Group Policy

Discussion in 'Server Setup' started by John Stein, Nov 15, 2009.

  1. John Stein

    John Stein Guest

    Hello everyone! I am running Server 2008 Enterprise and so far all seems to
    be running well. At this point with my server, I would like to control a few
    of the settings with my XP clients. At logon, I would like my XP clients to
    point to a certain website and I would like to hide a few settings.

    Is that done through group policy? I started to play with the Group Policy
    preference, which seems to be a new feature of Server '08. However, with the
    changes I have made, I don't see them with the client.

    Am I missing something?

    Thank you.

    ~John
     
    John Stein, Nov 15, 2009
    #1
    1. Advertisements

  2. Hello John,

    Yes, you can configure GPO for IE startpage and also hide some settings.
    On the client machine, which must be located in the OU where the GPO is linked
    to, NOT the computers CONTAINER, run gpupdate /force and then check with
    gpresult /v or rsop.msc in a command prompt if the GPO is applied. I suggest
    that you not change both default policies, on domain level and domain controllers
    OU.

    Best regards

    Meinolf Weber
     
    Meinolf Weber [MVP-DS], Nov 15, 2009
    #2
    1. Advertisements

  3. John Stein

    John Stein Guest

    that's where I am confused. How do you link the GPO to the client machine?
     
    John Stein, Nov 17, 2009
    #3
  4. John Stein

    John Stein Guest

    I'm in the GPO Management console and all looks correct, but I see no
    changes on the client. I'm a bit confused...
     
    John Stein, Nov 17, 2009
    #4
  5. Hello John,

    You use the Group policy management console on the 2008 server to create
    the policy and the on the OU rightclick and choose link an existing GPO(or
    similar).

    Best regards

    Meinolf Weber
     
    Meinolf Weber [MVP-DS], Nov 17, 2009
    #5
  6. John Stein

    John Stein Guest

    Yes, I actually got this part established after I posted it. OK, so how to
    my modifications that I make on the server affect the client? This where I
    am stuck.
     
    John Stein, Nov 17, 2009
    #6
  7. Hello John,

    The client must be located in the OU where the GPO is linked to. After that
    run gpupdate /force on the client or restart the machine. Now you should
    see in gpresult /v that the GPO is listed as applied and rsop.msc should
    show you all the settings on the client.

    Keep in mind that there exists a computer and user configuration part, so
    also the user has to be located in the OU if you configure user settings
    in the GPO.

    Best regards

    Meinolf Weber
     
    Meinolf Weber [MVP-DS], Nov 17, 2009
    #7
  8. John Stein

    John Stein Guest

    Thank you. I did what you said and when I go to make changes in the
    Resultant Set of Policy, everything is grayed out. Any ideas?
     
    John Stein, Nov 18, 2009
    #8
  9. Hello John,

    RSOP is to view the current settings. Changes you have to do in the GPO.

    Best regards

    Meinolf Weber
     
    Meinolf Weber [MVP-DS], Nov 18, 2009
    #9
  10. John Stein

    John Stein Guest

    I can make all types of changes in the group policy manager, but I do not
    see any changes on the client side. What the heck am I doing wrong?
     
    John Stein, Nov 18, 2009
    #10
  11. Hello John,

    Group policy refresh is done automatically between 90-120 minutes. If you
    like to changes immediately you have to make sure changes are replicated
    between all DCs and then run gpupdate /force on the client machine to update
    the settings.

    Best regards

    Meinolf Weber
     
    Meinolf Weber [MVP-DS], Nov 18, 2009
    #11
  12. John Stein

    John Stein Guest

    I added a few URLs to IE for testing purposes. I ran the below command and
    logged off and logged on. Still, my changes are not there. I know I am
    missing something here.
     
    John Stein, Nov 18, 2009
    #12
  13. John Stein

    John Stein Guest

    Let me as you, do I have to have more than one DC in order for this to work?
     
    John Stein, Nov 19, 2009
    #13
  14. Hello John,

    Did you check with RSOP.msc that the changes are shown?

    Best regards

    Meinolf Weber
     
    Meinolf Weber [MVP-DS], Nov 19, 2009
    #14
  15. Hello John,

    No, one DC is sufficient for GPOs. But for redundancy and failover reasons
    in a domain it is recommended to have at least 2 DC/DNS/GC servers per domain.

    Best regards

    Meinolf Weber
     
    Meinolf Weber [MVP-DS], Nov 19, 2009
    #15
  16. John Stein

    John Stein Guest

    yes, and all looks good. Here is the strange part. My group policy took
    affect on the server and not the client. What do you think?
     
    John Stein, Nov 19, 2009
    #16
  17. Hello John,

    Check that the IE version is supported, shown in the settings description.
    Please post the path to the GPO setting.

    Best regards

    Meinolf Weber
     
    Meinolf Weber [MVP-DS], Nov 19, 2009
    #17
  18. John Stein

    John Stein Guest

    Where is the path located?

     
    John Stein, Nov 19, 2009
    #18
  19. Hello John,

    You have configured/linked the GPO within GPMC, so start with Computer/User
    configuration,.............................etc.

    Best regards

    Meinolf Weber
     
    Meinolf Weber [MVP-DS], Nov 19, 2009
    #19
  20. John Stein

    John Stein Guest

    You know, out of curiosity, I joined a Vista Ultimate VM to my domain and
    the GP works with Vista. Is XP not compatible with Server 2008 Enterprise?
     
    John Stein, Nov 19, 2009
    #20
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.