none
GPO & GPRESULT in Domain Environment

    Question

  • I have setup a 2008 R2 domain with no major GPO defined. When I execute the GPRESULT on the client machine, I don't see anything under "Applied Group Policy Objects" and also 

    The following GPOs were not applied because they were filtered out

        -------------------------------------------------------------------
            Default Domain Policy
                Filtering:  Not Applied (Empty)

    Is it a normal behavior?

    ----------------------------------------------------------------

    Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
    Copyright (C) Microsoft Corp. 1981-2001

    Created On 2/8/2015 at 12:23:40 PM



    RSOP data for CONTOSO\meuser on HIS0161 : Logging Mode
    ---------------------------------------------------------
    Gpresult.exe -> Output
    OS Configuration:            Member Server
    OS Version:                  6.1.7601
    Site Name:                   N/A
    Roaming Profile:             N/A
    Local Profile:               C:\Users\meuser
    Connected over a slow link?: No


    USER SETTINGS
    --------------
        CN=meuser,CN=Users,DC=CONTOSO,DC=NET
        Last time Group Policy was applied: 2/8/2015 at 12:22:55 PM
        Group Policy was applied from:      PDC-DC.CONTOSO.NET
        Group Policy slow link threshold:   500 kbps
        Domain Name:                        CONTOSO
        Domain Type:                        Windows 2000
        
        Applied Group Policy Objects
        -----------------------------
            N/A

        The following GPOs were not applied because they were filtered out
        -------------------------------------------------------------------
            Default Domain Policy
                Filtering:  Not Applied (Empty)

            Local Group Policy
                Filtering:  Not Applied (Empty)

    Sunday, February 8, 2015 11:17 AM

Answers

  • > The following GPOs were not applied because they were filtered out
    >
    >      -------------------------------------------------------------------
    >          Default Domain Policy
    >              Filtering:  Not Applied (Empty)
    >
    > Is it a normal behavior?
     
    Yes. In a "empty" domain, you have 2 GPOs: Default Domain Policy and
    Default Domain Controllers Policy. Both only contain computer settings.
    And when running gpresult from a non-elevated command prompt, you simply
    do not get computer settings.
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    • Proposed as answer by Elaine JingModerator Wednesday, February 11, 2015 9:44 AM
    • Marked as answer by avilt Thursday, February 12, 2015 12:04 PM
    Monday, February 9, 2015 9:24 AM

All replies

  • Hi Avilt,

    Possible reasons for "the following GPOs were not applied because they were filtered out":

    You always have to address the GPO to the correct type of objects. In other words: A GPO containing user settings has to be linked to an OU that contains user objects and vice versa. If your OU to which the GPO is linked does not contain the correct objects, the configuration settings will not take effect and gpresult will list it as "filtered out(empty)".

    Thanks,

    Umesh.S.K

    Sunday, February 8, 2015 11:51 AM
  • These are default settings, user is in default "Users" container & the Default Domain Policy is also linked at domain level (Default). I have not made any custom GPO. 

    Let's assume I have my default domain with no custom policy. In this case what is the outcome, id "Default Domain Policy? is filtered?

    • Edited by avilt Monday, February 9, 2015 4:36 AM
    Sunday, February 8, 2015 2:13 PM
  • Hi,

    If you didn't make any custome policy, which means all the configuration in the GPMC are by default.

    Then the outcome of running gpresult on the client is exactly as the same as the output you've got in the above.

    If you want to know more details about how the clients apply the group policy settings, you can have a look at below link:

    http://blogs.technet.com/b/musings_of_a_technical_tam/archive/2012/02/15/understanding-the-structure-of-a-group-policy-object-part-2.aspx

    Hope it helps.

    Best Regards,

    Elaine 


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, February 9, 2015 6:48 AM
    Moderator
  • > The following GPOs were not applied because they were filtered out
    >
    >      -------------------------------------------------------------------
    >          Default Domain Policy
    >              Filtering:  Not Applied (Empty)
    >
    > Is it a normal behavior?
     
    Yes. In a "empty" domain, you have 2 GPOs: Default Domain Policy and
    Default Domain Controllers Policy. Both only contain computer settings.
    And when running gpresult from a non-elevated command prompt, you simply
    do not get computer settings.
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    • Proposed as answer by Elaine JingModerator Wednesday, February 11, 2015 9:44 AM
    • Marked as answer by avilt Thursday, February 12, 2015 12:04 PM
    Monday, February 9, 2015 9:24 AM