<\/div>\n<\/aside>\n","upvoteCount":2,"datePublished":"2016-07-26T19:25:18.000Z","url":"https://community.spiceworks.com/t/problem-reading-gpo-since-ms16-072/513754/3","author":{"@type":"Person","name":"gabrielle.l","url":"https://community.spiceworks.com/u/gabrielle.l"}},"suggestedAnswer":[{"@type":"Answer","text":"
on my windows 10 machine, i get this error while doing GPUPDATE /FORCE<\/p>\n
“The processing of Group Policy failed. Windows attempted to read the file \\\\SysVol<domainname>\\Policies{4560EDE3-B896-4FF4-98C1-6ACE5F899240}\\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
it all started after i added the group “domain computers” / “authenticated users” with read acces to the delegation tab of the GPOs affected by the june 14 updates. i can still not read a single GPO.<\/p>\n
anyone seen something similar and could resolve it?<\/p>","upvoteCount":2,"datePublished":"2016-07-26T19:16:04.000Z","url":"https://community.spiceworks.com/t/problem-reading-gpo-since-ms16-072/513754/1","author":{"@type":"Person","name":"stephct1210","url":"https://community.spiceworks.com/u/stephct1210"}},{"@type":"Answer","text":"
did you try adding “authenticated users” to the delegates tab with READ access too?<\/p>","upvoteCount":0,"datePublished":"2016-07-26T19:18:12.000Z","url":"https://community.spiceworks.com/t/problem-reading-gpo-since-ms16-072/513754/2","author":{"@type":"Person","name":"richardharrison3","url":"https://community.spiceworks.com/u/richardharrison3"}},{"@type":"Answer","text":"
yes i tried adding both authenticated users and domain computers and i still get this message.<\/p>","upvoteCount":0,"datePublished":"2016-07-26T19:28:16.000Z","url":"https://community.spiceworks.com/t/problem-reading-gpo-since-ms16-072/513754/4","author":{"@type":"Person","name":"stephct1210","url":"https://community.spiceworks.com/u/stephct1210"}},{"@type":"Answer","text":"
thank you gabrielle, this was in the article you mentionned and this might help!<\/p>\n
One more thing\nWe also released MS16-075 / KB 3161561 in June 2016 to patch some SMB items. SYSVOL and Netlogon use SMB. There have been reports of users getting Access Denied when trying to access \\\\domain.fqdn\\sysvol or \\\\domain\\sysvol.\n\nIf you are experiencing this error, the current workaround is to set the SmbServerNameHardeningLevel registry value to 0 on the DCs. It is not needed on the other servers. If you experience this issue on other DFS servers, see the KB for the updated workaround info for those servers. Specifics are detailed in the KB 3161561 article.\n<\/code><\/pre>","upvoteCount":1,"datePublished":"2016-07-26T19:30:16.000Z","url":"https://community.spiceworks.com/t/problem-reading-gpo-since-ms16-072/513754/5","author":{"@type":"Person","name":"stephct1210","url":"https://community.spiceworks.com/u/stephct1210"}},{"@type":"Answer","text":"it worked ! thank you<\/p>\n
Gabrielle.L<\/p>","upvoteCount":0,"datePublished":"2016-07-27T12:36:46.000Z","url":"https://community.spiceworks.com/t/problem-reading-gpo-since-ms16-072/513754/6","author":{"@type":"Person","name":"stephct1210","url":"https://community.spiceworks.com/u/stephct1210"}},{"@type":"Answer","text":"
Glad you got it working!<\/p>","upvoteCount":0,"datePublished":"2016-07-27T12:53:21.000Z","url":"https://community.spiceworks.com/t/problem-reading-gpo-since-ms16-072/513754/7","author":{"@type":"Person","name":"gabrielle.l","url":"https://community.spiceworks.com/u/gabrielle.l"}}]}}
on my windows 10 machine, i get this error while doing GPUPDATE /FORCE
“The processing of Group Policy failed. Windows attempted to read the file \\SysVol<domainname>\Policies{4560EDE3-B896-4FF4-98C1-6ACE5F899240}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
it all started after i added the group “domain computers” / “authenticated users” with read acces to the delegation tab of the GPOs affected by the june 14 updates. i can still not read a single GPO.
anyone seen something similar and could resolve it?
2 Spice ups
did you try adding “authenticated users” to the delegates tab with READ access too?
Could it be related to this?
2 Spice ups
yes i tried adding both authenticated users and domain computers and i still get this message.
thank you gabrielle, this was in the article you mentionned and this might help!
One more thing
We also released MS16-075 / KB 3161561 in June 2016 to patch some SMB items. SYSVOL and Netlogon use SMB. There have been reports of users getting Access Denied when trying to access \\domain.fqdn\sysvol or \\domain\sysvol.
If you are experiencing this error, the current workaround is to set the SmbServerNameHardeningLevel registry value to 0 on the DCs. It is not needed on the other servers. If you experience this issue on other DFS servers, see the KB for the updated workaround info for those servers. Specifics are detailed in the KB 3161561 article.
1 Spice up
it worked ! thank you
Gabrielle.L
