talksr Posted March 8, 2017 Posted March 8, 2017 I am out of ideas on this... I have a 2016 server and Windows 10 client systems. I have a number of GPOS: Enable RDC Disable Firewall Google Chrome MSI Set Default Browser Start Menu and Task Bar Pol to name just a few. They are in the correct AD locations to match the locations of my systems. The security filtering is set to Authenticated Users. I have also added for some, the security group I created for our domain users. If I log in as an administrator, and run GPResult, everything is coming over as expected. If I log in as a domain user on the same system and do the sane, there are no applied and no denied GPOs in the report. It is as if there is just nothing there. Does anyone have any ideas on what could be wrong?
mtillbrook Posted March 8, 2017 Posted March 8, 2017 have you tried the group policy modelling wizard from the GPMC? The fact that gpresult, when logged on as a user, isn't showing anything might point to a permissions things with running it as a user. You should get at least the default domain policy etc
talksr Posted March 8, 2017 Author Posted March 8, 2017 have you tried the group policy modelling wizard from the GPMC? The fact that gpresult, when logged on as a user, isn't showing anything might point to a permissions things with running it as a user. You should get at least the default domain policy etc Hi, yes I have and when I run the GPMC is comes back with all policies applied which is what is confusing me. Everything seems to be a success. I am running GPMC on the same computer I am physically testing on.
mtillbrook Posted March 8, 2017 Posted March 8, 2017 have a browse through the event logs and see if you are getting any group policy errors. It sounds like the policies are setup correctly and that the server thinks they are being applied - that would point ot the client not communicating with the server correctly possiblely?
talksr Posted March 8, 2017 Author Posted March 8, 2017 have a browse through the event logs and see if you are getting any group policy errors. It sounds like the policies are setup correctly and that the server thinks they are being applied - that would point ot the client not communicating with the server correctly possiblely? It's very odd. If I run a gpupdate /force and then check the Event Viewer, it is showing: Evt 15702 Group Policy The Group Policy settings for the computer were processed successfully. Sew settings from 11 Group Policy objects were detected and applied. It is showing as though everything is fine. This is a gpupdate /force as one of the effected users.
mtillbrook Posted March 8, 2017 Posted March 8, 2017 It's very odd. If I run a gpupdate /force and then check the Event Viewer, it is showing: Evt 15702 Group Policy The Group Policy settings for the computer were processed successfully. Sew settings from 11 Group Policy objects were detected and applied. It is showing as though everything is fine. This is a gpupdate /force as one of the effected users. all a bit weird. Are any policies being applied at all? I assume you have done the obvious of rebooting the client etc. Is there anything in the event log on the server at all? Something somewhere can't be happy! One thing to try could be taking the client machine off the domain and putting it back on again?
talksr Posted March 16, 2017 Author Posted March 16, 2017 (edited) all a bit weird. Are any policies being applied at all? I assume you have done the obvious of rebooting the client etc. Is there anything in the event log on the server at all? Something somewhere can't be happy! One thing to try could be taking the client machine off the domain and putting it back on again? According to GPReport, no applied GPOs at all when I log in as a domain user. When I go on as domain administrator, they are all coming over as expected in GPResult. I have removed it from domain and re added and nothing has changed. Edited March 16, 2017 by talksr
kennysarmy Posted March 16, 2017 Posted March 16, 2017 According to GPReport, no applied GPOs at all when I log in as a domain user. When I go on as domain administrator, they are all coming over as expected in GPResult. I have removed it from domain and re added and nothing has changed. When you say "no applied GPOs" - does it list the GPO's but say why they are not applied? No clues whatsoever? Is this happening on ALL your clients? Did it used to work?
talksr Posted March 16, 2017 Author Posted March 16, 2017 When you say "no applied GPOs" - does it list the GPO's but say why they are not applied? No clues whatsoever? Is this happening on ALL your clients? Did it used to work? Hi, under Applied GPOs there is just nothing. When I go on as domain administrator, everything that should be there is there. I only have one testing system at the moment and this has not happened before as it is a brand new set up, so nothing to cross-compare with. I have tried creating users in different OUs, with different permissions etc, but has made no difference.
talksr Posted March 16, 2017 Author Posted March 16, 2017 When you say "no applied GPOs" - does it list the GPO's but say why they are not applied? No clues whatsoever? Is this happening on ALL your clients? Did it used to work? I have been doing: Del GPReport.html Gpupdate /force Gpresult GPReport.html and refreshing chrome Have done this about five times and finally three of my policies have applied. Have taken some pics on my iPad as I am working on two different computers so can't screenshot and get it all on here. Chrome policy seems to be working but the Start Menu and Task Bar pol is clearly not working as the Internet Explorer icon and Market place icons are still visible on the task bar.
kennysarmy Posted March 16, 2017 Posted March 16, 2017 I have been doing: Del GPReport.html Gpupdate /force Gpresult GPReport.html and refreshing chrome Have done this about five times and finally three of my policies have applied. Have taken some pics on my iPad as I am working on two different computers so can't screenshot and get it all on here. [ATTACH=CONFIG]42197[/ATTACH] [ATTACH=CONFIG]42198[/ATTACH] Chrome policy seems to be working but the Start Menu and Task Bar pol is clearly not working as the Internet Explorer icon and Market place icons are still visible on the task bar. So it's working now?
talksr Posted March 17, 2017 Author Posted March 17, 2017 Half working, about three of the policies are showing as being applied, but not the others. Very strange.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now