none
GPUpdate doesn't seem to be working for user settings

    Question

  • Hello all. I'm at my wits end with this problem:

    I created a simple GPO doing basic folder redirection for a group of users in their own OU. I linked the GPO to the OU and applied it to Authenticated Users and Domain Users, but it didn't take. I tried linking the GPO at the Domain level and created a security group for these users, applying the GPO to their security group only. Again, it doesn't work. Each time I've run GPUPDATE (with and without /force) and it returns successfully updated both computer and user policies. However, gpresult on logon doesn't show any of these new policies.

    Furthermore, when I run the Group Policy Reults wizard, it shows that the computer settings were updated today, but user settings  - not since last week!

    Event viewer is not showing errors on either the client or the DC.

    The client is windows 8.1 and the DC is server 2003r2

    What is going on here? Please help!


    • Edited by B Josephs Tuesday, January 6, 2015 4:45 PM
    Tuesday, January 6, 2015 4:44 PM

Answers

  • on the domain create a GPO containing this Computer Configuration\Administrative Templates\System\Logon\Always wait for the network at computer startup and user logon and restart the windows 8 machines

    Thanks

    • Marked as answer by B Josephs Thursday, January 8, 2015 9:11 PM
    Tuesday, January 6, 2015 7:34 PM

All replies

  • Do any GPOs work, be handy if you provide a full gpresult report, i would also remove the enforced from Default domain policy as you wont require it
    Tuesday, January 6, 2015 4:57 PM
  • Thanks for your swift reply. The GPO linked at the domain level is now starting to work. The one linked at the OU level still doesn't seem to register. I could live with that, but I would like to know what I'm doing wrong for the future.

    Also, I added Folder redirection for Desktop to the GPO (I forgot originally) and again after a few rounds of gpupdate it doesn't take.

    Here is the GPREULT -v output:


    Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
    c 2013 Microsoft Corporation. All rights reserved.

    Created on 1/6/2015 at 12:46:21 PM

    RSOP data for DOMAIN\testUser on TEACHER : Logging Mode
    --------------------------------------------------------

    OS Configuration:            Member Workstation
    OS Version:                  6.3.9600
    Site Name:                   N/A
    Roaming Profile:             N/A
    Local Profile:               C:\Users\testUser
    Connected over a slow link?: No


    USER SETTINGS
    --------------
        CN=Test User,OU=Students,DC=School,DC=local
        Last time Group Policy was applied: 1/6/2015 at 12:45:27 PM
        Group Policy was applied from:      server.School.local
        Group Policy slow link threshold:   500 kbps
        Domain Name:                        DOMAIN
        Domain Type:                        Windows 2000
       
        Applied Group Policy Objects
        -----------------------------
            Default Domain Policy
            Windows 8 Control
            Office Control
            Redirect Student Folders

        The following GPOs were not applied because they were filtered out
        -------------------------------------------------------------------
            Local Group Policy
                Filtering:  Not Applied (Empty)

        The user is a part of the following security groups
        ---------------------------------------------------
            Domain Users
            Everyone
            BUILTIN\Users
            NT AUTHORITY\INTERACTIVE
            CONSOLE LOGON
            NT AUTHORITY\Authenticated Users
            This Organization
            LOCAL
            Students
            Medium Mandatory Level
           
        The user has the following security privileges
        ----------------------------------------------


        Resultant Set Of Policies for User
        -----------------------------------

            Software Installations
            ----------------------
                N/A

            Logon Scripts
            -------------
                N/A

            Logoff Scripts
            --------------
                N/A

            Public Key Policies
            -------------------
                N/A

            Administrative Templates
            ------------------------
                GPO: Windows 8 Control
                    Folder Id: Software\Policies\Microsoft\Windows\Explorer\NoPinningStoreToTaskbar
                    Value:       1, 0, 0, 0
                    State:       Enabled

                GPO: Windows 8 Control
                    Folder Id: Software\Policies\Microsoft\WindowsStore\RemoveWindowsStore
                    Value:       1, 0, 0, 0
                    State:       Enabled

                GPO: Windows 8 Control
                    Folder Id: Software\Policies\Microsoft\Windows\Explorer\LockedStartLayout
                    Value:       1, 0, 0, 0
                    State:       Enabled

                GPO: Office Control
                    Folder Id: Software\Policies\Microsoft\Office\12.0\Common\Internet\DisableClipArtAndMediaDownload
                    Value:       1, 0, 0, 0
                    State:       Enabled

