I have a single domain which is running in replication between 2 DC's. We upgraded one of the DC's to new hardware so we had to remove the current one and add a new DC's to the directory (this was a complete fresh install not just a hardware update). Since this has happened GPO's are not being enforced to the workstations.
The GPO's are being applied. I've checked on Windows 2000/XP machines and can see it enforced on the local system via gpresult and rsop.msc both show them.
I'm applying this GPO directly to an OU which has 2 objects for testing at this point. The setting in the GPO i'm trying to have work are for SUS. So I've loaded the wuau template for Administrative Templates. I know the settings are correct due to the fact it has worked the months prior to this DC change. I've checked on both DC's and the GPO is applied in the OU correctly with the right settings.
I've seen a problem with FRS (File Rep Service) not replicating correctly between the two DC's. Here's a posting of the even log:
Event ID: 13516
Description: The File Replication Service is no longer preventing the computer DESCARTES from becoming a domain controller. The system volume has been successfully initialized and the Netlogon service has been notified that the system volume is now ready to be shared as SYSVOL.
Type "net share" to check for the SYSVOL share.
I checked on Eventid.net for information about this and showed that this may not be something to worry about. The SYSVOL shares are up on both DC's and working.
I'm just covering all angle's here to make sure I'm not missing anything.