GPO auto update does not re-apply changes
Posted on 2011-03-11
I am currently looking into an issue in our environment where settings thorugh GPO do not seem to be forced to re-apply through standard log on or 90 minute AD checkins. We have 2 applications that require IE8 pop up behavior to be a certain way and many times we have to gpupdate /force to get this behavior to act as it should. This is not the only setting that seems to need re-applied through gpupdate /force, other things like out intranet homepage (whis set to not be adjusted by the user) does not get reset during log on, or the 90 min interval that is set by default with GPO. I have been looking into GP troubleshooting on the workstation for a few day. I have turned on the verbose logging of userenv (we are on XP currently) and the logs are not very helpful. It will mention multiple GPO's in the log but never quite states if something was applied or not, the compareGPlists = no changes made as lists are identical makes me wonder if these lists (where ever they are) should be cleared daily. My test for this currently is modifying the homepage via regedit on a workstation and reboot, unless I do a GPUdate /force, the homepage doesn't get changed back to what it is set to be in the GPO. Any thoughts about this would be helpful, there are so many different angles to GPO's that it can become a bit overwhealming, but ultimately I feel some settings are not applying as it should unless you use the REAPPLY (GPUPDATE /FORCE). I have used the GPResult which will show me that it has applied everything, yet the homepage will still be what I changed it to be for testing.