Some group policy objects not applied on some computers

By sostermann ·
In a Windows 2003 domain we have some enforced GP settings that are not being applied to some computers.

There are two computers that I know of, one is Windows 2000 and the other is XP Pro.

gpresult -v shows that the settings were applied. Out of dozens of GP settings:

On the XP box - disable registry access and prevent access to Internet Options are not applied.

On the 2000 box - disable registry access is not applied.

The exact same GP object is applied to all other machines correctly. I have found not issues in the event logs or the GPOTOOL. I have no idea why gpresult shows that they were applied, yet they still have access to the areas that they were supposed to block.

Any ideas?


This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -

What is different with these 2 machines?

by OH Smeg Moderator In reply to Some group policy objects ...

My first option would be to look at the software loads and see if there is something there that is blocking this GP from being applied.

After that I have no idea where to look as the GP is being applied to the rest of the computers so it's working correctly so it must be something unique to these two machines that is preventing it being applied and the obvious thing would be some software that needs access to the registry to do it's job.


Collapse -

Solved (sort of)

by sostermann In reply to What is different with th ...

Doing a gpupdate -force on one of the DC's seems to have resolved it.

What those two had in common was they were getting the GP from a different DC than most of the other machines. What's weird though is that the two machines were not having the exact same problem. One GP setting that wasn't being applied to one was applied on the other. Stranger yet, another machine that was pulling it's GP from the same DC didn't experience any of the problems.

Thanks for you reply.

Related Discussions

Related Forums