Group Policies Help (Win2k Server)

I have Active Directory setup and I created group policies on OU(s) to control the desktop settings on a users computer however it does not seem to be propagating through the network. It only works on the local machine (yes of course I used the Active Directory Users and Computers snap in).

I need to be able to set the group policy information at the server and have it apply to the Group in that OU that holds a list of users that it must be applied to.

When I log in from the workstation, the group policy does not apply what it's supposed to unless I log in on the server with that users account.

Can anyone help me fix this odd behavior?

Thanks

Group Policies in 2000 can be troublesome as I have experienced many stupid errors that should not have happend. In order for a group policy to affect a specific Organization Unit, your policy is either specified to Users or Computers.

I'm not sure which one you wanted but if you wanted to prohibit a user from controlling the desktop settings, I would apply a group policy to the group containing the users desired. Say you wanted to prohibit the user from changing the background settings, you would have to create a new USER policy and apply it to that group of users I.E Domain Users. Do not alter the computer security properties as that only will modify the computer and not the users settings. There is an option under the group policy to only enforce USER restrictions which I believe is found under the policies properties somewhere. I don't have a server in front of me currently so I can be certain.

Normally the policy will propigate properly after the workstation is rebooted. Security policies are ususally applied when the machine loads windows.

I hope this helps out... if not there is always the good ol' MS 2000 Security page at http://www.microsoft.com/windows200...ity/default.asp