Windows 8.1 not applying policies

[phil0569]

Hi, we have just started to look at using Windows 8.1. I got my first tablet the other day and setup a PC with Win 8.1

 

Both machines joined the domain with out a problem and pull down the policies set out in the default domain policy. I moved the two machines to a sub OU and thought I would apply some IE Policies just for those machines. We have a 2012R2 DC so I set about setting up the gpp for IE 11, proxy and home page. Went through the process, remembering to press f6 to highlight the appropriate areas required. Restarted the machines and nothing, the policy didn't apply. In fact when I did a gpresult it didn't even show the policy existed.

 

After lots of head scratching and trips to Google, I did the same settings in the default domain policy. This time they worked!!!! Strange. So I tried some different setting in the sub gpo, again these did not apply, but yet they would apply if they were in the default domain policy.

 

Both machines are running win 8.1, one is wireless the other cabled - so I can rule out slowness in login.

Both machines have been moved to the OU where the policy is linked and enforced - so I can rule out stupidity.

Both machines are up to date with their updates - so I can rule out 'out of date' software.

Both machines have their firewalls turned off - so I can rule out connection issues.

 

 

To summarise.... If the setting is in the default domain policy it works, if it is further down the tree it wont.

 

Has anyone any ideas please, before I loose any more of my hair. Didn't have much to start with.....

[Michael]

Try creating a new OU in the root, move the computer objects into it, then link your Windows 8 policy you've created. If this works, then all I can think of is a conflict of policy, or indeed policy inheritance is blocking policies being applied.

 

When you're making changes at the default domain level, are you editing the actual default domain policy, or linking a GPO you've created underneath it (recommended) for this kind of testing. This leaves the default domain policy 'as is', so if you create a problem you can quickly unlink it.

[phil0569]

I have already tried creating a new OU in the root and moving the machine to it then linking to it. This didn't work. I have removed (deleted) the GPO and re-created it thinking corruption, still nothing.

 

Because I was only doing IE changes tried applying it to the default domain policy, which worked. I removed the changes from that and tried creating a new GPO at root level and that applied. So you would think that inheritance was blocked, but it isn't. Conflict of policy???? Because it s IE 11 it is the only place we have used the setting. But what is strange it does not show any GPO's applying after root level, whether they are win 7 or win 8 only changes.