Group Policies not applying to some PCs

[JTaylor]

I am running Windows 7 Workstations and Windows Server 2016 Datacenter Domain Controller. I am using group policy to manage printers on my workstations. When I push out these policies it will apply to most of the PCs in a classroom but not all. I have had this issue with multiple group policies in the past and can never workout why they aren't applying. As far as I can see there is no pattern, it is never the same PCs that policies dont apply.

 

Does anyone know any reasons why policies wouldn't apply.

 

James Taylor

ICT Technician

[NB9457]

Do you have the 'Wait for network at logon' GPO applied for all PCs?

[JTaylor]

Yes it is applied to all workstations.

[NB9457]

What info does gpresult give?

[FlowerManDan]

Are you having issues getting the printers mapped or just managing print settings? If its mapping them id say look at your print drivers and make sure that they match the machine OS that you are applying it to. If its managing them might want to check your antivirus\windows firewall settings? I had it before where after Bitdefender installed it stopped all GPOs being applied from the DC.

[JTaylor]

GPRESULT has shown that the policy i want is applied to the PC but users are unable to find the printer.

[FlowerManDan]

Is the policy applied to the computer configuration or to the user configuration? If it's printer mapping I always apply it to the user configuration.

[JTaylor]

it is computer config I shall apply to user config instead and let you know the results

[TIOAOA]

Have a look here @jtaylor it could be something to do with this windows update -

http://www.edugeek.net/forums/windows-7/172860-kb3170455-preventing-printer-installation.html

[TwistedHelixis]

I would also make sure that the IP addresses for those computers not working are not doubled in DNS.

[ricki]

try adding this reg key to machines with problem do not use GPO to apply it

 

Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "GpNetworkStartTimeoutPolicyValue"=dword:0000003c

Edited December 18, 2017 by ricki

[qwerty94]

Are you having issues getting the printers mapped or just managing print settings? If its mapping them id say look at your print drivers and make sure that they match the machine OS that you are applying it to. If its managing them might want to check your antivirus\windows firewall settings? I had it before where after Bitdefender installed it stopped all GPOs being applied from the DC.

 

How did you go about resolving the issue after Bitdefender was installed GPOs stopped applying?

[Ripleys]

I had a similar issue where my workstations could find printers but wouldn't install them over GPO. The print server had an update that changed the way my print drivers were packaged. I had to reg hack each driver to trick the server into thinking that the print drivers were packaged.

[FlowerManDan]

Sorry for not replying sooner! You may have figured this out already... To resolve this I just turned this setting off via the policy control on the BitDefender console and the policies then applied. I didn't have chance to properly look into it but I am sure there will be a way to whitelist local network addresses via the policy control!