none
RSOP

    Question

  • server - win2012 r2

    We have 6 group policy objects tied to a domain.  I added software install computer group policy to these six.  When I generate RSOP on the AD box, I could see the added policy is going to apply.  

    On member workstation effected by this policy, I run  gpresult /H GPReprot.htm.   There is no trace of my added policy.  Nothing in the eventvwr.

    How do I troubleshoot this?

    Thanks in advance

     

    Wednesday, November 25, 2015 11:39 PM

Answers

  • >I added software install computer group policy to these six. 
     
    So you have added the Software Installation setting into the GPO? Have you tried to run "Gpupdate /force" command on the member workstation?
     
    I have justed tested this in my local lab, after running "Gpupdate /force" on client machine, I'm able to see Software setting in the result .html file.
     
    Please have a try and see if it works for you.
     

    Regards,

    Ethan Hua


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Thursday, November 26, 2015 5:15 AM
    Moderator
  • > I am confused.  The whole point of doing this is to circumvent having to
    > do anything on a workstation.   My understanding was that gpupdate
    > /force is used when you don't want to reboot or logout and login.
     
    Basically, in most cases the /force parameter is not neccessary. THis
    parameter makes GP processing forget about previous cycles and treat all
    GPOs with all settings as if they were seen first. Otherwise (depending
    on the type of setting and the exact configuration) it will not apply
    settings from GPOs that were already processed earlier and did not
    change in the mean time.
     
    In your case, did you run "gpupdate"? If yes, what was the screen
    output? If Software installation is found, it should then ask you to
    reboot, because SWI can only be processed at boot/logon (AKA
    "synchronous foreground processing").
     
    And just to make sure: Did you run the gpresult command in an elevated
    command line? If not, computer GPOs will not show up.
     
    Thursday, November 26, 2015 4:02 PM

All replies

  • >I added software install computer group policy to these six. 
     
    So you have added the Software Installation setting into the GPO? Have you tried to run "Gpupdate /force" command on the member workstation?
     
    I have justed tested this in my local lab, after running "Gpupdate /force" on client machine, I'm able to see Software setting in the result .html file.
     
    Please have a try and see if it works for you.
     

    Regards,

    Ethan Hua


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Thursday, November 26, 2015 5:15 AM
    Moderator
  • I am confused.  The whole point of doing this is to circumvent having to do anything on a workstation.   My understanding was that gpupdate /force is used when you don't want to reboot or logout and login.
    Thursday, November 26, 2015 3:39 PM
  • > I am confused.  The whole point of doing this is to circumvent having to
    > do anything on a workstation.   My understanding was that gpupdate
    > /force is used when you don't want to reboot or logout and login.
     
    Basically, in most cases the /force parameter is not neccessary. THis
    parameter makes GP processing forget about previous cycles and treat all
    GPOs with all settings as if they were seen first. Otherwise (depending
    on the type of setting and the exact configuration) it will not apply
    settings from GPOs that were already processed earlier and did not
    change in the mean time.
     
    In your case, did you run "gpupdate"? If yes, what was the screen
    output? If Software installation is found, it should then ask you to
    reboot, because SWI can only be processed at boot/logon (AKA
    "synchronous foreground processing").
     
    And just to make sure: Did you run the gpresult command in an elevated
    command line? If not, computer GPOs will not show up.
     
    Thursday, November 26, 2015 4:02 PM
  • In your case, did you run "gpupdate"? If yes, what was the screen
    output? If Software installation is found, it should then ask you to
    reboot, because SWI can only be processed at boot/logon

    Here is the message mentioned by Martin:
     

     

    Regards,

    Ethan Hua


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Friday, November 27, 2015 2:36 AM
    Moderator
  • > Here is the message mentioned by Martin
     
    Thanks Ethan :)
     
    Friday, November 27, 2015 9:16 AM