[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now


GPUpdate /force hangs and empty desktop while offline

Posted on 2009-02-12
Medium Priority
Last Modified: 2012-05-06

LAPTOP: HP 8230 ; XP SP3 eng.
NETWORK: 2DCs Windows server 2003 SP2 Std

I have a big problem with a laptop on my network. It is the second case like that. For the first case, I just reinstalled the laptrop without loosing too much time on the problem. But now, I think that this may be on the server side...

I think that the GPOs containing settings for the "computer" section are not being applied. Also, when I am logged with a network user account and I launch gpupdate /force it hangs. (but It works well in safe mode)

I also have problem when I want to use the same laptop offline. I can't logging well. Rught after I enter my credentials, the system wait wait wait with an empty desktop and a mouse cursor (that I can move)... The local user for this computer can login while offline.

I verified the Secure Channel using nltest.exe and the results looks fine.

Can someone help me please....
Thank you so much!
Question by:virginie8
  • 4
  • 4
  • 2
LVL 21

Expert Comment

ID: 23632412
For better troubleshooting I suggest the following:

- Start the laptop with the network cable connected and wait until you see the login screen.
- Then start the computer management console (compmgmt.msc) on a server or another XP computer with a domain administrator account and choose to connect to another computer and type in the NETBIOS or DNS name of the laptop.
- You should now have accesss to the event log of the laptop. Are there any errors in it related to group policies?
LVL 66

Expert Comment

ID: 23632632
Both of these problems point to the source on the local box as Explorer.exe.....

I would start with the System File Checker...


sfc /purgecache
sfc /scannow

You WILL need the XP CD for this to complete...

Scannow sfc

Author Comment

ID: 23633931
Thank you for your answers:
I did two things:

--1-- JBlond / I did what you asked me. But here is no entries regarding GPOs in the event viewer.

--2-- Johnb6767 / I did both switches for sfc command but I still have the same problem.

As I wrote before, the GPupdate/force hangs in normal mode but not in safe mode.
I know the the computer GPOs are no applied because normally I encrypt Offline files and I disable this option. With this computer, the Offline files are not encrypted and the option is available...
The user GPO are applied because the login script works well.

Thank you
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

LVL 66

Accepted Solution

johnb6767 earned 1200 total points
ID: 23637040
I would verify that there is nothing interfering with Explorer.exe

Two things.....

How to configure Windows XP to start in a "clean boot" state

Then retry it.... If it works, you can use goood old fashioned "Process of elimination" to start enabling services/startups in chunks to see if something rears it's head as the culprit...

Secondly.... Make sure the PC is virus/spyware free....

SUPERAntiSpyware.com - AntiAdware, AntiSpyware, AntiMalware!
One of the best on the market (and it is free, although you can upgrade and get Real Time Protection)

Manual Definitions Download....

Also, no reported errors by Winlogon, or Explorer as a "hungapp" in the logs?
LVL 21

Assisted Solution

JBlond earned 800 total points
ID: 23637492
I think there are two problems, the user profile and the group policy problem.
User profile
If the problem still persists after you have tried a clean boot as johnb6767 proposed, maybe there's something wrong with your user profile. Connect to the laptops administrative share \\LAPTOPNAME\C$ when its displaying the logon screen with a domain administrator account and rename the folder of your profile in the "Documents and Settings" folder. After that try to login with your account.
Group policy
Please go to the group policy management console on one of the servers and create a "Resultant Set of Policies" (RSoP) for the combination of the laptop and the user.
If you don't know how to do that, it is described here...
Access RSoP data for an existing computer and user (logging mode)
Is the setting for the offline files encryption listed in the RSoP? If not, then its likely that the computer account of the laptop is not stored where the group policies are applied.

Author Comment

ID: 23663093

1-- I started XP with clean boot state as suggested. After that, I was able to loggin with network user when offline. But the gpupdate /force wasn't working.

2-- I ran the scan on that computer using SUPERAntiSpyware.com and there was only some cookies...

3-- I also discovered that when I uninstall the Kaspersky Antivurus, I don't have anymore problem. I contacted Kaspersky support and they told me that they never heared of cinflict between KAV and GPOs...


1-- I deleted all the profiles (except local admin) and that didn't solved my problem

2-- I ran the RSoP for this computer with a network user and I got a weird result. For the computer part, there was an error for the registry part (when I looked for the properties). I got: Registry processed successfully but failed to log resultant set of policy information."

3- The Offline files encryption is "ON" in the RSoP.

From now, I really don't know what to do...

Author Comment

ID: 23663627

** I ran again the RSoP for this computer without KAV installed. There was NO error at all....
LVL 21

Expert Comment

ID: 23667695
Please check again, if there are now errors in the event log without KAV installed. If not, please rejoin the computer to the domain. After a restart, login with the domain administrator account and try a gpupdate /force again. After that there should be some group policy related entries in the event log.

Author Comment

ID: 23671163
I finally found the problem: Kaspersky component: Proactive defense. As soon that I disable it, everything works perfectly. It is one of the 6 security components included in the KAV package that we bought. I will try to configure it in order to let the gpo apply as supposed.

Thank you guys for your help.
LVL 21

Expert Comment

ID: 23671214
Thank you for the information!

Featured Post


Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ever visit a website where you spotted a really cool looking Font, yet couldn't figure out which font family it belonged to, or how to get a copy of it for your own use? This article explains the process of doing exactly that, as well as showing how…
This article shows how to use a free utility called 'Parkdale' to easily test the performance and benchmark any Hard Drive(s) installed in your computer. We also look at RAM Disks and their speed comparisons.
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
In this video, viewers will be given step by step instructions on adjusting mouse, pointer and cursor visibility in Microsoft Windows 10. The video seeks to educate those who are struggling with the new Windows 10 Graphical User Interface. Change Cu…
Suggested Courses

872 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question