GPO Not Applying

[enjay]

I have created a Group Policy, however for some reason it is not applying to the computers - I have run a gpupdate/force and gpupdate/boot/sync without success. The Policy has applied successfully in my office for some reason, but not any of the other locations to which it is allocated.

 

The Policy is adding a startup script, however I know that the script is good - if the batch file called in the script is run manually, it works, and if I add the Policy to a specific station via gpedit.msc, it also works.

 

Any suggestions?

[FN-GM]

If you run gpresult /r on the machine can you see the policy there?

[browolf]

use the group policy modelling wizard

[enjay]

If you run gpresult /r on the machine can you see the policy there?

No, it isn't listed.

[FN-GM]

No, it isn't listed.

 

Can you see other polices there?

[enjay]

Yes, other policies are listed, although I note some other recently-created policies haven't applied either...

[FN-GM]

You are putting this policy in place on the OU the workstations live?

[enjay]

Sorry, don't understand your question...

[FN-GM]

Right you have an OU where all your computer live? Is the group policy linked to this OU?

 

 

Thanks

[enjay]

Gotcha, and yes - the Policy is linked to the container.

 

I don't think the issue is actually the Policy itself though, as other Policies aren't applying either, so it looks more like the computers aren't checking in with Group Policy properly.

[FN-GM]

Gotcha, and yes - the Policy is linked to the container.

 

I don't think the issue is actually the Policy itself though, as other Policies aren't applying either, so it looks more like the computers aren't checking in with Group Policy properly.

 

Well when you do a gpresult the other polices show but the new one doesnt so it generally means that all but the new one is applying. What makes you think it isnt working?

[Hightower]

Also, you can dictate which users/groups pick up the policies. If you only have it set for Domain Admins say, it won't apply even if it is assigned to the correct OU for any other user. If you want it for all users makes sure the filters are set for Authenticated Users.

[enjay]

Well when you do a gpresult the other polices show but the new one doesnt so it generally means that all but the new one is applying. What makes you think it isnt working?

When I do a gpresult, I see Policies which I applied a few weeks ago, but not two which I applied yesterday.

[enjay]

Also, you can dictate which users/groups pick up the policies. If you only have it set for Domain Admins say, it won't apply even if it is assigned to the correct OU for any other user. If you want it for all users makes sure the filters are set for Authenticated Users.

It was set to Authenticated Users, but I have added the computers by name as well and will try again...

[sparkeh]

Have you checked the event log for any gpo errors?

Do you have multiple domain controllers? If so are the policies replicating?

[enjay]

There are Event Viewer messages relating to a different Policy not applying, but nothing on these ones...