GPO's not being applied after upgrade to 2008 R2

[bmittleider]

I have created an account and added it to the Domain Admins group. This user successfully maps to the drive. However the built-in Administrator account cannot map the drive. Have tested on Windows 7, Server 2008 R2 and Server 2003 R2. If the user that has been added to Domain Admins logs into any of those OS it works as expected. Didn't have that problem with Server 2008. Could it be a new security option in the schema?

 

Edit: As far as UAC, Server 2003 doesn't have that so on that computer it wouldn't be an issue.

Edited July 27, 2010 by bmittleider

[PiqueABoo]

Hmm.. in the targeting are you picking the "Administrator" with the native user browser/picker thingy ("from this location" = your *domain*) as opposed to just typing it in the box? Did you select match by SID? Edited July 27, 2010 by PiqueABoo

[bmittleider]

Yes I was matching by SID and it still doesn't work. Not sure what is happening but now it's less of a problem since the rest of the GPOs are functioning. I will continue to troubleshoot but not in a high priority.

 

Thanks to everyone who posted suggestions. Hope someone can have an easier time fixing it than I did.

[contink]

Had the same issue and found that, for me at least the issue was a race condition thanks to the LAN NIC's getting a bit over zealous..

 

Running this on each problem machine then forcing the gpupdate again solved it.

 

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"GpNetworkStartTimeoutPolicyValue"=dword:0000003c