[1909, ou] GPUpdate computer policy could not be updated Windows 10

[GeneralPavlova]

Hi all,

 

I've recently reimaged a number of laptops on our network. To install managed software and pull all the GPOs from our domain controller I need to run GPUpdate from a domain admin user account. When I run the GPUpdate, I get the following error:

 

C:\Windows\system32>gpupdate /forceUpdating policy...Computer policy could not be updated successfully. The following errors were encountered:The processing of Group Policy failed. Windows attempted to read the file \\.local\SysVol\.local\Polic ies\{A1A0B568-71D9-4C4D-9DCF-CD9F431626C8}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:a) Name Resolution/Network Connectivity to the current domain controller.b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).c) The Distributed File System (DFS) client has been disabled.User Policy update has completed successfully.The following warnings were encountered during user policy processing:The Group Policy Client Side Extension Folder Redirection was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance.To diagnose the failure, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.

 

I've run NSLOOKUP, and it correctly reads back the IP of our primary domain controller. When I run NSLOOKUP SCIENCE-LAPT103 (the name of the laptop), it correctly reads back its own IP address and hostname. I've also gone through and checked the RSoP.

 

I've tried running the command as a .bat, in PowerShell, in elevated CMD. I've tried flushing the DNS config using ipconfig /flushdns, I've also done a complete networking reset on the OS, removed it from the domain and re-added it (including deleting the computer from AD and trying again), but it is consistently failing.

 

Funnily enough, it does seem to pull through some GPOs after a while, I've checked these GPOs on the domain controller and they are all link-enabled and enforced, so I don't believe that is the issue.

 

Has anyone else had experience with this and found a solution? I'd really appreciate a fresh set of eyes on this as I believe I've exhausted every option I can think of.

 

Many Thanks,

 

Liam

Edited June 11, 2021 by GeneralPavlova

[Oaktech]

Can you see that gpt.ini file?

 

Have you got 'domain\domain computers' 'read' in the delegation for policies containing computer settings?

[GeneralPavlova]

Hello, there is no gpt.ini file on the target computer under C:\Windows\System32\Group Policy\

 

The gpt.ini file just has three lines:

 

[General]Version=7displayName=New Group Policy Object

[Oaktech]

but what about navigating to:

\\.local\SysVol\.local\Policies\{A1A0B568-71D9-4C4D-9DCF-CD9F431626C8}\gpt.ini

can you read that?

[GeneralPavlova]

My apologies, the gpt.ini file which is on the server has only three things. Is it possible that it is pointing to the wrong policy object?