GPO's not being applied

[pooley]

Ok I have a 2k3 server (DC)

 

XP Clients

 

All current GPO's are being applied ok - but any new gpo's I asign are not being applied.

 

On the server the GP Modeling wizard is showing that the GPO should be aplied sucessfully. But it isnt.

 

A GPresult on a client pc shows

C:\Documents and Settings\bobby>gpresult

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 08/11/2006 at 12:39:30


RSOP results for PENYBONTPRIMARY\bobby on ITROOM01 : Logging Mode
------------------------------------------------------------------

OS Type:                     Microsoft Windows XP Professional
OS Configuration:            Member Workstation
OS Version:                  5.1.2600
Domain Name:                 PENYBONTPRIMARY
Domain Type:                 Windows 2000
Site Name:                   Default-First-Site-Name
Roaming Profile:
Local Profile:               C:\Documents and Settings\bobby
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
   CN=ITROOM01,OU=ITROOM,OU=School Computers,DC=penybontprimary,DC=gov,DC=uk
   Last time Group Policy was applied: 08/11/2006 at 12:32:52
   Group Policy was applied from:      ppserver.penybontprimary.gov.uk
   Group Policy slow link threshold:   500 kbps

   Applied Group Policy Objects
   -----------------------------
       Default Domain Policy
       Interactive security
       Office2003
       MSI INSTALLS
       Printer install
       Office2003

   The following GPOs were not applied because they were filtered out
   -------------------------------------------------------------------
       desktop
           Filtering:  Not Applied (Empty)

       Local Group Policy
           Filtering:  Not Applied (Empty)

   The computer is a part of the following security groups:
   --------------------------------------------------------
       BUILTIN\Administrators
       Everyone
       BUILTIN\Users
       NT AUTHORITY\NETWORK
       NT AUTHORITY\Authenticated Users
       ITROOM01$
       Domain Computers
       CERTSVC_DCOM_ACCESS


USER SETTINGS
--------------
   CN=bob Test,OU=Test,DC=penybontprimary,DC=gov,DC=uk
   Last time Group Policy was applied: 08/11/2006 at 12:33:27
   Group Policy was applied from:      ppserver.penybontprimary.gov.uk
   Group Policy slow link threshold:   500 kbps

   Applied Group Policy Objects
   -----------------------------
       Default Domain Policy
       desktop
       Printer install

   The following GPOs were not applied because they were filtered out
   -------------------------------------------------------------------
       Local Group Policy
           Filtering:  Not Applied (Empty)

       MSI INSTALLS
           Filtering:  Not Applied (Empty)

       Interactive security
           Filtering:  Disabled (GPO)

       Office2003
           Filtering:  Not Applied (Empty)

       Office2003
           Filtering:  Not Applied (Empty)

   The user is a part of the following security groups:
   ----------------------------------------------------
       Domain Users
       Everyone
       BUILTIN\Users
       BUILTIN\Administrators
       NT AUTHORITY\INTERACTIVE
       NT AUTHORITY\Authenticated Users
       LOCAL
       CERTSVC_DCOM_ACCESS

C:\Documents and Settings\bobby>

 

Now under the user policy bit ther should be a GPO called "Test user GPO"

 

I'm strugglig a bit here, cant understand why old gp's stil apply but new dont.

 

Have tried re-creating gpo

Have tried Maing new OU and applying new gpo to it

Have created a new user too.

 

The only change to the box as far as DNS goes is I added a DNS forwarder to our LEA external ds box (needed for exchange)

 

Any help/pointer gratefully recived.

Si

[djm968]

The external DNS forwarder should be configured on the 2K3 DC.

 

Have you tried GPUPDATE /FORCE on the client?

[Geoff]

If you do GP Modelling in the GPMC what does that think?

[pooley]

Gpupdate /force does not make any difference

 

GP modelling says my Temp GPO should be applied with no problems

[djm968]

Are there any "userenv" errors in the application event log on the client?

 

Also try running rsop.msc on the client

[Geoff]

If you do results rather than modelling in the GPMC what does that reveal?

[plexer]

Is replication working correctly?

 

Ben

[pooley]

Replication is working fine - no errors

 

GPMC Results shows = My Test user "Bobby" will not have "Test GPO" applied when he logs on. This isnt good!! lol

 

GPMC Modelling for "Bobby" shows the "Test GPO" will be applied.

 

Now im even more confused