GPO's apply fine, GPP's dont..

[Little-Miss]

Trying to apply some GPP's to Win7 machines and not having any luck.

 

All my GPO's apply without any issues so i'm stumped. Is it a permissions issue. The majority of what i want to apply are reg edits like the wallpaper, trying to hide/remove some of the Win7 rubbish the users don't need. I've also tried testing by copying a file from a network share on to C: and that hasn't worked either.

 

Any thoughts?

[Little-Miss]

Apply once and do not reapply isn't ticked...

[glennda]

it might be a permissions issue with regards to the driver - if you try and manually add the printer does it prompt for admin auth?

[Little-Miss]

No printers..(though that has happened a couple of times).

 

Its reg edits for things like this http://www.edugeek.net/forums/windows-7/47835-windows-7-gotchas-tips-fyi.html#post438279 and telling it to hide certain folders..

[Little-Miss]

anyone? lol

[kmount]

Anything in the event logs?

[sonofsanta]

In that group policy log I pointed you at in t'other thread - do you have any 4016 & 5016 events listed? Those are (respectively) the start of a GPP being processed and the completion of GPP processing. You get a pair of each for files, folders, drive maps, printers... etc. - it groups all GPPs from GPOs into one processing (so if you have two GPOs that each specify a GPP file, they get processed at the same time as a single pair of 4016/5016 events) Edited November 28, 2012 by sonofsanta

[Little-Miss]

Right, there are lots of 4016 & 5016's. Plus, I can find my the GPO's containing my GPP's. So, its picking them up but just not applying anything...

 

I've got myself confused....

 

(happy bday @kmount!)

[glennda]

what do you get if you type gpresult from a command prompt?

[Michael]

For your reference (if you still have XP workstations), you need the GPP Client Side Extensions installed. Windows Vista and 7 support this out the box and require no update.

 

Also - are you applying GPPs via a big single GPO or separate linked GPOs? And are you applying settings on a user or computer basis or both? Can you map drives via GPP as a test?

[pete]

Are you copying in the user or machine context? Specifically, if you're trying to copy to the root of C: in the user context, windows will tell you to GTFO due to permissions.

 

What happens if you attempt to copy \\server\share\Hedgehog.jpg to c:\windows\temp in the machine context (Computer Configuration)?

[Little-Miss]

@glennda GPresult lists them in the Applied GPO list.

 

For example the wallpaper issue im trying to fix is reg entry, says its GPO applied but when i look at the registry it still has the old settings.

@Michael remember the proxy reg that i couldn't get to work? This is the same thing.

 

This is a win7 machine im trying to get these to work on, not XP. XP machines currently still happy with BGInfo.............or is that the point. Would the reg overwrite BGInfo?

 

Regardless, anything im trying to run as a preference doesn't work.

 

I will try mapping a drive and @pete i have tried copying a file \\server\staff common\me\test.txt to c:\windows\temp.txt but it doesnt work.

 

Is it where im copying it from?

 

You know when you start to lose track yourself of the problem....or is that me?

[Little-Miss]

AAAARRRRGGHGHGHGHHGHGHGHHHHHHHHHHHHHHHHHHHHHHH

 

You know when you've stared at the same thing all day and have got NOWHERE!?!!

[Little-Miss]

im kinda at my wits end with this now.

 

I created a new OU, created a new virtual machine. Only added the reg edit for changing wallpaper. Still nothing.

 

I actually really hate Windows 7 on the network at the moment....

[soveryapt]

This might sound strange (in the fact that you would assume if you didn't do this it would apply to everything) but try using the "Item Level Targetting" on the Common Tab to specifically select the computers you want to apply to (if you want to apply to them all, use the Domain Computers standard group (unless you have your own such group). That seemed to make things work where I've had issues before with GPP.

[Little-Miss]

Will defo try that...

 

BUT just after writing that post, my wallpaper issue seems to have fixed itself...*scratches head*. I hate computers sometimes. Let me see how other things are..

[soveryapt]

LOL .. I know .. GPP seem to be as bad as GPO were a number of years back (and some still seem to be today) .. they apply at their will to show they are the real boss, not us .. lol ..

[Little-Miss]

this is very true because the wallpaper that was working has now reverted back to the old one..

[Cache]

What result do you get is you use the Group Policy Management Console to generate a Group Policy Result for the workstation and user?

 

It should list any Group Policy Preferences applied to either the user/computer in the relevent bit. I've tested our, if you have client side targeting enabled on the policy and it doesn't meet the criteria then it doesn't list it at all.

[glennda]

on a client type gpresult /r at a command prompt

[mthomas08]

We had an issue with our netlogon folders not syncronising to other servers. Have you got multiple DCs? If so load up one of them and check your GP settings - you can choose server some where. Just trying to remember where - I did this and found that one server was not replicating GP settings.

 

I changed our replication to what microsoft suggested and it fixed a lot of problems.

[CommodoreS]

Could it by any chance be this setting?

 

Computer Config>Policies>Admin Templates>System>Scripts

Run startup scripts asynchronously

 

If not already set to Enabled, try changing this to Enabled.

[ZeroHour]

Are you using anything other then Windows Firewall (firewall specifically)?

Could you please run a GP result report from GPMC as that should help show what objects it found and applied.

Are the GPP settings in a GP or are they 2 policies?

[ricki]

Hi

 

Have you done a gpresult on the command line of the client?

Have you done a rsop.msc on the client?

Have to done a model and a results in the group policy editor on the server?

Have you had a look in the event log.

Do you have multiple domain controllers?

Are they replicating?

Have you done a netdiag and a dcdiag on the servers.

Do the group policies apply to some and not all computers or none?

Are group policies over righting the settings of other policies?

Have you tried unlinking the policies that don't work and recreating them. You might have a corrupt policy.

Are the nic cards 1 gig in the clients. They may be starting too quick for the network and not picking up the policies you might have to put in the policy to wait for the domain in a gpo and a registry setting manually into the clients to wait for the gpos.

 

I am looking for clues.

 

Richard

[Little-Miss]

Ok, guys....i need to do this in a methodical way...

 

What's the best way to do this.

 

I have set up a virtual machine in its own OU, it is picking up GP's that are set up for the whole domain.

 

This is a very simple GPP that i have put in there, shows up but doesn't apply. Could well be cus i've set something up wrong. That's fine, let me know...

 

 

maybe cus ive done it from my folder in staff common? Talk to me like an idiot its fine, i've completely glazed over now....

 

So many options to look at...