Solved

Single policy stopped applying to only one machine

Posted on 2007-04-11
11
160 Views
Last Modified: 2010-03-18
We've set up Active Directory, to deploy software through group policy.  We've set this functionality up with OfficeXP (I know old version) and it works fine with most people.  Today though, we had a user get his Office XP uninstalled automatically.

I checked the group policy results wizard for that computer, and under the settings tab, and "installed applications" under "computer poicy" it shows everything but Office XP.  I panicked, because I was worried that this would be a problem with everyone in the company.  I ran the results wizard against several other machines, but they all show it has having Office XP applied, yet the computer in question shows it, and only it as missing.

In the group policy results wizard, under the summary tab, Office XP doesn't show for either "applied" or "denied" group policy objects.  So it just doesn't see it.

The only thing I can think that would affect this is that recently I changed the name of the Office XP software deployment setting in grou policy by opening gpedit for that policy, computer configuration -> Software settings -> Software installation.  On the right-hand side, it showed the software settings for this policy.  I right-clicked, and chose properties, then changed what was showing in the "name" field (long story).

Other desktops have rebooted without issue though, so I'm questioning how much if any what I did yesterday affected what's going on now.  It's baffling to me that it's happening with just that policy, and just that computer.
0
Comment
Question by:schnibitz
  • 5
  • 4
11 Comments
 
LVL 27

Expert Comment

by:Jason Watkins
Comment Utility
Have you tried flushing the client's DNS cache, and then rebooting the affected computer?

/F
0
 

Author Comment

by:schnibitz
Comment Utility
No, but I'll try that.  How would that affect the fact that only the Office XP policy was affected?
0
 
LVL 27

Expert Comment

by:Jason Watkins
Comment Utility
Clients get the policy from the DCs.  DCs are found in active directory through DNS.  If the deployed file name has changed or been relocated, then the package must be re-deployed to the clients through group policy.

/F
0
 

Author Comment

by:schnibitz
Comment Utility
The DNS cache flush didn't work BTW.  After a reboot the computer still didn't reacquire officeXP.
0
 

Author Comment

by:schnibitz
Comment Utility
BTW, here's some additional info:

Hi there thanks for the reply, comments in-line:

It's been in it's same OU the entire time, and that OU has more software policies applied to it too.  The rest of that software is still installed on his machine.

I have configured the option for  "Uninstall the application when they fall out of scope management" configured.

Deployed per-machine

In the Event log, it shows "application management" events about the application being uninstalled as it normally would if it were removed from the OU, but just for Office, not any of the other apps. )-:
0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 

Author Comment

by:schnibitz
Comment Utility
Also, if I go into delegation, for the policy in question, and add the computer account, and "apply" permissions, it STILL doesn't deploy.
0
 
LVL 27

Expert Comment

by:Jason Watkins
Comment Utility
Are you running GPUpdate on the server after each change?

Also, are you performing a full reboot of the client between each attempt?

/F
0
 

Author Comment

by:schnibitz
Comment Utility
I am not running gpupdate on the server, but I am going into "sites and services" and running a "synchronize now" to each DC.

I am rebooting after each attempt.

I also just removed the computer from the OU that these policies applied to.  After a reboot, the client system uninstalled the rest of the software.  I've since added the client machine back, and it has now re-installed the software with OfficeXP.  It seems moving it to and from an OU fixed something.
0
 
LVL 27

Expert Comment

by:Jason Watkins
Comment Utility
Great, sometimes active directory and group policy need a little push...

/F
0
 
LVL 1

Accepted Solution

by:
Computer101 earned 0 total points
Comment Utility
PAQed with points refunded (500)

Computer101
EE Admin
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Trying to figure out group policy inheritance and which settings apply where can be a chore.  Here's a very simple summary I've written which might help.  Keep in mind, this is just a high-level conceptual overview where I try to avoid getting bogge…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
This video discusses moving either the default database or any database to a new volume.
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

7 Experts available now in Live!

Get 1:1 Help Now