Group policy Randomness

[jertsy]

Hi all

 

I hope someone can shed some light on this for me.

 

I have 5 GPO's that apply to staff and what I am finding is that when some staff they logon none of them are applying, I have reboot the PC several times and then they apply. Its a user config policy so I cant understand why re-booting the PC should make any difference. Its happening to different staff on different PC's, some staff logon fine but it seems some have the issue.

Interestingly when I do GPupdate/force I get a message, something about not being able to see a domain controller but as I say it will just start working on its own. I will get the exact message next time it happens.

 

Any help greatly appreciated.

 

jertsy

[MordyT]

On a PC that is having an issue, when gpupdate is throwing that error, begin troubleshooting a connection to the sysvol share

[jertsy]

Thanks for the reply MordyT. Do you thinks its a PC issue then? is this a common thing then? Sorry if its a dumb question but im new to this.

[Sheridan]

I've had a similar issue to this in the past - it seems to be cause by the network card not being fully functional at the point of boot and not seeing the DC's to apply group policies.

 

It was on Fujitsu PCs and a latest driver install for the NIC seemed to sort it out.

[MordyT]

Don't know where the issue is. You need to do some troubleshooting to figure out where is broke. Gpresult /h is another thing to try

[jertsy]

Thanks for the suggestions. I did some digging on a PC that was exhibiting the issues, I kept getting 1058 and 1129 errors in event viewer. After more digging it turns out DC02 had not received replication of all the GPO's from DC01, so any PC's looking at DC02 could not load the GPO's correctly. DC02 was demoted a few days ago and then promoted last night, replication occurred and so far I have only seen the issue a couple of times and I am continuing to monitor as it may be that a new DC has appeared and things are settling down. If I get the issue further I thing a new DC03 might do it with DC02 being demoted permanently.