+ Post New Thread
Results 1 to 8 of 8
Windows 7 Thread, Not applying user GPO first logon in Technical; Hi all got a really annyoing problem. We have Server 2008 R2 domain, and are updating our clients to Windows ...
  1. #1
    Bezwick's Avatar
    Join Date
    Feb 2008
    Location
    Nottinghamshire
    Posts
    358
    Thank Post
    93
    Thanked 57 Times in 43 Posts
    Rep Power
    25

    Red face Not applying user GPO first logon

    Hi all got a really annyoing problem.

    We have Server 2008 R2 domain, and are updating our clients to Windows 7 (finally). I have everything working fine except one thing.

    All the students use a Mandatory profile \\server\netlogon\profile\mandatory.v2, it works fine.
    The machines have a GPO for each classroom which sets up things like printers etc.
    When the students logon they have a GPO the redirects menus, locks fetures etc as you would expect.

    The prroblem i have is when you turn a mchine on and a student logs in it executes the Machine GPO and applies the Mandatory profile, but not the student GPO.
    But if the student logs off and then straight back on again it works brilliantly.

    Any ideas of how to get it all to work without logging on twice?

    Cheers.

  2. Thanks to Bezwick from:

    speckytecky (13th July 2012)

  3. #2

    Join Date
    Jun 2012
    Location
    Darmstadt
    Posts
    9
    Thank Post
    0
    Thanked 5 Times in 5 Posts
    Rep Power
    0

    LGPO

    i experience the same but the other way around and with local GPO:

    when the Profile is _new_ the LGPO will be applied.

    For subsequent logins with existing profile c:\users\testuser the LGPO will not apply.

    The only workaround i can see so far: prepare the ntuser.man with the GPO Settings already in Place.. not very flexible.

    reagrds
    MArkus

    Quote Originally Posted by Bezwick View Post
    Hi all got a really annyoing problem.

    We have Server 2008 R2 domain, and are updating our clients to Windows 7 (finally). I have everything working fine except one thing.

    All the students use a Mandatory profile \\server\netlogon\profile\mandatory.v2, it works fine.
    The machines have a GPO for each classroom which sets up things like printers etc.
    When the students logon they have a GPO the redirects menus, locks fetures etc as you would expect.

    The prroblem i have is when you turn a mchine on and a student logs in it executes the Machine GPO and applies the Mandatory profile, but not the student GPO.
    But if the student logs off and then straight back on again it works brilliantly.

    Any ideas of how to get it all to work without logging on twice?

    Cheers.

  4. Thanks to wehr from:

    speckytecky (13th July 2012)

  5. #3

    Join Date
    Jun 2012
    Location
    Darmstadt
    Posts
    9
    Thank Post
    0
    Thanked 5 Times in 5 Posts
    Rep Power
    0
    I found the solution here at edugeek:

    the ntuser.man got wrong permissions because i loaded it one time as writeable profile.
    under hkcu

    software\policies
    software\microsoft\windows\currentversion\group policy
    software\microsoft\windows\currentversion\policies

    Add authenticated users with full access.

    The group policy client seems to set permissons at this keys. for a logged mandatory user you will find read access again. the SID with read access in the ntuser.man is the user we used to customize the profile - so we need to put authenticated users back in.

    Now this one of the reasons why Microsoft only supports the sysprep/copyprofile Method for creation of Mandatory Profiles.

    best regards

    Markus

  6. Thanks to wehr from:

    speckytecky (13th July 2012)

  7. #4

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,572 Times in 1,252 Posts
    Rep Power
    340
    Computer Config > Policies > Admin Templates > System > Logon - Always wait for the network at computer startup and logon - Enabled

  8. Thanks to Michael from:

    Bezwick (13th July 2012)

  9. #5
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,475
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52
    Quote Originally Posted by Michael View Post
    Computer Config > Policies > Admin Templates > System > Logon - Always wait for the network at computer startup and logon - Enabled
    HI Michael

    I do this and it fixes a lot of things but not this one. I dont know why? My wallpaper will not update and my default ie home page will not update.
    But on the secdon logon they work perfectly.

    Richard

  10. #6
    Bezwick's Avatar
    Join Date
    Feb 2008
    Location
    Nottinghamshire
    Posts
    358
    Thank Post
    93
    Thanked 57 Times in 43 Posts
    Rep Power
    25
    I already had this enabled, but it seams to have stopped doing it now anyway. Not sure what caused it or how it was fixed, but dont look a gift horse and all that.

    Cheers everyone

    Quote Originally Posted by Michael View Post
    Computer Config > Policies > Admin Templates > System > Logon - Always wait for the network at computer startup and logon - Enabled

  11. #7

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,572 Times in 1,252 Posts
    Rep Power
    340
    Try reducing the GPO refresh down from the default 90 mins to less than 10 mins.

    Computer Config > Admin Templates > System > Group Policy - Group Policy refresh interval for computers. Set to 5 and 9.

    User Config > Admin Templates > System > Group Policy - Group Policy refresh interval for users. Set to 5 and 9.

    This more suitable for school environments where pupils may only use ICT for 30-40 mins at a time.

  12. Thanks to Michael from:

    Bezwick (13th July 2012)

  13. #8
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,475
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52
    Hi

    Have a look at this Windows 7 Clients intermittently fail to apply group policy at startup

    Then reboot

    We had this when machine had 1 gig nic.

    Richard

  14. Thanks to ricki from:

    Bezwick (13th July 2012)

SHARE:
+ Post New Thread

Similar Threads

  1. GPOs not applying to all users
    By JMB in forum Windows Server 2008 R2
    Replies: 10
    Last Post: 24th January 2012, 01:14 PM
  2. BGinfo not setting wallpaper on first logon
    By FN-GM in forum Windows 7
    Replies: 12
    Last Post: 7th January 2012, 05:58 AM
  3. Replies: 8
    Last Post: 9th November 2007, 01:33 PM
  4. Permission set on redirected folder not applying (GPO issue)
    By projector1 in forum Wireless Networks
    Replies: 3
    Last Post: 14th February 2007, 12:46 PM
  5. Folder redirection gpo not applying
    By pooley in forum Windows
    Replies: 9
    Last Post: 29th October 2006, 08:56 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •