none
Since MS16-072 - GPO error "Not Applied (Unknown Reason) - if the section is empty

    Question

  • If you have a GPO that is in scope for the user section and this section is empty or disabled, rsop.msc will report that GPO as his GUID instead of his name and with the error "Not Applied (Unknown Reason)".

    Same for the computer section.

    I've applied MS16-072 suggestion of putting Authenticated Read everywhere.

    Wednesday, June 22, 2016 3:41 PM

All replies

  • That is what Microsoft Directory Team Published today.

    https://blogs.technet.microsoft.com/askds/2016/06/22/deploying-group-policy-security-update-ms16-072-kb3163622/

    Wednesday, June 22, 2016 5:44 PM
  • Thank for the link.

    However sadly it fix nothing.

    I've already added authenticated user to all my GPO, and tried to add Domains computer for the sake of it.

    It doesn't change anything, if the user section is EMPTY, if will report a "Not Applied (Unknown Reason)" error.

    Wednesday, June 22, 2016 6:08 PM
  • Am 22.06.2016 um 17:41 schrieb morphus:
    > If you have a GPO that is in scope for the user section and this section
    > is empty or disabled, rsop.msc will report that GPO as his GUID instead
    > of his name and with the error "Not Applied (Unknown Reason)".
     
    Ok, where is your problem? the user section is empty or disabled.
    The action must be "Not applied", because it is empty and/or disabled.
     
    The only thing that is wrong it the "unknown reason". The reason is, the
    section is empty or disabled, but the report does not get this.
     
    Mark
     --
    Mark Heitbrink - MVP Group Policy - Cloud and Datacenter Management
     
    Homepage:  http://www.gruppenrichtlinien.de - deutsch
     
    Wednesday, June 22, 2016 7:44 PM
  • Yep, that's the issue. I'm not missing anything, in term of GPO application.

    However I don't know until I look at all "GUID" GPO that is listed as Unknown and confirmed that they have no user or computer section, if I'm missing anything. And everytime I need to validate that proper GPO are applied, I need to process that list of GUID and their "Unknown reason".

    Thursday, June 23, 2016 12:47 PM