GPO only applying to certain computers

A

avk

Senior Member
Joined
Mar 1, 2007
Messages
768
Hi all

Not super clued up on network management...learning as I go along, so would love to get some input/ideas on this?

I run a network of about 150 computers. All running Windows 10 Enterprise. Server is running Server 2008 R2.

I use group policy management to change certain settings and enforce on the whole network (per user group), e.g. not being able to change the background, force specific start layout, etc. I also have different settings for different user groups. This all worked well last year.

This year I've replaced 40 computers with new computers. Same OS installed. Same process used to add them to the network as always.

Of the 40 new computers (identical in all ways) 15 do not have the group policies applied to them....I can't figure it out? I have made NO changes on the server, and the policies are being enforced on all of the other computers. A user is able to log in, change password, access folders on the server, etc. so communication to the server is fine. GPO is just not working. But works on other computers?

Any ideas? My thinking is that it has to be something locally on the PC's and not on the server?
 
S

scoobs

Well-Known Member
Joined
Sep 1, 2016
Messages
183
avk said:
Hi all

Not super clued up on network management...learning as I go along, so would love to get some input/ideas on this?

I run a network of about 150 computers. All running Windows 10 Enterprise. Server is running Server 2008 R2.

I use group policy management to change certain settings and enforce on the whole network (per user group), e.g. not being able to change the background, force specific start layout, etc. I also have different settings for different user groups. This all worked well last year.

This year I've replaced 40 computers with new computers. Same OS installed. Same process used to add them to the network as always.

Of the 40 new computers (identical in all ways) 15 do not have the group policies applied to them....I can't figure it out? I have made NO changes on the server, and the policies are being enforced on all of the other computers. A user is able to log in, change password, access folders on the server, etc. so communication to the server is fine. GPO is just not working. But works on other computers?

Any ideas? My thinking is that it has to be something locally on the PC's and not on the server?
Click to expand...

dude same thing is happening with me. Did you find out why ?
 
Cray

Cray

Honorary Master
Joined
Oct 11, 2010
Messages
34,549
avk said:
Hi all

Not super clued up on network management...learning as I go along, so would love to get some input/ideas on this?

I run a network of about 150 computers. All running Windows 10 Enterprise. Server is running Server 2008 R2.

I use group policy management to change certain settings and enforce on the whole network (per user group), e.g. not being able to change the background, force specific start layout, etc. I also have different settings for different user groups. This all worked well last year.

This year I've replaced 40 computers with new computers. Same OS installed. Same process used to add them to the network as always.

Of the 40 new computers (identical in all ways) 15 do not have the group policies applied to them....I can't figure it out? I have made NO changes on the server, and the policies are being enforced on all of the other computers. A user is able to log in, change password, access folders on the server, etc. so communication to the server is fine. GPO is just not working. But works on other computers?

Any ideas? My thinking is that it has to be something locally on the PC's and not on the server?
Click to expand...

Try running "gpresult /R" on on of the computers that is not working - it will display Resultant set of Policy summary and tell you what Group policies are being applied and what aren't. This article describes some steps to go through...

https://technet.microsoft.com/en-us/library/cc749336(v=ws.10).aspx
 
Cray

Cray

Honorary Master
Joined
Oct 11, 2010
Messages
34,549
Slootvreter said:
Time and date correct, and are the computer accounts in the correct OU's?
Click to expand...

This, when you swapped out the new machines did you move the computer accounts into the correct OU to receive the relevant GPO?
 
Cray

Cray

Honorary Master
Joined
Oct 11, 2010
Messages
34,549
Slootvreter said:
Correct, but it doesn't give much information as to why they are not applying.
Click to expand...

When you created the settings, did you alter the "Default Domain Policy" or did you create a new GPO? If you did, do you see that GPO in the " Applied Group Policy Objects" section?

Another good tool is RSOP.MSC, it gives each setting for a particular user and what GPO it is getting that setting from...
 
S

Slootvreter

Honorary Master
Joined
Aug 7, 2008
Messages
30,273
Cray said:
When you created the settings, did you alter the "Default Domain Policy" or did you create a new GPO? If you did, do you see that GPO in the " Applied Group Policy Objects" section?

Another good tool is RSOP.MSC, it gives each setting for a particular user and what GPO it is getting that setting from...
Click to expand...

You might have to address the OP :D
 
You must log in or register to reply here.
Top