Group Policy GPO not 'seen' at client
Posted
by
fukawi2
on Server Fault
See other posts from Server Fault
or by fukawi2
Published on 2012-06-25T01:25:22Z
Indexed on
2012/06/25
3:17 UTC
Read the original article
Hit count: 522
I have a new OU (natorg.local\NATO\Users) that I am trying to apply GP to. I have created a new user in this OU, and linked the 3 GPO's to this OU:
DESKTOP - Folder Redirection (AppData)
DESKTOP - Folder Redirection (Desktop)
DESKTOP - Folder Redirection (Documents)
Hopefully the names are sufficient to suggest what they do exactly. The settings are under User Settings so there is no Loopback processing required (if my understanding is correct).
GP Modelling for the user and specific computer says that the GPOs will/should be applied, however on the client, gpresult doesn't even appear to see the GPOs under either "Applied" or "Not Applied":
USER SETTINGS
--------------
CN=Amir,OU=Users,OU=NATO,DC=natorg,DC=local
Last time Group Policy was applied: 25/06/2012 at 11:07:13 AM
Group Policy was applied from: svr-addc-01.natorg.local
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-----------------------------
LAPTOPS - Power Settings
WSUS - Set Server Address
OUTLOOK - Auto Archive
SECURITY - Lock Screen After Idle
Default Domain Policy
DESKTOP - Regional Settings
NETWORK - Proxy Configuration
NETWORK - IE General Config
OFFICE - Trusted Locations
OFFICE - Increase Privacy
OUTLOOK - Disable Junk Filter
DESKTOP - Disable Windows Error Reporting
DESKTOP - Hide Language Bar
NETWORK - Disable Skype
DESKTOP - Disable Thumbs.db Creation
WSUS - Set Server Address
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Local Group Policy
Filtering: Not Applied (Empty)
NETWORK - Google Chrome Configuration
Filtering: Not Applied (Empty)
SYSTEM - Event Log Configuration
Filtering: Not Applied (Empty)
SECURITY - Local Administrator Password
Filtering: Not Applied (Empty)
NETWORK - Disable Windows Messenger
Filtering: Not Applied (Empty)
SECURITY - Audit Policy
Filtering: Not Applied (Empty)
WSUS - Automatic Install
Filtering: Not Applied (Empty)
NETWORK - Firewall Configuration
Filtering: Not Applied (Empty)
DESKTOP - Enable Offline Files
Filtering: Not Applied (Empty)
I haven't altered permissions on the GPO's at all, no WMI filtering... As I said, GP Modelling says that they should be applied. GPResult on the client correctly identifies itself as being the correct OU (CN=Amir,OU=Users,OU=NATO,DC=natorg,DC=local)
There are 2 x 2008R2 and a 2003 DC, domain is 2003 level, client is Windows XP SP3.
Can anyone suggest why these GP Objects would be "invisible" to the client?
© Server Fault or respective owner