User GPO not Processing

[tmcd35]

Hi,

 

Hope everyone is having a better start of term than we are here! We upgraded to Win7 over the summer and everything looked like it was going great until we noticed, yesterday, that user policies are not being applied. Obviously this is leaving us with something of a security hole (and giving me a major headache!).

 

Can anyone give me any ideas of what might cause this or where to look for the answers? The computer policies are applying correctly. The User policies are showing up under 'inheritance' correctly. However both a RSoP on the server and a GPResult /R on any client shows the computer GPO's being applied, but not the users GPOs.

 

Thanks in advance for any guidance offered.

[tmcd35]

Okay, think this is a self-inflicted problem - Someone (me (idiot)) set Loopback Processing to 'Replace' in the 'Default Domain Policy'. I've disabled loopback in this policy however it hasn't reversed the damage. Any ideas?

[hermand]

Are the computer policies in the correct OU? Does the computer OU have block inheritence? Are the correct security groups applied to the policy, and are the users definitely in those groups?

 

That said, RSOP should be able to provide you with plenty of detail. You are looking at the applied / denied section under the USER section policies aren't you? That's caught me a few times.

[Techdw]

If you do a gpupdate /force, does it error ? I had this problem last week, was a GPO not working correctly, had to recreate it.

[tmcd35]

Thanks guys, actually I had loopback processing turned on in the RSoP as well so it was stripping out the user policies.

 

All working now.