software restriction policy not working when running defau..

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

I am new to GPO's so bare with me.

I have a Windows 2000 domain. Windows 2000 servers, clients are some XP and
a few 2000 and the rest 98.

I am trying to apply a software restriction policy on the XP workstations.
I had read that if you run the GPO from XP you get more selections than
running it from the 2000 servers.

I followed Microsoft Knowledge Base article 307900-upgrading windows 2000
group policy for Windows XP- and selected the default domain policy to add
to my XP machine.

It appears to have worked, in that I can open the default domain policy from
m XP PC and see the software restriction polciy I created. I used hash rule
to try to block solitaire, security level is disallowed.

I do gpupdate.exe from the command prompt to update the policy and still
doesnt work.

I did gpresult.exe /scope computer and it says
group policy was applied from: myserver1@mydomain.com, which is one of my
win2000 servers.

shouldnt it state that the policy was applied from my XP PC?

any help would be appreciated.

gary

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

The policy is being managed by your XP Pro computer but it was actually
configured in the domain policy and your gpresult is showing the correct
results. Try using gpupdate /force or reboot the computer. The link below goes
into good detail on Software Restriction Policies. Try doing some path rules
also. The hash rule file must be exactly the same on the target computer as
shown in Group Policy. A W2K computer file would probably be different than a XP
file of the same name. Also check your enforcement rule which may be exemption
local administrators in case you are logged on as one when trying out the SRP
setting. --- Steve

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx

"Gary Massengale" <garym_jnospam@hotmail.com> wrote in message
news:%23nt%23zaihEHA.1972@TK2MSFTNGP09.phx.gbl...
> I am new to GPO's so bare with me.
>
> I have a Windows 2000 domain. Windows 2000 servers, clients are some XP and
> a few 2000 and the rest 98.
>
> I am trying to apply a software restriction policy on the XP workstations.
> I had read that if you run the GPO from XP you get more selections than
> running it from the 2000 servers.
>
> I followed Microsoft Knowledge Base article 307900-upgrading windows 2000
> group policy for Windows XP- and selected the default domain policy to add
> to my XP machine.
>
> It appears to have worked, in that I can open the default domain policy from
> m XP PC and see the software restriction polciy I created. I used hash rule
> to try to block solitaire, security level is disallowed.
>
> I do gpupdate.exe from the command prompt to update the policy and still
> doesnt work.
>
> I did gpresult.exe /scope computer and it says
> group policy was applied from: myserver1@mydomain.com, which is one of my
> win2000 servers.
>
> shouldnt it state that the policy was applied from my XP PC?
>
> any help would be appreciated.
>
> gary
>
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

thanks for the info

gary

"Steven Umbach" <n9rou@n0spam-comcast.net> wrote in message
news:spzVc.26748$Fg5.25932@attbi_s53...
> The policy is being managed by your XP Pro computer but it was actually
> configured in the domain policy and your gpresult is showing the correct
> results. Try using gpupdate /force or reboot the computer. The link below
goes
> into good detail on Software Restriction Policies. Try doing some path
rules
> also. The hash rule file must be exactly the same on the target computer
as
> shown in Group Policy. A W2K computer file would probably be different
than a XP
> file of the same name. Also check your enforcement rule which may be
exemption
> local administrators in case you are logged on as one when trying out the
SRP
> setting. --- Steve
>
>
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx
>
> "Gary Massengale" <garym_jnospam@hotmail.com> wrote in message
> news:%23nt%23zaihEHA.1972@TK2MSFTNGP09.phx.gbl...
> > I am new to GPO's so bare with me.
> >
> > I have a Windows 2000 domain. Windows 2000 servers, clients are some XP
and
> > a few 2000 and the rest 98.
> >
> > I am trying to apply a software restriction policy on the XP
workstations.
> > I had read that if you run the GPO from XP you get more selections than
> > running it from the 2000 servers.
> >
> > I followed Microsoft Knowledge Base article 307900-upgrading windows
2000
> > group policy for Windows XP- and selected the default domain policy to
add
> > to my XP machine.
> >
> > It appears to have worked, in that I can open the default domain policy
from
> > m XP PC and see the software restriction polciy I created. I used hash
rule
> > to try to block solitaire, security level is disallowed.
> >
> > I do gpupdate.exe from the command prompt to update the policy and still
> > doesnt work.
> >
> > I did gpresult.exe /scope computer and it says
> > group policy was applied from: myserver1@mydomain.com, which is one of
my
> > win2000 servers.
> >
> > shouldnt it state that the policy was applied from my XP PC?
> >
> > any help would be appreciated.
> >
> > gary
> >
> >
> >
>
>