none
Group policy is not appliying as it should be

    Question

  • Hi All,

    I am facing very weired problem. I have created Group Policy for WSUS named "WUAU Server Policy". But when I see the RSOP on client machine to check which policy is applied it showing me the "WUAU Server Policy". But surprising part is that the settings that RSOP is showing is completely different than the policy settings that I have configured.

    I have checked there is no other policy conflicting/inheritance as I have created seprate OU for this.

    One thing that I have noticed is the GPO settings that I can see in the GPMC.MSC for policy "WUAU Server Policy" is different that I am seeing in the "%systemroot%\SYSVOL\sysvol\ <domain_name>\Policies" with same SID. And I doubt that the settings in this folder is getting applied not the settings that I have configured in GPMC.MSC.

    Do let me know if more information is required.

    Thanks in advance

    Jay Chavda

    Wednesday, February 25, 2015 11:12 AM

Answers

  • > One thing that I have noticed is the GPO settings that I can see in the
    > GPMC.MSC for policy "WUAU Server Policy" is different that I am seeing
    > in the "%systemroot%\SYSVOL\sysvol\ </domain_name/>\Policies" with same
    > SID.
     
    What did you see in sysvol and how did you verify it against gpmc?
     
    > And I doubt that the settings in this folder is getting applied not
    > the settings that I have configured in GPMC.MSC.
     
    You have more than one DC? Then check Sysvol replication (FRS or DFSR
    event logs).
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    • Marked as answer by Jay Chavda Wednesday, February 25, 2015 1:40 PM
    Wednesday, February 25, 2015 11:37 AM
  • Seems there are possibilities of policy object replication failure. As mentioned by Martin, you must see the FRS & DFRS event logging.

    Regards, Prabhu

    • Marked as answer by Jay Chavda Wednesday, February 25, 2015 1:40 PM
    Wednesday, February 25, 2015 11:57 AM

All replies

  • Hi Jay,

    Refer to the link. I'm sure it will be helpful for your thread.

    https://mizitechinfo.wordpress.com/2013/08/19/step-by-step-installing-configuring-wsus-in-server-2012-r2/

    Thanks,

    Engr. Muhammad Naeem Uddin

    Wednesday, February 25, 2015 11:27 AM
  • > One thing that I have noticed is the GPO settings that I can see in the
    > GPMC.MSC for policy "WUAU Server Policy" is different that I am seeing
    > in the "%systemroot%\SYSVOL\sysvol\ </domain_name/>\Policies" with same
    > SID.
     
    What did you see in sysvol and how did you verify it against gpmc?
     
    > And I doubt that the settings in this folder is getting applied not
    > the settings that I have configured in GPMC.MSC.
     
    You have more than one DC? Then check Sysvol replication (FRS or DFSR
    event logs).
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    • Marked as answer by Jay Chavda Wednesday, February 25, 2015 1:40 PM
    Wednesday, February 25, 2015 11:37 AM
  • Seems there are possibilities of policy object replication failure. As mentioned by Martin, you must see the FRS & DFRS event logging.

    Regards, Prabhu

    • Marked as answer by Jay Chavda Wednesday, February 25, 2015 1:40 PM
    Wednesday, February 25, 2015 11:57 AM
  • Hi Martin,

    You are genius. I checked FRS logs and found that my DC went into Jounal Wrap state. After resolving this now it is working for me. Thank you very much for your time and I appriciate it.

    Wednesday, February 25, 2015 1:39 PM
  • Thank you very much Prabu for your time and I appriciate it. Got resolved, please see the previous comment.
    Wednesday, February 25, 2015 1:40 PM