GPO not working

quickslvr
quickslvr used Ask the Experts™
on
i have created various GPO`s,but i have to admit not a single one is working.

a drive mapping GPO is set,not working.

two software GPO are set, not working either!

i tried with gpupdate /force, no way! this is going to freak me out.

any advice pls?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2012

Commented:
How are you applying the GPOs? Are you applying them to the proper OU or container where the computer and user objects are located?

Run ROSP to view the GPO being applied
Top Expert 2013

Commented:
Can you run an RSoP report from GPMC and post the results here

rsop
Thanks

Mike

Commented:
Or, run

gpresult /h c:\results.html

Open in new window


on a computer in question. Check the results file to see if your computers even see the GPOs to be applied.
Are you blocking inheritance at any of your OUs?

Author

Commented:
the GPO are applying to a OU named clients.
Top Expert 2013

Commented:
So what settings are exactly being set on the GPOs

so for example if they are computer settings are the objects in that OU computers or users?

Just making sure the right settings are being applied

Thanks

Mike
Your policy is not even being applied at the OU. Do you have it link enabled?
Top Expert 2012

Commented:
Or where do you have it link too

Author

Commented:
it is linked to the OU clients

Author

Commented:
ok,i found the following:

 The following GPOs were not applied because they were filtered out:

Drive Mapping GPO
            Filtering:  Not Applied (Empty)

I assume that this is a user GPO and i have to bind this GPO to a user group to make it work. prior,i linked it to the clients OU

is that correct?
Filters can apply to either Users or Computers.

Since this is a user configuration, yes, you would have to bind this an OU with users or apply security filtering to a specific user/group.

Author

Commented:
domain users then.right?
Security filtering by default is authenticated users. It's your choice, domain admins should be fine.

Author

Commented:
pls check here: is this correct?
targetgr.png

Author

Commented:
if i do a RSOP, theres error. message is:

"the application was applied due to...it was in language neutral"

but nothing has been installed

Commented:
Looks correct to me.
You are configuring item-level targeting.

Left click on your GPO from GPMC. Click the scope tab, at the bottom for security filtering, what do you see?

Author

Commented:
here we go:
scope.png

Commented:
That looks like it's set up correctly to me. Though, since the link is in a computer group, it's not going to apply user settings. I think that's why you're getting the problem with it showing empty. You need to link it to a specific user group.
Top Expert 2012

Commented:
What is in Clients?

Author

Commented:
in the OU clients are all the computers of the domain.

so i link the GPO to the domain users (security) group?
Top Expert 2012
Commented:
If you have a GPO that is User Configuration then you need to deploy to the Users OU for example or to an OU where the Users are located

Commented:
No, not a security group, an OU housing the users you would like to apply this GPO to.

Author

Commented:
look here, that GPO allows me only to choose computer or user groups: i dont really have a choice.
pol1.png
pol2.png
Top Expert 2012
Commented:
The GPO configuration is for User Configuration so, you must apply the GPO to a OU with the Users are in

Author

Commented:
look here, i can apply it only to user or computer GROUPS NOT OUs.
drive1.png
drive2.png
drive3.png
Top Expert 2012

Commented:
Where are you linking this GPO is the question?

Author

Commented:
once again: the domain users group
Top Expert 2012

Commented:
You can NOT link to the domain users. You are giving permission to apply the policy to anyone that is the Domain User group but this does NOT link the policy to the Domain Container, Default Domain Controller Container, etc

Author

Commented:
yess,but it doesnt give me even the choice. it has to be either as user or computer group
Top Expert 2012

Commented:
Where? You are adding the Security Filtering which is GPO permissions. You aren't adding the GPO to a OU.

Author

Commented:
here,ps see attachment.

item-level targeting is set to a security group,in tis case the domain users
xxx.png
xxxx.png
Top Expert 2012

Commented:

Author

Commented:
ok,that one is working meantime.

i had to set some registry key which delays the net logon,that worked
Top Expert 2012

Commented:
Is things working now?

Author

Commented:
drive map GPO,yes

software GPO,no
Top Expert 2012

Commented:
Software GPO are you applying to a Computer Configuration or User Configuration? What OU are you linking too?

Author

Commented:
Computer Configuration AND linking to the OU clients.
Top Expert 2012

Commented:
OU clients hold computers?

Author

Commented:
YES
Top Expert 2012

Commented:
How did you get the drive mapping GPO to work?

Author

Commented:
user configuration,then item level targeting to domain computers. created an OU with the computers inside and then i linked it to that OU
ok,from what i`ve found it looks like the MSI packages are not properly created.
those freeware tools do,for some reason,not properly convert. thats probably the "price" one pays by using freeware.

i tried with http://www.advancedinstaller.com/  and it works now

Author

Commented:
ok,from what i`ve found it looks like the MSI packages are not properly created.
those freeware tools do,for some reason,not properly convert. thats probably the "price" one pays by using freeware.

i tried with http://www.advancedinstaller.com/  and it works now

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial