none
GPO is not applying settings

    Question

  • I have created a Computer Settings GPO that creates a scheduled task. I have my target computer in an OU and my GPO is applied to this OU. I log into the workstation and I never see the scheduled task show up in the task scheduler. I have forced AD to replicate and I have /forced the local gpo to update.   plus I've waited over 1 hour.  It never shows up.  here is what my ts should do.  how come it never shows up?

    Name  Icon Check  
     Author  acme.org\adminuser
     Description    
     Run only when user is logged on  S4U  
     UserId  acme.org\deskadmin  
     Run with highest privileges  HighestAvailable  
     Hidden  Yes  
     Configure for  1.3  
     Enabled  Yes  
    Triggers1. Run at user logon    
     Enabled  Yes  
        
    Actions1. Start a program    
     Program/script  \\S1Aspps\Scripts\Tools\IconCheck\checkicon.ps1 
    Settings Start the task only if the computer is idle for  10 minutes   (not set)
     Wait for idle for  1 hour   (not set)
     Stop if the computer ceases to be idle  Yes  
     Restart if the idle state resumes  No  
     Start the task only if the computer is on AC power  No  
     Stop if the computer switches to battery power  Yes  
     Start only if the following network connection is available  Yes  
     Allow task to be run on demand  Yes  
     Run task as soon as possible after a scheduled start is missed  Yes  
     If the running task does not end when requested, force it to stop  Yes  
     If the task is already running, then the following rule applies  IgnoreNew  

    Commonhide
    OptionsStop processing items on this extension if an error occurs on this item No
    Remove this item when it is no longer applied No
    Apply once and do not reapply No


    mqh7

    Thursday, March 26, 2015 4:05 PM

Answers

All replies

  •  
    > I have my target computer in an OU and my GPO is applied to this OU.
     
    Please open an elevated prompt and run "gpresult /h report.html &&
    report.html". Check this report for your GPO (applied?) and for your
    task settings.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Thursday, March 26, 2015 4:26 PM
  • Yes, I did that and YES, my GPO is being applied.

    Applied GPOs
    Name
    Link Location
    Revision
    Local Group Policy Local AD (15), Sysvol (15)
    Base Computer acme.org/z IconCheck AD (149), Sysvol (149)
    z Icon Check acme.org/z IconCheck AD (22), Sysvol (22)


    mqh7

    Thursday, March 26, 2015 4:32 PM
  •  
    >   Hidden  Yes
     
    Hidden?
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Thursday, March 26, 2015 4:45 PM
  • I assumed Hidden meant when it runs the user does not see it?  But anyway, I Unchecked Hidden.  forced an AD replication.  ran gpupdate /force on my workstation a few times and I still don't see it.  yet, gpresult /h shows that it did get applied.


    mqh7

    Thursday, March 26, 2015 4:56 PM
  • does this matter?    it is a machine policy being applied to an OU with only machines within it.   Yet I say in my task "run as a certain user" & "run whether user is logged on or not"   It runs "at log on"  for "any user"   does that have any effect? 

    mqh7

    Thursday, March 26, 2015 5:00 PM
  • If I create a scheduled task that is a User task and runs as the currently logged on user it does show up.  But when I create a Computer task and have it run as a different domain user they NEVER show up in your local task scheduler.

    Why?  


    mqh7

    Thursday, March 26, 2015 8:34 PM
  • > Yet I say in my task "run as a certain user" & "run whether user is
    > logged on or not"
     
    This requires the password to be saved in your task definition. And
    saving passwords isn't supported anymore since MS14-025.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    • Marked as answer by mqh7 Friday, March 27, 2015 1:16 PM
    Friday, March 27, 2015 8:13 AM