winxp and nt domain (poledit problem)

I am attempting to get my windows xp pro machine to log onto my domain controller (samba pdc) and get the ntconfig.pol file and apply it. I'm able to log on with no problem, i have the startup scripts and everything working great. But my windows xp machines and most of the win2k machines will not download and apply the poledit.exe file \\server1\netlogon\ntconfig.POL. Has anyone had this problem? What do I do to fix this?

 

Have you tried using Manual UpdateMode and specifying the NetworkPath?

 

yeah, HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Update\UpdateMode = 1 and HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Update\NetworkPath = \\server1\netlogon\ntconfig.POL

The computer settings take place, such as the logon banner, and update methods and such, but the users' settings dont load at all. i've set it for a group called "restricted" and applied restrictions to it, but they still fail to load in windows xp.

 

UpdateMode should be 2.
Make sure the client can open \\server1\netlogon using Start > Run...
Create ntconfig.pol using Win2k's policy editor (in adminpak.msi).

Or use gpedit.msc instead.

 

Ok so now I have:

1.) A nt pdc with netlogon available to read by all users
2.) \\server1\netlogon\ntconfig.POL created and readable by all users
3.) A windows xp machine with the registry values:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Update\NetworkPath = \\server1\netlogon\ntconfig.POL
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Update\UpdateMode = 2

4.) A group named "Restricted" which has restricted access to the computers, with priority over the other groups
5.) A "Default User" definition set to default on all of the boxes

But winxp is not getting the users' settings. It gets the stuff for the computer like the logon banner and stuff, but it does not apply the policies for the restricted group (or any other for that matter).

help?

 

Does that mean your 2K systems are now behaving properly and only the XP ones are failing to grab all the proper policy information?

 

it means 2k isn't important to me. i won't be using it anymore. but considering xp is based off of 2k i'd assume it'd fail on 2k also.

 

Well i figured out the problem, the groups i were adding were local groups, and not domain groups. i need to configure openldap and then i'll be ok.