Active Directory and Group Policy problem...

Hi, all. I'm having a problem with Group Policies. Here's a rundown of the setup:

• Workstation - P4 2.4 GHz, 512 MB RAM, 40 GB HDD, WinXP Pro
• Server - Win2K w/ SP4, running Active Directory

I have a Group Policy Object (GPO) that configures file/folder permission. For the sake of this discussion, let's say the folder that is being configured is C:\Test. I set the GPO to give certain users access to this folder and have it set all sub files\folders to inherit permissions. I wait a while for the GPO to propagate to all of our AD servers.

On next boot, the GPO gets applied - the permissions for C:\Test are correct. Additionally, I check the C:\Windows\Security\Logs\Winlogon.log file, and it shows the GPO being applied w/o any errors. Pretty good so far.

However, after I reboot, the permissions are now incorrect. When I check the winlogon.log file, it has not been updated. Isn't it supposed to update on every boot? I then delete the winlogon.log file so WinXP will create a new one. Still no good.

If I make any change whatsoever to the GPO, like removing it and reapplying it to the OU, it will then work for one boot before it 'breaks' again. I am going nuts with this. Does anyone have an idea as to what is causing this? Your help is greatly appreciated.

 

that area isn't my strongest but I thought you might find this interesting and perhaps useful in resolving your problem

http://mcpmag.com/Features/article.asp?EditorialsID=376

 

Thanks for the reply. Yeah, I already have the GPMC. When I run the resultany policy tool on the workstation, it shows that the GPO has been applied. It just doesn't do what it is supposed. Moreover, the winlogon.log file doesn't get updated...I'm sure the two events are related...

But thanks again for your reply...