'Server Fairies' fixed it?)

[edie209]

Hi alan-d I have tried that too..... now, and still I can't get any new settings to take effect :?

[ajbritton]

Hi edie209,

 

It sounds like you are ready to try Policy Reporter. It's great for tracking down nasty little policy problems. Basically, you can use it to enable verbose Userenv logging and then to analyse the resulting Userenv.log.

 

Good luck...

[edie209]

Thanks aj I'm am ready to try anything now :?

 

I don't know if this makes any differance but these problems have been since we had a new DNS/DHCP server installed when we had our Terminal services solution installed.

[ajbritton]

Well, if GPResult/GPMC says the policies should be applied then I guess they should be applied. Is it the case that they are not applying to TS sessions, or on PC sessions?

[edie209]

Its the PC sessions the TS sessions seem to be fine although that has not been rolled out properly yet as we are still waiting to take delivery of the TS client boxes

[edie209]

It looks like it was a DNS issue when the new kit was installed they pointed my windows DNS server to the Linux DNS server and not itself i have pointed it back and it seems t be working again....... Fingers crossed

 

Thanks to all that offered help

[Gatt]

Your not using SiS900 Network cards are you?

We were last year and were getting sh*t loads of errors with GPO's

Replaced them with Intel NICs this year and all now seems ok (touch wood)