none
GPO not applying to one computer

    Question

  • Hello,

    we have followed https://technet.microsoft.com/en-us/library/jj649078.aspx to setup redirected folders for a small setup with 6 computers.

    5 computers receive the "Folder Redirection" policy, 1 computer does not.

    Here is a gpresult from the computer in question:

    

    Here is the policy:

    I have disjoined and re-joined the machine to the domain, noted that other gpo (eg: drive mapping and print mapping) applies with no issues.

    Please review and let me know if you need more information.

    Regards,

    Tuesday, August 02, 2016 7:28 PM

Answers

  • Hi,

    This behavior is actually described in https://support.microsoft.com/en-us/kb/3163622. One way to fix this is to add "Authenticated Users" with Read permission into the Delegation tab. Another way is to add "Domain Computers" to Security Filtering list.

    Symptoms
    All user Group Policy, including those that have been security filtered on user accounts or security groups, or both, may fail to apply on domain joined computers.

    Cause
    This issue may occur if the Group Policy Object is missing the Read permissions for the Authenticated Users group or if you are using security filtering and are missing Read permissions for the domain computers group.

    Resolution

    To resolve this issue, use the Group Policy Management Console (GPMC.MSC) and follow one of the following steps:

    • Add the Authenticated Users group with Read Permissions on the Group Policy Object (GPO).
    • If you are using security filtering, add the Domain Computers group with read permission.

    Similar thread for your reference:

    Patch Tuesday - KB3159398

    https://social.technet.microsoft.com/Forums/en-US/e2ebead9-b30d-4789-a151-5c7783dbbe34/patch-tuesday-kb3159398?forum=winserverGP

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by davevdm Monday, August 08, 2016 6:12 PM
    • Unmarked as answer by davevdm Monday, August 08, 2016 6:12 PM
    • Marked as answer by davevdm Monday, August 08, 2016 6:12 PM
    Wednesday, August 03, 2016 5:46 AM
    Moderator

All replies

  • Since youre using security filtering , this group policy applying only for specific user groups. as a testing purpose remove this security filtering and try to apply this policy for all the users in this ou.

    Darshana Jayathilake

    Tuesday, August 02, 2016 11:02 PM
  • Hi,

    This behavior is actually described in https://support.microsoft.com/en-us/kb/3163622. One way to fix this is to add "Authenticated Users" with Read permission into the Delegation tab. Another way is to add "Domain Computers" to Security Filtering list.

    Symptoms
    All user Group Policy, including those that have been security filtered on user accounts or security groups, or both, may fail to apply on domain joined computers.

    Cause
    This issue may occur if the Group Policy Object is missing the Read permissions for the Authenticated Users group or if you are using security filtering and are missing Read permissions for the domain computers group.

    Resolution

    To resolve this issue, use the Group Policy Management Console (GPMC.MSC) and follow one of the following steps:

    • Add the Authenticated Users group with Read Permissions on the Group Policy Object (GPO).
    • If you are using security filtering, add the Domain Computers group with read permission.

    Similar thread for your reference:

    Patch Tuesday - KB3159398

    https://social.technet.microsoft.com/Forums/en-US/e2ebead9-b30d-4789-a151-5c7783dbbe34/patch-tuesday-kb3159398?forum=winserverGP

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by davevdm Monday, August 08, 2016 6:12 PM
    • Unmarked as answer by davevdm Monday, August 08, 2016 6:12 PM
    • Marked as answer by davevdm Monday, August 08, 2016 6:12 PM
    Wednesday, August 03, 2016 5:46 AM
    Moderator