GPO not applied in the domain

shanparames

Hi
In a domain with windows server 2003 sbs, I have one OU to which 50 users are present.I want to implement a group policy so that access to control panel of windows in client pcs is disabled .
For that to test it without affecting the existing OU ,I created a new OU named test , and an user in that named checkgpo and I applied that "no control panel " GPO to that TEST OU .
I logged in as checkgpo user but I am still be able to see the control panel and access it
I want to know where I am missing some steps!
N.B: the existing OU and the test OU are having default domain policy inherited
Thanks in advance
Techshan

larush

Hi Shan,
Have you tried rebooting, or going to the cmd-line and enter gpupdate /force?

shanparames

Hi Larush
Thanku for your prompt reply

I applied gpudate/force and restarted the pc also

But no effect
Can u please guide me?


Shan

rsutton

Run a gpresult from the client and see what is being applied. Check the event viewer for any errors about not being able to apply the GPO. if you want, paste the results of gpresult here.

shanparames

hi rsutton

thanks for me giving me a clue to check

i tried the new gpo in the same client pc where i got the error "the policy object does not exist"

So i tried in another pc for checking, i found it worked

Anyway the gpo is working good but since iam new to this domain environment i am little bit fearing to apply it for the other OU also .What is your suggestion to keep all the client pc's in total control of the it administrator like me?

Shan

phoeneous

shanparames wrote: »

What is your suggestion to keep all the client pc's in total control of the it administrator like me?

Shan

But you already know the answer to that.
















hint: Its called Group Policy.

rsutton

You should continue testing it in your lab until you are sure it works properly. With GPO's it doesn't hurt to test them against multiple computers and Service Pack levels.