                GPO: Windows 8 Control
                    Folder Id: Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\1
                    Value:       99, 0, 109, 0, 100, 0, 32, 0, 47, 0, 99, 0, 32, 0, 34, 0, 92, 0, 92, 0, 83, 0, 99, 0, 104, 0, 111, 0, 111, 0, 108, 0, 46, 0, 108, 0, 111, 0, 99, 0, 97, 0, 108, 0, 92, 0, 83, 0, 121, 0, 115, 0, 86, 0, 111, 0, 108, 0, 92, 0, 83, 0, 99, 0, 104, 0, 111, 0, 111, 0, 108, 0, 46, 0, 108, 0, 111, 0, 99, 0, 97, 0, 108, 0, 92, 0, 80, 0, 111, 0, 108, 0, 105, 0, 99, 0, 105, 0, 101, 0, 115, 0, 92, 0, 123, 0, 55, 0, 54, 0, 51, 0, 53, 0, 65, 0, 51, 0, 69, 0, 66, 0, 45, 0, 68, 0, 56, 0, 57, 0, 66, 0, 45, 0, 52, 0, 51, 0, 70, 0, 70, 0, 45, 0, 65, 0, 65, 0, 52, 0, 69, 0, 45, 0, 69, 0, 69, 0, 66, 0, 55, 0, 52, 0, 68, 0, 70, 0, 68, 0, 48, 0, 49, 0, 68, 0, 52, 0, 125, 0, 92, 0, 85, 0, 115, 0, 101, 0, 114, 0, 92, 0, 83, 0, 99, 0, 114, 0, 105, 0, 112, 0, 116, 0, 115, 0, 92, 0, 76, 0, 111, 0, 103, 0, 111, 0, 110, 0, 92, 0, 77, 0, 111, 0, 100, 0, 101, 0, 114, 0, 110, 0, 67, 0, 111, 0, 110, 0, 116, 0, 114, 0, 111, 0, 108, 0, 46, 0, 98, 0, 97, 0, 116, 0, 34, 0, 0, 0
                    State:       Enabled

                GPO: Office Control
                    Folder Id: Software\Policies\Microsoft\Office\12.0\Clip Organizer\DisableClipsOnline
                    Value:       1, 0, 0, 0
                    State:       Enabled

                GPO: Windows 8 Control
                    Folder Id: Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet
                    Value:       1, 0, 0, 0
                    State:       Enabled

            Folder Redirection
            ------------------
                GPO: Redirect Student Folders
                    Folder Id: RoamingAppData
                        Primary Computer Evaluation: Not evaluated because primary computer policy is not enabled
                        InstallationType:            basic
                        Grant Type:                  Exclusive Rights
                        Move Type:                   Contents of Local Directory moved
                        Policy Removal:              Leave folder in existing location
                        Redirecting Group:           N/A
                        Redirected Path:             \\server\data\users\students\%USERNAME%\AppData\Roaming
                        Configuration Control:       Group Policy
                                      
                GPO: Redirect Student Folders
                    Folder Id: Documents
                        Primary Computer Evaluation: Not evaluated because primary computer policy is not enabled
                        InstallationType:            basic
                        Grant Type:                  Exclusive Rights
                        Move Type:                   Contents of Local Directory moved
                        Policy Removal:              Leave folder in existing location
                        Redirecting Group:           N/A
                        Redirected Path:             \\server\data\users\students\%USERNAME%\Documents
                        Configuration Control:       Group Policy
                                      
                GPO: Redirect Student Folders
                    Folder Id: Music
                        Primary Computer Evaluation: Not evaluated because primary computer policy is not enabled
                        InstallationType:            basic
                        Grant Type:                  Exclusive Rights
                        Move Type:                   Contents of Local Directory moved
                        Policy Removal:              Leave folder in existing location
                        Redirecting Group:           N/A
                        Redirected Path:             My Music
                        Configuration Control:       Group Policy
                                      
                GPO: Redirect Student Folders
                    Folder Id: Videos
                        Primary Computer Evaluation: Not evaluated because primary computer policy is not enabled
                        InstallationType:            basic
                        Grant Type:                  Exclusive Rights
                        Move Type:                   Contents of Local Directory moved
                        Policy Removal:              Leave folder in existing location
                        Redirecting Group:           N/A
                        Redirected Path:             My Videos
                        Configuration Control:       Group Policy
                                      
                GPO: Redirect Student Folders
                    Folder Id: Pictures
                        Primary Computer Evaluation: Not evaluated because primary computer policy is not enabled
                        InstallationType:            basic
                        Grant Type:                  Exclusive Rights
                        Move Type:                   Contents of Local Directory moved
                        Policy Removal:              Leave folder in existing location
                        Redirecting Group:           N/A
                        Redirected Path:             My Pictures
                        Configuration Control:       Group Policy
                                      
            Internet Explorer Browser User Interface
            ----------------------------------------
                N/A

            Internet Explorer Connection
            ----------------------------
                N/A

            Internet Explorer URLs
            ----------------------
                N/A

            Internet Explorer Security
            --------------------------
                N/A

