Hi, I'm an ICT coordinator at a primary school and have just had a new server installed. I am new to Server 2003 and am completely confused. I have installed Active Directory and set up user accounts through AD Users and Computers. All of the accounts are divided into Organizational Units (- either staff or pupil). I have set up a group policy for each of these and edited the policies (removed run command on pupils, force classic start menu, etc). When I log on to a client, these policies are not applied. How can I make these policies become applied when a user logs in? Also, I want staff to have priveliges to have the ability to install software, add printers, etc - at the moment they cannot do this - do I need to add them to a particular group to do this? Any advice would be really appreciated!

Applying a new group policy does not take effect right away. I rebooted my server and then when the users next logged on they got the new policy but afterwards learned that there is a command you can type at the cmd prompt to refresh group policy. Offhand I can't remember what it is but I am sure someone here knows it.

try secedit

Or try running the following command from your "Run" command: gpupdate

Hi, Many thanks for the replies. I will try this tomorrow. I have tried rebooting the server but this has not done anything. If I try to run this command, can I add this to the logon scripts to save me from going to each machine to do this? Thanks, Adrian

The policy is created at the server not the clients. It is only the server that needs to refresh the policy.