GPO not appyling to PC. (win2012/WIN7)

alanmatthewson · 2016-06-15T12:32:05.000Z

Ok attaching screen shot

Capture.png1818×961 85.3 KB

DragonsRule · 2016-06-15T12:36:43.000Z

Well… that looks fine, but not what I meant

I meant the settings inside the GPO itself so we could check to make sure it’s configured correctly.

alanmatthewson · 2016-06-15T12:38:02.000Z

its a user policy
the user is in the OU

ran gpupdate /force several times

alanmatthewson · 2016-06-15T12:40:25.000Z

You mean this

Capture1.JPG1818×961 119 KB

DragonsRule · 2016-06-15T12:51:10.000Z

Yes, exactly. And yes that does look correct.

Can you try to add something else into that GPO, to see if it’s just this setting that’s the issue? Maybe Admin template, System, Prevent Access to Command Prompt?

stevenmiller8 · 2016-06-15T13:17:12.000Z

Check if this patch is installed: KB3159398

New security update from MS borked GPO settings. Was having an issue with a printer deployment this morning until I saw this technet thread.

learn.microsoft.com

Patch Tuesday - KB3159398

alanmatthewson · 2016-06-15T13:39:44.000Z

No it wasn’t in the Updates

mattkalhorn · 2016-06-15T16:19:02.000Z

Try this and see if it helps.

Right click on the group policy in the editor and set it to enforced. Then run gpupdate /force, restart the target PC and see what happens.

neroxyr · 2016-06-15T16:32:06.000Z

It looks that everything is in place but as LarryG. says try to apply a simple GPO which is user related and see if ti applies, or try to recreate the same GPO adding a new one. Then do gpuodate /force and see what happens

alanmatthewson · 2016-06-16T10:59:26.000Z

Fuuny thing is its working on one pc in the building but no others.

alanmatthewson · 2016-06-17T10:18:56.000Z

I added a mapped drive gpo and its working fine. the control panel disabled gpo seems to work on pc’s just put on the domain but not existing ones, I flushed the DNS cache even tried taking one of the domain and putting it back on but no dice. really weird

DragonsRule · 2016-06-17T10:58:52.000Z

@robdunn , any thoughts?

mattkalhorn · 2016-06-17T11:00:11.000Z

I ran a google search and saw something about roaming profiles not working well with this setting. Are you using roaming profiles in you domain?

Rob-Dunn · 2016-06-17T11:05:56.000Z

Click the ‘Settings’ tab on your GPO, can you right-click the resulting data and attach here? If not that, can you screenshot the setting you used?

alanmatthewson · 2016-06-17T11:18:14.000Z

This?

Capture.JPG1936×879 148 KB

alanmatthewson · 2016-06-17T11:18:45.000Z

yes we are

DragonsRule · 2016-06-17T11:19:22.000Z

gypsydavy:

This?

Is it only applied to the TEST OU? If so, why would you expect it to work anywhere else?

Rob-Dunn · 2016-06-17T12:02:58.000Z

Yep - like Larry said, maybe you need to link it to your other OUs or drop your other users into the test OU to check it out.

Remember, if a GPO is applying user settings, that user must reside somewhere underneath the OU heirarchy where the GPO was linked.

alanmatthewson · 2016-06-17T12:10:38.000Z

I am testing it with only users in the TEST OU.

bryanmendoza · 2016-06-19T23:21:45.000Z

hi sir, i enountered your problem, same here in our department, the cause of the problem is the new microsoft update including kb:3161561, kb:3164033, kb:3161958, kb:3161664, kb:3161949, kb:3159398, kb:3164035, if you have seen this update on your machine try to uninstall, then after all try to restart your machine, try to read some other forum heres the link, Patch Tuesday - KB3159398 | Microsoft Learn