            Internet Explorer Programs
            --------------------------
                N/A

    Tuesday, January 6, 2015 6:08 PM
  • on the domain create a GPO containing this Computer Configuration\Administrative Templates\System\Logon\Always wait for the network at computer startup and user logon and restart the windows 8 machines

    Thanks

    • Marked as answer by B Josephs Thursday, January 8, 2015 9:11 PM
    Tuesday, January 6, 2015 7:34 PM
  • Ok, I did that. The funny thing is that it seems to take an inordinate time for GPO's to take effect. Even with gpupdates and restarts...
    Tuesday, January 6, 2015 10:23 PM
  • Did it work?
    Tuesday, January 6, 2015 10:50 PM
  • Check the gpsvc logs whether there is any delay in policy processing
    Wednesday, January 7, 2015 4:57 AM
  • Many thanks to all of you for helping me through this problem!

    @Alex

    It seems to have worked in that most of the folder redirection is now working. However, Desktop redirection is not.

    @Prabhu et al

    Again, Documents are redirecting as they should but not desktop. Here is the piece of gpsvc log that seems to indicate a problem:

    GPSVC(3a8.dc4) 13:48:32:842 ProcessGPOs(User): Processing extension Folder Redirection
    GPSVC(3a8.dc4) 13:48:32:842 ReadStatus: Read Extension's Previous status successfully.
    GPSVC(3a8.dc4) 13:48:32:842 ReadGPOList:++
    GPSVC(3a8.dc4) 13:48:32:842 CheckGPOs: ReadGPOList count = 0
    GPSVC(3a8.dc4) 13:48:32:842 ReadGPOList:++
    GPSVC(3a8.dc4) 13:48:32:842 CheckGPOs: ReadGPOList count = 0 for user: S-1-5-21-2785941673-20248116-3395294421-1971
    GPSVC(3a8.dc4) 13:48:32:842 CompareGPOLists:  One list is empty
    GPSVC(3a8.dc4) 13:48:32:842 CompareGPOLists:  One list is empty
    GPSVC(3a8.dc4) 13:48:32:842 GPLockPolicySection: Sid = S-1-5-21-2785941673-20248116-3395294421-1971, dwTimeout = 30000, dwFlags = 0x0
    GPSVC(3a8.dc4) 13:48:32:842 SID = S-1-5-21-2785941673-20248116-3395294421-1971
    GPSVC(3a8.dc4) 13:48:32:842 bMachine = 0
    GPSVC(3a8.dc4) 13:48:32:842 Global Sync Lock Called
    GPSVC(3a8.dc4) 13:48:32:842 Writer Lock got immediately.
    GPSVC(3a8.dc4) 13:48:32:842 Global Lock taken successfully
    GPSVC(3a8.dc4) 13:48:32:842 ProcessGPOList:++ Entering for extension Folder Redirection
    GPSVC(3a8.dc4) 13:48:32:842 UserPolicyCallback: Setting status UI to Applying Folder Redirection policy
    GPSVC(3a8.dc4) 13:48:32:842 GetWbemServices: CoCreateInstance succeeded
    GPSVC(3a8.dc4) 13:48:32:904 ConnectToNameSpace: ConnectServer returned 0x0
    GPSVC(3a8.dc4) 13:48:32:951 LogExtSessionStatus: Successfully logged Extension Session data
    GPSVC(3a8.dc4) 13:48:33:467 ProcessGPOList: Extension Folder Redirection returned 0x3eb.
    GPSVC(3a8.dc4) 13:48:33:467 ProcessGPOList: Extension Folder Redirection was able to log data. RsopStatus = 0x0, dwRet = 1003, Clearing the dirty bit
    GPSVC(3a8.dc4) 13:48:33:467 ProcessGPOList:--
    GPSVC(3a8.dc4) 13:48:33:467 CPolicyCriticalSectionCollection: Deleting critical section for UserSid <S-1-5-21-2785941673-20248116-3395294421-1971>
    GPSVC(3a8.dc4) 13:48:33:467 Deleting sidString <S-1-5-21-2785941673-20248116-3395294421-1971>
    GPSVC(3a8.dc4) 13:48:33:467 ProcessGPOs(User): Extension Folder Redirection ProcessGroupPolicy failed, status 0x3eb.
    GPSVC(3a8.dc4) 13:48:33:467 ProcessGPOs(User): -----------------------

    Any ideas?

    Thursday, January 8, 2015 7:00 PM
  • Ok - I found the problem with Desktop. I didn't realize that I had "give user exclusive rights to Desktop" enabled. Now everything works as it should in the GPO that is linked to the domain. The GPO linked to the OU (which is now superfluous) still isn't registering at all. I would still like to know what I'm doing wrong for the future.
    Thursday, January 8, 2015 9:10 PM