none
SOFWARE GPO DOESNT APPLY

    Question

  • Hi all,

    Since few weeks all gpo software I deploy in my AD can no longer install on domain computers. Does anyone know the reason???

    Best regards


    Thursday, June 11, 2015 1:27 PM

All replies

  • Going to need a bit more information than that. What are you trying to deploy? Do you see MSIEXEC or Group Policy errors in client event logs? Are other GPOs processing? etc.

    If my answer helped you, check out my blog: Deploy Happiness

    Thursday, June 11, 2015 1:46 PM
  • Hi Joseph,

    Thanks you for your prompt reaction, Im trying to deploy 7-zip, fixit, Skype, vlc,etc... but I receive such group policy errors in client event logs "Windows could not apply the software installation settings. the software installation settings can have their own log file".

    Yes there are other GPOs processing like folder redirection, etc...

    few months ago when i installed my AD, GPO software were deployed without problems

    Thursday, June 11, 2015 5:23 PM
  • have you ever deployed these .msi previously with success?

    Does other software deploy from this share?

    • Edited by AlexAdkin Thursday, June 11, 2015 7:18 PM
    Thursday, June 11, 2015 7:17 PM
  • I have already deployed these .msi previously with success.

    Yes other .msi software are deployed from this share

    Friday, June 12, 2015 6:51 AM
  • Hi,

    Would you please check if the permissions are set properly? And if you can manual access the share folder?

    Best Regards,

    Elaine


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, June 12, 2015 8:43 AM
    Moderator
  • suggests share setup ok if other software works, would just browse to the share as user however and double check if can access 

    Friday, June 12, 2015 9:11 AM
  • The permissions are set properly, all domain users have modification permissions
    Friday, June 12, 2015 2:53 PM
  • Dear Alex;

    No anther software deployed by GPO works

    Friday, June 12, 2015 2:54 PM
  • Sorry, I wanted to say no other software deployed by GPO works
    Friday, June 12, 2015 3:06 PM
  • So nothing works - No single Software installation GPO works? nothing at all?
    Friday, June 12, 2015 3:09 PM
  • Few weeks ago all software installation GPO was working, but right now nothing works
    Friday, June 12, 2015 6:08 PM
  • ok lets dig deeper, post a gpresult /h to onedrive or similar 
    Friday, June 12, 2015 6:28 PM
  • Hi Alex,

    Below capture

    Microsoft Windows [version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation. Tous droits rÈservÈs.

    C:\Users\junior.tschomba.UNDP>gpresult /r

    Outil de rÈsultat du systËme d'exploitation Microsoft (R) Windows (R) v2.0
    Copyright (C) Microsoft Corp. 1981-2001

    Jeu crÈÈ le 16/06/2015 ‡ 16:50:34


    DonnÈes RSOP pour UNDP\junior.tschomba sur CD-LTLOG03 : mode journalisation
    ----------------------------------------------------------------------------

    Configuration du systËme d'exploitation : Station de travail membre
    Version du systËme d'exploitation...... : 6.1.7601
    Nom du site............................ : N/A
    Profil itinÈrant :             N/A
    Profil local........................... : C:\Users\junior.tschomba.UNDP
    Connexion via une liaison lente ? : Non


    PARAM»TRES UTILISATEURS
    ------------------------
        CN=Junior Tschomba,OU=IT,OU=PNUD,OU=UN_USERS,DC=undp,DC=local
        Heure de la derniËre application de la stratÈgie de groupe : 16/06/2015 ‡ 16
    :42:47
        StratÈgie de groupe appliquÈe depuis :      CD-BUNDC02.undp.local
        Seuil de liaison lente dans la stratÈgie de groupe :   500 kbps
        Nom du domaine†:                        UNDP
        Type de domaine :                        Windows 2000

        Objets StratÈgie de groupe appliquÈs
        -------------------------------------
            Default Domain Policy

        Les objets stratÈgie de groupe n'ont pas ÈtÈ appliquÈs
        car ils ont ÈtÈ refusÈs
        ----------------------------------------------------------------------------
    -------
            Adobe_Flash_Player
              Filtrage :  Non appliquÈ (vide)

            VLC
              Filtrage :  Non appliquÈ (vide)

            7-Zip
              Filtrage :  Non appliquÈ (vide)

            Allow_standard_users_to_install_device_Printer
              Filtrage :  Non appliquÈ (vide)

            Foxit PDF
              Filtrage :  Non appliquÈ (vide)

            Skype
              Filtrage :  Non appliquÈ (vide)

            Adobe shockwave player
              Filtrage :  Non appliquÈ (vide)

            Mozilla
              Filtrage :  Non appliquÈ (vide)

