Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium



Posted on 2011-10-26
Medium Priority
Last Modified: 2012-05-12
I need some help.

I'm running windows server 2008 standard edition as my domain controller / active directory.
When I create a GPO and apply it to an OU it takes multiple reboots and logins on a client in order for the GPO to be applied. For example. I tried created a GPO which redirects  "My documents" folder on a client to a shared drive on one of my servers. I applied it to an OU which as a few users in it. I tried running gpupdate /force and no difference. I have to reboot the client computer about 3 times and try logging in sometimes either twice or even up to 5 times till that GPO takes affect.. Why is that?
Even once I remove the GPO from that OU, its the same process.
Any idea why this happens????
please help and thank you
Question by:MrMay
  • 3
  • 2
LVL 57

Expert Comment

by:Mike Kline
ID: 37033766
Darren has  a good explanation of why multiple reboots are needed for some policies like folder redirection.  I have this bookmarked as I can't say it better than him   http://www.minasi.com/forum/topic.asp?TOPIC_ID=30233

You may also want to start inspecting your logs to check for issues/errors.  It should not take 5 reboots.



Author Comment

ID: 37033847
thanks for the suggestions mkline71......  which logs should I be checking.. on the server or the clients?
LVL 57

Expert Comment

by:Mike Kline
ID: 37034062
Yes both the clients and servers (DCs), but start with the clients

Accepted Solution

MrMay earned 0 total points
ID: 37056582
It looks like the firewall was preventing the gp for running. I disabled the firewall on a workstation (to try it out) and the group policy kicked in.

Author Closing Comment

ID: 37905238
my solution fixed the problem.

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Article by: Shawn
IT teams define success as solving problems quickly. To enable ITSM modernization we have to think of adopting the tools and methods that will enable resolution of ITSM issues more quickly.
Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

571 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question