I have recently stared a new role in a school and have noticed that some Group Policies are not being applying on all computers for all students. For example, we have a policy that has been created called Disable management Tools which has settings configured to prevent access to the command prompt.
In the scope, it’s being applied to Authenticated Users and correctly linked to an OU where students are placed yet if I log on as a student, they have access to the command prompt.
I Tried enforcing that particular policy, but it still didn’t work. I also tried creating a new policy in the correct place and applying the one setting to prevent access to the command prompt. Did a gpupdate /f and restarted the client machine, still no joy.
I ran gpresult /r logged on as a test student and can see the policy in question is being applied. I’ve tried looking through the Event Log but can’t find anything glaringly obvious that’s wrong, after all, it’s showing it’s applied but why can they still access the command prompt?
Any help or guidance would be much appreciated.
