Question for someone really good with Group Policy and RM

[theo_logical]

I have an RM CC4 network, and I have some vanilla users and PCs outside of the Establishments OU in an OU at the top of my AD structure.

 

I cannot prevent RM policies applying to this OU and user groups in it even if I block inheritance, how can this be possible? Not only that I cannot get my new policies to apply to my new PCs and users.

 

Yes, I've tried gpupdate /force and /sync

Yes, I've looked at RSOP and GPResults which don't seem to even acknowledge the existence of my policies

 

Thanks

[dapaulio]

Sounds quite odd. I agree i am under the impression if you block inheritance. Group policies above are not applied unless they Are the group policies enforced. Not sure weather the enforced part is true I read it somewhere onetime.

 

Are your group policies enforced?

[dapaulio]

Just found this

https://blogs.technet.microsoft.com/grouppolicy/2009/12/18/tales-from-the-community-enforced-vs-block-inheritance/

[theo_logical]

Thanks for your input dapaulio but I think I might be getting somewhere.

 

I don't think it's a problem with AD or my GPO setting on the server I think it's more to do with the local PC.

 

The reason I say that is because I removed both of my test laptops from the domain then added them both back to the domain. One of them now successfully receives the group policies the other still doesn't, same test user both laptops in the same OU.

 

On the laptop still failing to apply GP I've deleted all details in here %systemroot%\System32\GroupPolicy but without success.