Sign in
 
HomeWindows Server 2012Windows Server 2008 R2Windows Server 2003LibraryForums
Windows Server TechCenter >
> 
> 
Computer group policy settings not being applied

Answered Computer group policy settings not being applied

  • Wednesday, January 16, 2013 10:04 PM
     
     
    Sign In to Vote
    0

    We have a doman hbk.com and this computer windows 7 professional has a weird issue. When I try to run a gpupdate i get the error below

    When I run a gpresult ouputed to an html I get that.

    Things ive tried so far. Going to that file \\hbk.com\SysVol\hbk.com\Policies\{57C2F3F6-D91F-4557-A1E2-6235572CA19D}\gpt.ini  and giving the computer and user  full control. removing the the computer from the domain and re-adding it, ipconfig /flushdns. ipconfig /release and renew. Any Ideas? Thank you. No other computer but this one is having this issue

     

All Replies

  • Thursday, January 17, 2013 6:33 AM
    Moderator
     
     
    Sign In to Vote
    0

    Hi,

    Does the computer install some antivirus application? Disable AV or security applications on this workstation for test.

    If issue persists, dis-join and rejoin it to domain to restore the secure channel between it and DC.

    Regards,
    Cicely

     
  • Thursday, January 17, 2013 1:40 PM
     
     
    Sign In to Vote
    0
    Ywah kaspersky is installed on the machine. I did however disable it and try to do a gpupdate. No dice. I also tried removing and re adding it to the domain. No dice. Anything else you can think of?
     
  • Thursday, January 17, 2013 3:50 PM
     
     
    Sign In to Vote
    0
     
    > We have a doman hbk.com and this computer windows 7 professional has a
    > weird issue. When I try to run a gpupdate i get the error below
    >
     
    That's not "weird". You're suffering from sysvol replication issues.
    Check the DFSR/NTFRS logs on all your domain controllers, then follow
    or
     
    regards, Martin
     
    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
     
  • Friday, January 18, 2013 6:06 AM
    Moderator
     
     
    Sign In to Vote
    0

    Hi,

    Perform a clean boot on the computer for troubleshooting：
    http://support.microsoft.com/kb/929135

    And also check the healthy of your domain.

    Regards,

    Cicely

     
  • Friday, January 18, 2013 11:41 PM
     
     
    Sign In to Vote
    0

    Might want to check if the time on the Domain Controler and the client are correct.

    Dezz

     
  • Tuesday, January 22, 2013 12:54 PM
     
     
    Sign In to Vote
    0
    That didnt help. I checked all of that
     
  • Tuesday, January 22, 2013 1:10 PM
     
     
    Sign In to Vote
    0

    Hi,

    Policies are placed under sysvol\policies folder. If some times due to network latency replication may get delay and it created an extension to the policy like {policy}_NTFRS124Ad2 like that.

    1) Check if there is any latency in your network to replicate the SYSVOL.

    2) Also if you note such extension for any GPO under SYSVOL\Policies then remove it. (like if policy has extension {policy}_NTFRS124Ad2 then only remove last extension so the GPO will look like {policy}).

    3) Then try to run GPUPDATE or GPUPDATE /FORCE on the system and check whether you still having a problem.

    Thanks & Regards, Abhijit Deshpande This posting is provided "AS IS" with no warranties or guarantees , and confers no rights

     
  • Tuesday, January 22, 2013 1:55 PM
     
     
    Sign In to Vote
    0
    Does this computer have RSAT installed?
     
  • Wednesday, January 23, 2013 2:07 PM
     
     
    Sign In to Vote
    0
     
    > That didnt help. I checked all of that
     
    Ah - I overlooked your first gpresult screenshot: "unknown user name or
    bad password". Try to unjoin and rejoin the computer to the domain.
    Whatever the cause for this issue is - it is a local cause on the
    computer in question, not of the domain or any DC.
     
    Sorry for my misinterpretation...
     
    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
     
  • Wednesday, January 23, 2013 3:58 PM
     
     
    Sign In to Vote
    0
    @dezz87 No it doesnt have RSAT installed. Should I install it? All the domain controllers have the right time. The weird thing is that out of 100+ computers, he is the only one who has this issue.
     
  • Wednesday, January 23, 2013 4:00 PM
     
     
    Sign In to Vote
    0
    I checked and it is being replicated and there is no policy with that extension. Its just very strange that this is the only computer experiencing that issue
     
  • Wednesday, January 23, 2013 5:42 PM
     
     
    Sign In to Vote
    0

    Look in the Group Policy event viewer for more details.

    If this is a laptop and has been off network for more than 30days, the computer/AD password is out of synch and doesn't properly autenticate to the DC.  It is attempting to login using cached credentials.

    I have seen this with Cisco WAP's using computer/user authentication.

    Plugging in to a wired drop usually resolves this.

     
  • Thursday, January 24, 2013 12:42 PM
     
     
    Sign In to Vote
    0
    I checked and it is being replicated and there is no policy with that extension. Its just very strange that this is the only computer experiencing that issue
    If this is the only computer you are experiencing the issue then as per Mr. Martin, try to rejoin the machine into the domain and check if you still experience the same problem.

    Thanks & Regards, Abhijit Deshpande This posting is provided "AS IS" with no warranties or guarantees , and confers no rights

     
  • Thursday, January 31, 2013 2:44 PM
     
     Answered
    Sign In to Vote
    0
    I ended up re-imaging the computer. There was no good fix
    • Marked As Answer by mrsarcastic10 Thursday, January 31, 2013 2:44 PM
    •