GP does not apply !

[sillylady]

I am new to GP. I created an OU on windows2000 domain and created an user named 'Test' in OU. I modified the default domain Group Policy to remove the 'Run' option from start menu. When I logged in as the 'Test' user, 'Run' option is still there in start menu.

Can anyone tell me where I am doing wrong?


Thanks

[garbage]

try RSoP on workstation...
Domain Admins have administrative rights on workstation?

[Stock]

Modifying the Default Domain policy should have given you the result that you expected. Although that result may not have taken effect immediatly. If the machine you are logging onto is a Windows XP machine then the run command may not be removed for up to 90 minutes or so because you may be logging on with a cached copy of a previous GPO. If the workstation is Windows XP then run gpupdate from a command promt. If it is windows 2000 then run "secedit /refreshpolicy user_policy /enforce" from a command prompt. If it is an O/S previous to 2000 then GPO's do not apply.

If that does not work then I would recommend creating a GPO and linking it directly to the OU and seeing if it applies. Your problem could also be that you are logging on locally to the workstation to which case a user based GPO would not apply. You may also not have connectivity to the domain and be loggin on with cached credentials.

You also may want to make sure that you did not apply the setting in the default domain controllers policy, I have done that a few times.

I hope that helps.

[sillylady]

I deleted all the test OU and User. I just changed the default domain policy to remove 'Run' option from the start menu. It does apply but only to Server machine and on Administrator account. This default policy modifcation does not apply to other domain users when they log on to their workstation.

It would be worth mentioning here that all the domain users are member of local machine admin group.

Thanks

[garbage]

please try RSoP on workstation or - in Group Policy Management Tool - Group Policy Results..

but..before...(re) create the OU Test, user Test, include user in OU and define a GPO for OU Test.
check if DNS problem exists where a station logon to domain...
logon with user Test and run RSoP.....then...attach result here

[chrisp]

Check the application logs on the machine for USERENV errors. Do we see any? The RSoP will be very helpful, as mentioned above.
Also, check the security filtering on the default domain policy, does it inlclude non-admin users?
-cp