I meant to say "Did you use sysprep to remove the SID....."
Main Topics
Browse All TopicsI have an 2003 AD environment. I just imaged a room of computers. I do a gpresult and the only GPOs that show up are the domain default one. The ones in the OU don't. I do a gpupdate /force and some of the policies such as WSUS updates start working but not the rest of them. The gpupdate /force not shows all the GPOs but most are don't doing their thing. Any ideas?
thanks Gary
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Here is my sysprep, not sure if got it out of there, the XXX's are to hide the product key and password here.
;SetupMgrTag
[Unattended]
UnattendMode=defaulthide
OemSkipEula=Yes
[GuiUnattended]
AdminPassword="F@ther1!"
EncryptedAdminPassword=NO
OEMSkipRegional=1
TimeZone=35
OEMSkipWelcome=1
[UserData]
ProductKey=XXXX.etc
FullName="nccvt"
OrgName="nccvt"
Computername=
[Display]
BitsPerPel=32
Xresolution=1680
YResolution=1050
[TapiLocation]
CountryCode=1
Dialing=Tone
AreaCode=302
[SetupMgr]
DistFolder=C:\sysprep\i386
DistShare=windist
[Identification]
JoinDomain=nccvt
Domainadmin=nccvt\gary
Domainadminpassword=XXXX
[Networking]
InstallDefaultComponents=Y
[sysprepcleanup]
Unless you used the --nosidgen option when running sysprep then the sid was removed. I don't see that in your answer file.
Also you must not reboot the machine after running sysprep as a new sid will be generated.
If you used sysprep, allowed the machine to shutdown, then cloned the drive then its probably not a sid problem.
Just to be sure you could use newsid on one of the machiens that it not working to give it a new sid.
http://technet.microsoft.c
Try running that then doing GPUPDATE /FORCE and rebooting to see if the GPOs work.
Sometimes you need to reboot up to three times to be sure that all GPO are applied.
I ran sidgen against 2 of the imaged computers and both had already different sids when it asked me if I wanted to do a new one. I let one of them do its thing and reboot. The are all in the same OU and I did gpresult and before I do a gpupdate they don't get all the policies but after I do the /force they do BUT they still don't all apply even after a reboot a couple of times. I just noticed in my answer file that the administrator password is different than what was the imaged one. Could that be a problem?
Business Accounts
Answer for Membership
by: skykingjwcPosted on 2009-08-19 at 19:35:50ID: 25139012
Did you remove sysprep to remove the SID from the image before copying them to the machines? Duplicate SIDS will cause any number of active directory probles, including not applying GPO policies.