GPO software installation 'gpo filtering not applied (empty)' on some PC's

Posted on 2011-04-27
Medium Priority
Last Modified: 2012-05-11
Hello all,

I have a small piece of software as an MSI which I need to roll out using GPO to a number of different PC's.

I created the GPO and rolled out the MSI and only a few of the PC's installed the software.  The majority failed.  I tried to force a gpupdate on all the PC's but this did not make a difference.  I also left them overnight to allow the DC's to replicate, but this did not make a difference.

After looking at gpresult /r on the failing PC's the GPO was shown as 'gpo filtering not applied (empty)'.  What does this mean?

The only link I can find between all the PC's which have installed the software is that they are all on one particular DC (I found this out using  echo %logonserver%).  We have 3 DC's and all the PC's that have installed the software are on one particular DC.

I would appreciate any help
Question by:stalbansschool
  • 4
  • 2
LVL 14

Expert Comment

ID: 35473771
i would suspect connectivity problem - are you using vlans? (different vlans for different dcs?) can you ping from not installed pcs to dc which it was installed from? is your ou conatining necessary computers accounts? do you hav some kind of policy loopback or filetrring?


Expert Comment

ID: 35473790
Check if there are any replication error on the domain controllers.

Author Comment

ID: 35473888
Thanks guys, I can ping all servers without problem so I dont think it is a connectivity problem.  All computers are in thier correct OU's etc.

I believe that it may be a replication error, I have had a quick look to check for errors but I am not sure the best way I can do this.  Can you advise me please?
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.


Author Comment

ID: 35473984
After a little research I tried using the command repadmin /showrepl on one of the DC's.

No errors are reported and they have all replicated a short while ago today.
LVL 14

Expert Comment

ID: 35474139
are you getting any errors on rsop.msc? - if you have nothing it means your group policy is filterred - and not getting applayed to computers. do you have this gp applaied and enforced to all ous conatining desired computers?

Accepted Solution

stalbansschool earned 0 total points
ID: 35474389
Ok, it looks like it was a problem with my GPO (although I am still unsure what it was).

Instaed of directly using the MSI's for deplayoment, I used a script is silently install the MSI's and assigned this as a startup script.  This seemed to work fine.


Author Closing Comment

ID: 35503319
I provided me own answer which was a work around rather than a solution

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
A bad practice commonly found during an account life cycle is to set its password to an initial, insecure password. The Password Reset Tool was developed to make the password reset process easier and more secure.
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question