none
GPO Weird Issue

    Question

  • Hi,

    Wondered if anyone can help.

    We have an OU structure split between "Desktops" & "Laptops".

    We have a number of "USER" GPO's that don't apply when we put a machine inside the laptop OU - However when we put the PC in the desktop OU the user GPO's work perfectly. (Majority of GPO's are inherited at the general computers level)

    I've run GPRESULTS when the machines are in the LAPTOP OU and only about 5 standard policies are applied. There's nothing in event logs or Group Policy Operational log and nothing..

    Just wondered if someone could point me in right direction of what to look for.

    Thanks In Advance.

    Monday, April 18, 2016 6:13 PM

Answers

  • Hi,

    Please try the below options:

    1. The domain user which you logon with is not in the OU to which the group policy is linked. Place the domain user in the appropriate OU the group policy is linked to.

    2. If you do not want the domain user in the specific OU, then you have to enable the ‘loopback processing mode‘. This setting can be found in: Computer configuration / Administrative templates / System / Group Policy / User Group Policy loopback processing mode. Enable this setting and choose ‘Replace’ mode.

    More information: http://support.microsoft.com/kb/231287

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, April 20, 2016 5:48 AM
    Moderator

All replies

  • Hi

     You should check "Loopback Processing Gpo",

    http://social.technet.microsoft.com/wiki/contents/articles/2548.windows-server-understand-user-group-policy-loopback-processing-mode.aspx

    Loopback processing with merge or replace

    https://technet.microsoft.com/en-us/library/cc782810(v=ws.10).aspx


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    Monday, April 18, 2016 6:30 PM
  • Hi Burak,

    Yeah we have a few printer policies with that enabled (Just so printers install at user level when anyone logs in) and one outlook policy with it enabled on "merge" 

    Should we not have that many enabled?

    Monday, April 18, 2016 6:32 PM
  • Hi,

    To understand your issue more clearly, please run gpresult /h report.html from an elevated commandline, examine report.html and paste it directly in our forum so that we can make further analysis.

    Thanks for your cooperation.

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, April 19, 2016 2:37 AM
    Moderator
  • Please see download link...

    https://onedrive.live.com/redir?resid=59E2EFE917BD60DE!662&authkey=!AJY_uP3lqCxQJqg&ithint=file%2chtml

    As you'll see from the security group we have "APL Documents Home - PRINTSERVER" This should run a GPO called "Documents Redirect" but as you can see it doesn't even get listed.


    Tuesday, April 19, 2016 7:24 AM
  • Hi,

    Please try the below options:

    1. The domain user which you logon with is not in the OU to which the group policy is linked. Place the domain user in the appropriate OU the group policy is linked to.

    2. If you do not want the domain user in the specific OU, then you have to enable the ‘loopback processing mode‘. This setting can be found in: Computer configuration / Administrative templates / System / Group Policy / User Group Policy loopback processing mode. Enable this setting and choose ‘Replace’ mode.

    More information: http://support.microsoft.com/kb/231287

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, April 20, 2016 5:48 AM
    Moderator
  • Hi,

    Just want to confirm the current situations.

    Please feel free to let us know if you need further assistance.

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, April 22, 2016 8:23 AM
    Moderator