GPO's not being applied

[pooley]

Ok I have a 2k3 server (DC)

XP Clients

All current GPO's are being applied ok - but any new gpo's I asign are not being applied.

On the server the GP Modeling wizard is showing that the GPO should be aplied sucessfully. But it isnt.

A GPresult on a client pc shows

C:\Documents and Settings\bobby>gpresult

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 08/11/2006 at 12:39:30


RSOP results for PENYBONTPRIMARY\bobby on ITROOM01 : Logging Mode
------------------------------------------------------------------

OS Type:                     Microsoft Windows XP Professional
OS Configuration:            Member Workstation
OS Version:                  5.1.2600
Domain Name:                 PENYBONTPRIMARY
Domain Type:                 Windows 2000
Site Name:                   Default-First-Site-Name
Roaming Profile:
Local Profile:               C:\Documents and Settings\bobby
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
    CN=ITROOM01,OU=ITROOM,OU=School Computers,DC=penybontprimary,DC=gov,DC=uk
    Last time Group Policy was applied: 08/11/2006 at 12:32:52
    Group Policy was applied from:      ppserver.penybontprimary.gov.uk
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
    -----------------------------
        Default Domain Policy
        Interactive security
        Office2003
        MSI INSTALLS
        Printer install
        Office2003

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        desktop
            Filtering:  Not Applied (Empty)

        Local Group Policy
            Filtering:  Not Applied (Empty)

    The computer is a part of the following security groups:
    --------------------------------------------------------
        BUILTIN\Administrators
        Everyone
        BUILTIN\Users
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        ITROOM01$
        Domain Computers
        CERTSVC_DCOM_ACCESS


USER SETTINGS
--------------
    CN=bob Test,OU=Test,DC=penybontprimary,DC=gov,DC=uk
    Last time Group Policy was applied: 08/11/2006 at 12:33:27
    Group Policy was applied from:      ppserver.penybontprimary.gov.uk
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
    -----------------------------
        Default Domain Policy
        desktop
        Printer install

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)

        MSI INSTALLS
            Filtering:  Not Applied (Empty)

        Interactive security
            Filtering:  Disabled (GPO)

        Office2003
            Filtering:  Not Applied (Empty)

        Office2003
            Filtering:  Not Applied (Empty)

    The user is a part of the following security groups:
    ----------------------------------------------------
        Domain Users
        Everyone
        BUILTIN\Users
        BUILTIN\Administrators
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        LOCAL
        CERTSVC_DCOM_ACCESS

C:\Documents and Settings\bobby>

Now under the user policy bit ther should be a GPO called "Test user GPO"

I'm strugglig a bit here, cant understand why old gp's stil apply but new dont.

Have tried re-creating gpo
Have tried Maing new OU and applying new gpo to it
Have created a new user too.

The only change to the box as far as DNS goes is I added a DNS forwarder to our LEA external ds box (needed for exchange)

Any help/pointer gratefully recived.
Si

[djm968]

The external DNS forwarder should be configured on the 2K3 DC.

Have you tried GPUPDATE /FORCE on the client?

[Geoff]

If you do GP Modelling in the GPMC what does that think?

[pooley]

Gpupdate /force does not make any difference

GP modelling says my Temp GPO should be applied with no problems

[djm968]

Are there any "userenv" errors in the application event log on the client?

Also try running rsop.msc on the client

[Geoff]

If you do results rather than modelling in the GPMC what does that reveal?

[plexer]

Is replication working correctly?

Ben

[pooley]

Replication is working fine - no errors

GPMC Results shows = My Test user "Bobby" will not have "Test GPO" applied when he logs on. This isnt good!! lol

GPMC Modelling for "Bobby" shows the "Test GPO" will be applied.

Now im even more confused