Deleted Group Policy on Windows 2003 AD domain still be applied to server

davidcjones79
davidcjones79 used Ask the Experts™
on
I have run into an issue where a group policy that specified an internal WSUS server as the windows update location for one of my servers has been deleted, but it seems that the group policy is still applying (according to group policy modeling tool).  I have attempted to create a local policy to override it, but so far have been unsuccessful.  Is there a way to prevent this orphaned group policy from applying to my Windows 2003 server?  Let me know if you need any additional information.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Sounds like you have replication issues. Check your dns settings.
Photographer
Awarded 2007
Top Expert 2008
Commented:
Deleting or removing a policy does not necessarily stop it applying since it may 'tattoo' the settings on the target machines  - simply create another policy that applies your new settings in place of the old policy - make sure to use ENABLE or DISABLE as required - don't leave it as NOT CONFIGURED as this will not apply any changes.
remmett70Network Manager
Commented:
One fun thing with Group Policy, is that once they are changed.  Deleting or disabling the GPO, or setting the specific policy items to Not Defined, doesn't revert the policy settings.

To undo this, create a new GPO, and set the policy items back to default.  Apply the policy.  In the future, use the Backup option in the group policy MMC.
How to Generate Services Revenue the Easiest Way

This Tuesday! Learn key insights about modern cyber protection services & gain practical strategies to skyrocket business:

- What it takes to build a cloud service portfolio
- How to determine which services will help your unique business grow
- Various use-cases and examples

DonNetwork Administrator
Commented:
Does deleting the key "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" come back after gpupdate ??
I just inherited this network from a previous Network Administrator and realized that it does not have a valid computer account in the domain.  I am going to add it to the domain, reboot and see what happens.  If that doesn't resolve the issue, I will try some of your suggested solutions. Thank you all for your suggestions / advice.  I'll keep you posted.  Can't reboot the server until later this evening...
That will do it. =)
You can split the points evenly if the others are okay with it.

Author

Commented:
Thank you all for your input.  I wasn't exactly sure who to give credit to because they all seemed like possible solutions.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial