+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 29
Windows Server 2008 R2 Thread, GPO's not being applied after upgrade to 2008 R2 in Technical; I recently just upgraded my PDC from 2008 to 2008 R2 and after what I thought was a smooth upgrade ...
  1. #1

    Join Date
    Jan 2009
    Location
    Nebraska
    Posts
    55
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    GPO's not being applied after upgrade to 2008 R2

    I recently just upgraded my PDC from 2008 to 2008 R2 and after what I thought was a smooth upgrade I have come to find that GPO's are not being applied to anyone (Windows XP or 7, Server 2003, or Server 2008 R2). During the process of upgrading I also upgraded the Domain Functional Level from 2003 to 2008 R2 as this is our only DC and thought this was a logical solution. Now not even the simplest GPO is applied to clients. I have created new GPO's to test and even those don't apply. Did I miss something?

  2. #2
    p858snake's Avatar
    Join Date
    Dec 2008
    Location
    Queensland
    Posts
    1,490
    Thank Post
    37
    Thanked 175 Times in 151 Posts
    Blog Entries
    2
    Rep Power
    51
    try doing "gpupdate /force"?

  3. #3

    Join Date
    Jan 2009
    Location
    Nebraska
    Posts
    55
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Have done that on both the server and clients. The only thing that I noticed there was after the User/Computer Policy Refresh has completed line there is a line that reads: To check for errors in policy processing, review the event log. Which I have done and there are no errors or warnings.

    Edit: I have even disjoined the domain and rejoined and no change.
    Last edited by bmittleider; 26th July 2010 at 07:11 AM.

  4. #4
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,475
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52
    Hi

    We have just done the same and had the same problems.

    Here we put in a new server with a new name and set it to the primary domain controller and dhcp etc and shut the old one down.

    We tried piping paths through dfs and that did not work so policies did not apply so they have been set back to direct to the server.

    We also had problems with scripts that not all scrips had been changed and this meant that the policies could not find the url and so bugged out and no further policies were applies.

    The next one we had was the h drive as going through dfs and so no user policies applied.

    The last thing we had were some machines being too fast for the servers and not picking up group policy so we had to put a registry key in the clients to make them wait for the servers.
    Code:
    Windows Registry Editor Version 5.00
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "GpNetworkStartTimeoutPolicyValue"=dword:0000003c
    Richard

  5. Thanks to ricki from:

    contink (2nd September 2010)

  6. #5

    Join Date
    Jan 2009
    Location
    Nebraska
    Posts
    55
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Applied the registry setting to clients and still no change.

  7. #6

    teejay's Avatar
    Join Date
    Apr 2008
    Posts
    3,152
    Thank Post
    284
    Thanked 767 Times in 578 Posts
    Rep Power
    334
    Have you checked the firewall setting on both the client and the server?

  8. #7

    Join Date
    Jan 2009
    Location
    Nebraska
    Posts
    55
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    No, I guess I didn't think to check that since I can browse to the sysvol folder and do most common tasks that require connecting back to the server. What would I be looking for specifically in the firewall that would block GPO?

  9. #8
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,475
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52
    Applied the registry setting to clients and still no change.

    How did you apply this setting you did install it manually on one machine to test as you cannot install it with gpo as gpos not being applied.

    Richard

  10. #9

    teejay's Avatar
    Join Date
    Apr 2008
    Posts
    3,152
    Thank Post
    284
    Thanked 767 Times in 578 Posts
    Rep Power
    334
    Quote Originally Posted by bmittleider View Post
    No, I guess I didn't think to check that since I can browse to the sysvol folder and do most common tasks that require connecting back to the server. What would I be looking for specifically in the firewall that would block GPO?
    Try turning off the firewall on both client and server temporarily. Its should just work, but if there are no error logs on the client it sounds like it's not even seeing the policy.

  11. #10

    Join Date
    Jan 2009
    Location
    Nebraska
    Posts
    55
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by ricki View Post
    Applied the registry setting to clients and still no change.

    How did you apply this setting you did install it manually on one machine to test as you cannot install it with gpo as gpos not being applied.

    Richard
    Yes I entered it manually. Rebooted. Logged in, waited a couple minutes just to be on the safe side. Nothing. Rebooted again as sometimes GPO's are just slow. Logged in, waiting again and nothing.

  12. #11

    Join Date
    Jun 2005
    Location
    London, UK
    Posts
    115
    Thank Post
    0
    Thanked 3 Times in 3 Posts
    Rep Power
    20
    Were all the forest and domain AD schema updates applied correctly prior to promotion of the first 2008 R2 DC?

    (also, pet annoyance of mine - there is no such thing as a PDC in an Active Directory environment)

  13. #12

    Join Date
    Jan 2009
    Location
    Nebraska
    Posts
    55
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by Slartibartfast View Post
    Were all the forest and domain AD schema updates applied correctly prior to promotion of the first 2008 R2 DC?

    (also, pet annoyance of mine - there is no such thing as a PDC in an Active Directory environment)
    Only one DC. Originally had Server 2008 x64 and was upgraded to R2. Nowhere did I read about having to apply AD schema updates myself. Shouldn't that be done in the upgrade installer? However after the upgrade the domain functional level was raised from 2003 since we don't have any DC on 2003 anymore and only the one on 2008 R2. Did I miss something when raising the domain functional level?

  14. #13

    Join Date
    Jan 2009
    Location
    Nebraska
    Posts
    55
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    teejay: Disabling firewall had no effect.

  15. #14

    teejay's Avatar
    Join Date
    Apr 2008
    Posts
    3,152
    Thank Post
    284
    Thanked 767 Times in 578 Posts
    Rep Power
    334
    I think Slarti might be onto something there, you need to run adprep /forestprep and adprep /domainprep before you upgrade. You could try running them now, but make a backup first.

  16. #15

    Join Date
    Jan 2009
    Location
    Nebraska
    Posts
    55
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by teejay View Post
    I think Slarti might be onto something there, you need to run adprep /forestprep and adprep /domainprep before you upgrade. You could try running them now, but make a backup first.
    That was done during the normal upgrade process to R2. I had to run those commands during the upgrade I do remember that.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. upgrade to 2008 r2 from 2008 server
    By ful56_uk in forum Windows Server 2008 R2
    Replies: 5
    Last Post: 21st June 2010, 09:05 AM
  2. Replies: 10
    Last Post: 12th October 2009, 11:16 AM
  3. Viewing GPO settings being applied
    By fafster in forum Windows
    Replies: 9
    Last Post: 13th May 2008, 02:32 PM
  4. GPO Not Being Applied
    By lovelldr in forum Windows
    Replies: 1
    Last Post: 18th July 2007, 08:16 AM
  5. GPO's not being applied
    By pooley in forum Windows
    Replies: 7
    Last Post: 9th November 2006, 10:52 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •