Group Policy GPO not 'seen' at client

Posted by fukawi2 on Server Fault See other posts from Server Fault or by fukawi2
Published on 2012-06-25T01:25:22Z Indexed on 2012/06/25 3:17 UTC
Read the original article Hit count: 522

I have a new OU (natorg.local\NATO\Users) that I am trying to apply GP to. I have created a new user in this OU, and linked the 3 GPO's to this OU:

DESKTOP - Folder Redirection (AppData)
DESKTOP - Folder Redirection (Desktop)
DESKTOP - Folder Redirection (Documents)

Hopefully the names are sufficient to suggest what they do exactly. The settings are under User Settings so there is no Loopback processing required (if my understanding is correct).

GP Modelling for the user and specific computer says that the GPOs will/should be applied, however on the client, gpresult doesn't even appear to see the GPOs under either "Applied" or "Not Applied":

USER SETTINGS
--------------
    CN=Amir,OU=Users,OU=NATO,DC=natorg,DC=local
    Last time Group Policy was applied: 25/06/2012 at 11:07:13 AM
    Group Policy was applied from:      svr-addc-01.natorg.local
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
    -----------------------------
        LAPTOPS - Power Settings
        WSUS - Set Server Address
        OUTLOOK - Auto Archive
        SECURITY - Lock Screen After Idle
        Default Domain Policy
        DESKTOP - Regional Settings
        NETWORK - Proxy Configuration
        NETWORK - IE General Config
        OFFICE - Trusted Locations
        OFFICE - Increase Privacy
        OUTLOOK - Disable Junk Filter
        DESKTOP - Disable Windows Error Reporting
        DESKTOP - Hide Language Bar
        NETWORK - Disable Skype
        DESKTOP - Disable Thumbs.db Creation
        WSUS - Set Server Address

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)

        NETWORK - Google Chrome Configuration
                Filtering:  Not Applied (Empty)

        SYSTEM - Event Log Configuration
            Filtering:  Not Applied (Empty)

        SECURITY - Local Administrator Password
            Filtering:  Not Applied (Empty)

        NETWORK - Disable Windows Messenger
            Filtering:  Not Applied (Empty)

        SECURITY - Audit Policy
            Filtering:  Not Applied (Empty)

        WSUS - Automatic Install
            Filtering:  Not Applied (Empty)

        NETWORK - Firewall Configuration
            Filtering:  Not Applied (Empty)

        DESKTOP - Enable Offline Files
            Filtering:  Not Applied (Empty)

I haven't altered permissions on the GPO's at all, no WMI filtering... As I said, GP Modelling says that they should be applied. GPResult on the client correctly identifies itself as being the correct OU (CN=Amir,OU=Users,OU=NATO,DC=natorg,DC=local)

There are 2 x 2008R2 and a 2003 DC, domain is 2003 level, client is Windows XP SP3.

Can anyone suggest why these GP Objects would be "invisible" to the client?

© Server Fault or respective owner

Related posts about active-directory

Related posts about windows-server-2008-r2