Group policy not applying on 1 computer in a IT room

[Sector001]

Hi All,

 

I have 1 computer in an IT room which is not applying the group policy.

I have deleted the policy cahce on the computer from C:\ProgramData\Microsoft\Group Policy\History. Then I have done gpupdate / force, then have rebooted the computer and still not pulling the polices down.

 

All the other computers in the room are working correctly.

 

Thank you to anyone that can help.

[fredbayker]

Have you tried a gpresult on the machine in question?

[Koldov]

Just troubleshoot all the basics:

 

Have you just noticed this? Has it ever had GPO's applying (if so - what has changed)?

Has it got network connectivity?

Is the PC on the Domain?

Can it see a DC, ping by IP and FQDN (what is the result of echo %logonserver%)?

Is the PC in the correct OU?

What are the rsop or gpresult details?

 

EDIT: I presume the space between gpupdate / force is a typo, as there should not be a space = gpupdate /force (and is being run in an admin CMD).

Edited May 13, 2019 by Koldov

[Sector001]

Hi

 

This was noticed middle of last week and was working up to then.

 

It has a network connection and students are able to logon and is on the schools domin.

 

Yes we can ping our DC from the computer and shows it when we do %logonserver%

 

The PC is in the same OU as the other PC's that are in the same room and theys are all working correctly.

 

When we run the rsop it look correct.

 

And yes gpupdate / force was just a typo in this post.

[TechMonkey]

Does it persist after a rebuild?

[Koldov]

Students may be logging on with 'cached credentials' (unless you have specified that this is not allowed).

 

When we run the rsop it look correct.

 

When you say 'it looks correct', does this mean that it shows the GPO's are applying?

 

Why do you think they aren't?

 

Is there a specific GPO/GPP that you are looking for, or is it that you think none of them have actually applied?

 

Are you looking for user or computer group policies applying?

 

Gpresult (as mentioned above by @fredbayker may show more info) instead of RSOP.

[Sector001]

What do you mean by rebuild?

[andyfield]

Try this...

 

Delete the Registry.Pol file located in "C:\Windows\System32\GroupPolicy\Machine" (hidden folder) and then run gpupdate /force

[TechMonkey]

How do you image machines? If a machine goes really, really wrong how do you get it back to a working copy of Windows?

[DrBeaker]

Try this...

 

Delete the Registry.Pol file located in "C:\Windows\System32\GroupPolicy\Machine" (hidden folder) and then run gpupdate /force

 

Used this a fair few times! Sometimes with mixed results!

How do you image machines? If a machine goes really, really wrong how do you get it back to a working copy of Windows?

 

Yes, how are you imaging the machines at current?

[witch]

Sometimes the simple stuff works - take it out of the OU and reboot, then put it back