        L'utilisateur fait partie des groupes de sÈcuritÈ suivants
        ----------------------------------------------------------
            Utilisateurs du domaine
            Tout le monde
            Utilisateurs
            Administrateurs
            INTERACTIF
            OUVERTURE DE SESSION DE CONSOLE
            Utilisateurs authentifiÈs
            Cette organisation
            LOCAL
            IT
            Admins du domaine
            Operation
            Staff_bunia
            Programme
            Administrateurs du schÈma
            Administrateurs de l'entreprise
            Groupe de rÈplication dont le mot de passe RODC est refusÈ
            Niveau obligatoire ÈlevÈ

    Tuesday, June 16, 2015 3:28 PM
  • ok so if google translates correct they are not applied because their empty for the user, there is no computer policy provided so not sure if you deploy anything to computer????
    Tuesday, June 16, 2015 6:45 PM
  • Hi, see below what Policy I deploy in computer side

    Wednesday, June 17, 2015 1:05 PM
  • please post a google translated gpresult /h for both user and computer
    Wednesday, June 17, 2015 1:49 PM
  • Summary of computer configuration
    No data available.

    Summary of user configuration
    General
    Username UNDP \ junior.tschomba
    Undp.local field
    Time of the last treatment of Group Policy 06/17/2015 6:17:54 p.m.
    GroupeObjets Policy Objects GPO applied

    Name
    Location link
    Revision
    Default Domain Policy undp.local AD (24), system volume (24)

    GPO refused

    Name

    Location link

    Reason for rejection

    Adobe Shockwave player undp.local / UN_COMPUTERS / PC Empty
    {1912341A-2187-4F40-A638-C1BD66DAD05C} undp.local / UN_COMPUTERS / off PC Connection
    Allow_standard_users_to_install_device_Printer undp.local / UN_COMPUTERS / PC Empty
    7-Zip undp.local / UN_COMPUTERS / PC Empty
    Skype undp.local / UN_COMPUTERS / PC Empty
    Adobe_Flash_Player undp.local / UN_COMPUTERS / PC Empty
    Foxit PDF undp.local / UN_COMPUTERS / PC Empty
    VLC undp.local / UN_COMPUTERS / PC Empty
    Mozilla undp.local / UN_COMPUTERS / PC Empty
    {} 8747DD86-0E26-401E-8781-955803083258 undp.local / UN_COMPUTERS / off PC Connection

    Adherence of the security group when Group Policy was applied


    UNDP \ Domain Users
    Everyone
    BUILTIN \ Users
    BUILTIN \ Administrators
    NT AUTHORITY \ INTERACTIVE
    OPENING SESSION CONSOLE
    NT AUTHORITY \ Authenticated Users
    NT AUTHORITY \ This Organization
    LOCAL
    UNDP \ IT
    UNDP \ Domain Admins
    UNDP \ Operation
    UNDP \ Staff_bunia
    UNDP \ Program
    UNDP \ Schema Admins
    UNDP \ Enterprise Admins
    UNDP \ Replication Group RODC whose password is refused
    Mandatory Label \ High Mandatory Level
    WMI Filters
    Name
    Value
    Reference (GPO)
    None (e)

    Component Status
    Component Name

    Status

    Time of the last process

    Operation Group Policy Infrastructure successful 17/06/2015 6:17:56 p.m.
    Group Policy Local Users and Groups Success 6/17/2015 6:03:38 p.m.
    Register Success 6/17/2015 6:03:37 p.m.

    Computer Configuration

    No data available.
    User Configuration
    Strategies
    Administrative Templates
    Policy definitions (ADMX files) retrieved from the local computer.
    Windows Components / Internet Explorer

    Strategy
    Parameter
    GSO winner

    Disable changing of the homepage On Default Domain Policy

    Http://www.cd.undp.org Home
     
    Strategy

    Parameter
    GSO winner

    Disable the default browser change Enabled Default Domain Policy
    Prevent changes proxy settings Enable Default Domain Policy

    Windows Components / Internet Explorer / Internet Control Panel / Advanced tab

    Strategy

    Parameter

    GSO winner

    Do not allow resetting Internet Explorer settings Enabled Default Domain Policy

    Preferences

    Settings Control Panel

    Local Users and Groups

    User (name: Administrator (built-in))

    The following parameters were applied to this object. In this category, the closest parameters of the upper level of the report are used primarily for conflict resolution.

    Administrator (built-in)

    Winning GPO Default Domain Policy

    Result: failed (error code: 0x80070524)

    Local User

    Action Update
    Properties
    Username Administrator (built-in)
    Rename undpadmin
    Full name Local UNDP Administrator
    Description Local Administrator
    The user can not change password. False
    The password never expires. Real
    Account is disabled False
    Expires Never account

    Wednesday, June 17, 2015 4:28 PM
  • Hi,

    It seems all the group policy linked to PC were failed to apply. It shows PC empty, would you please double check the OU in the ADUC?

    Best Regards,

    Elaine


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, June 26, 2015 2:40 AM
    Moderator