some client machines group policy not applied

chandersharma6928 · 2011-12-27T20:35:29.000Z

Dear All,

i am facing some problem related to Group Policy

the GP does not seem to be applied on some domain machine.

so please suggest me how to applied the group policys in these cilents

i was allready try these below sets

1:- rejoin the domain controller

2:- gpupdate /force.

thanks

jay6111 · 2011-12-27T21:01:24.000Z

What are you using to push GPO? Is it Win 2008, or Win 2003? In win 2003, run gpresult on the client machine and see what you get. If win 2008, then you can open the group policy wizard and bottom left of the tree, right click the group policy wizard and run it against the machine. It will produce a nice HTML file that can help see what is or isn’t being applied.

If you are applying this to a Win 7 machine, then you can run from a command prompt gpresult /h C:\result.html

to get much the same result. These are your key clues when dealing with GPO to find out why it isn’t working. It is either a higher GPO deniying your GPO or something else.

Compare the results, and look at the details. Check the event logs as well.

-Jay

chandersharma6928 · 2011-12-28T02:31:45.000Z

Hi,

thanks for reply …

i am waitng of more reply on it

thanks …

maxsec · 2011-12-28T04:22:44.000Z

Similar to what jay said , but if you’re running a win2003 based domain you can install the newer gp mgmt pack and get the show resultant set of policies just like 2008.

Id also check that it’s on the domain properly and can resolve DNS correctly for the local domain .

pinascode · 2011-12-28T11:11:40.000Z

it would be beneficial to givve us more details, ew can shoot in the dark and guess, or maybe give you better advice if you give is more details.

how many domains?

Which server are you using?

how many users, maybe?

ujstech · 2011-12-28T15:35:55.000Z

Look in the event log on some of the affected machines. You may see group policy failed events that could shed some light on the problem

rowdydowdy · 2011-12-29T07:51:46.000Z

Good suggestions. I would add using mmc.exe and adding the “Resultant Set of Policy” snap-in. You will then need to Generate RSoP Data and review the results. This is similar to the command line options listed above but it highlights errors for you.

jeffdoty2 · 2011-12-29T08:28:33.000Z

The folks previously have hit the nail on the head for general troubleshooting of a GPO issue. If you only have a few, it might be the user accounts. I had a case where we ran a logon script to map a drive and the user didn’t have permission to the drive which cause the script to bomb and that stopped GPO processing. In this case I found the issue in the event log of the PC. If you need more help, you will need to provide more info. Good Luck.

chandersharma6928 · 2012-01-01T23:42:10.000Z

I am using Win server 2003

AD approx 50.

total users : -6000

some machine GPO is working fine and some system are not come under GPO

so please suggest me which setup i will user to update pending machine in GPO

thanks

maxsec · 2012-01-02T11:32:51.000Z

Does the user not get Gpo on all machines or just some?

When using the resultant set Gpo report use a machine / computer combo that work and a combination that does not work. You should be able to see the difference if it’s a Gpo problem.

chandersharma6928 · 2012-01-02T20:21:42.000Z

GPO deploy in some machines