none
Group Policy Not Working

    Question

  • HI,

    I've 4 servers, AD, Terminal, SQL, Web.

    Recently some technicians came to install something in the terminal services server and it crashed the server.

    Then I restored the server image with shadow protect and the group policy I have with the time limit of the disconnected remote sessions no longer works.

    I've tried making a new group Policy with the same settings but no luck.

    Can you guys help me?

    Tuesday, September 06, 2016 8:37 AM

All replies

  • HI,

    I've 4 servers, AD, Terminal, SQL, Web.

    Recently some technicians came to install something in the terminal services server and it crashed the server.

    Then I restored the server image with shadow protect and the group policy I have with the time limit of the disconnected remote sessions no longer works.

    I've tried making a new group Policy with the same settings but no luck.

    Can you guys help me?


    Monday, September 05, 2016 4:04 PM
  • Might also try over here.

    https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserverGP

     

     



    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows Server] Datacenter Management

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

    Monday, September 05, 2016 4:09 PM
  • Are other GPO's on that specific server working?  First thing to come to mind is remove the server from the domain and add it back. 
    Tuesday, September 06, 2016 6:19 PM
  • Hi,
    Please run gpresult /h command to view if there is the detail message about this GPO.
    In addition, please test if the problem only happened on this GPO or the other GPOs are also affected.
    Best regards,
    Wendy

    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, September 07, 2016 6:42 AM
    Moderator
  • Hi,
    I agree with vaadadmin2010 to have a try re-joining the server into domain. Also, please run gpresult /h command to get a report of group policy result for more details.
    Best regards,
    Wendy

    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, September 08, 2016 8:28 AM
    Moderator
  • Hi.

    No. There are no other GPO for that server.

    I've already tried getting the server back in the domain but still nothing.

    Here is the link for the result

    https://fagirpt-my.sharepoint.com/personal/frede_silva_fagir_pt/_layouts/15/guestaccess.aspx?guestaccesstoken=dga4842CpwijFiMxXNFWvinWS0UQ%2fxNVbcvPUdPuqJI%3d&docid=0d477875407434f1c8c9b9c993c59d06b&rev=1&expiration=2016-11-12T08%3a39%3a31.000Z

    Only works for 60days.

    Tuesday, September 13, 2016 8:40 AM
  • Hi.

    I've already tried getting the server back in the domain but still nothing.

    Here is the link for the result

    https://fagirpt-my.sharepoint.com/personal/frede_silva_fagir_pt/_layouts/15/guestaccess.aspx?guestaccesstoken=dga4842CpwijFiMxXNFWvinWS0UQ%2fxNVbcvPUdPuqJI%3d&docid=0d477875407434f1c8c9b9c993c59d06b&rev=1&expiration=2016-11-12T08%3a39%3a31.000Z

    Only works for 60days.
    Tuesday, September 13, 2016 8:40 AM
  • > Here is the link for the result
     
    You should create this report from either an administrative commandline
    or within GPMC.MSC - your current report is missing computer settings...
     
    Tuesday, September 13, 2016 9:57 AM
  • https://fagirpt-my.sharepoint.com/personal/frede_silva_fagir_pt/_layouts/15/guestaccess.aspx?guestaccesstoken=dffpW1u5ViVSq%2figvJbBQYj9J4PlQJQwr7XZxBEzO38%3d&docid=04fc4e1e44c3347eca489d45be76e2b93&rev=1&expiration=2016-11-12T10%3a17%3a17.000Z

    here it is

    Tuesday, September 13, 2016 10:18 AM
  • > here it is
     
    Looks better, but there are no RDS settings in the report. Where is your
    "not working GPO" linked to? What settings does it contain exactly?
     
    Tuesday, September 13, 2016 12:25 PM
  • This is the GPO. it is defined by user.

    Tuesday, September 13, 2016 2:37 PM
  • > This is the GPO. it is defined by user.
     
    It would be helpful if you answer ALL questions.
     
    Where is this GPO linked to?
     
    And are you aware that on your TS, Loopback Replace is enabled?
     
    Tuesday, September 13, 2016 2:53 PM
  • It is delegated to a security group and linked to the domain.

    I don't know what 'LoopBack Replace' does.

    Tuesday, September 13, 2016 5:17 PM
  • > It is delegated to a security group and linked to the domain.
     
    Do domain computers have read access? -> MS16-072...
     
    > I don't know what 'LoopBack Replace' does.
     
    Then get started - you enabled it, so you should know:
     
     
     
    Wednesday, September 14, 2016 8:58 AM
  • Yes they do.

    I've already changed to Merge but still no effect.

    the new report

    https://fagirpt-my.sharepoint.com/personal/frede_silva_fagir_pt/_layouts/15/guestaccess.aspx?guestaccesstoken=TY47bCJh2bEOh3%2b%2bKnrKuXv1xEQdzD%2bQW8uyZUwNNUA%3d&docid=0b84100c01d7a49f9a723a547e0017484&rev=1&expiration=2016-11-15T10%3a59%3a28.000Z

    Friday, September 16, 2016 10:59 AM
  • > I've already changed to Merge but still no effect.
     
    ...giving up. Domain Computers need read access to all User GPOs for
    them to be applied -> MS16-072.
     
    Monday, September 19, 2016 8:20 AM