Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Enforce GPO processing of a particular GPO

Posted on 2012-08-29
12
Medium Priority
?
413 Views
Last Modified: 2016-11-23
We have about 900 netbooks/laptops that process GPO's every morning when the user logs on, many of which cover drive mappings and folder redirections. One particularly stubborn one has been the Start Menu redirection for Windows 7. The redirected start menu contains all of their applications so it's fairly vital. Some netbooks, when it's really busy, seem to want to bypass this step. They'll load without the start menu. The menu is being pulled from an EVERYONE:READ permissioned directory running on a Windows Server 2008 (Dell Powervault DL2000) server with the File Services Role installed. This really seems to come down to a timeout issue with the network being so busy. Is there any way to force the netbook's particular gpo to wait until it is fully processed before continuing?

Thanks for any help!
0
Comment
Question by:Casey Weaver
11 Comments
 
LVL 20

Expert Comment

by:strivoli
ID: 38345587
"Slow Network Detection" is a Policy that should help in your scenario. This Policy governs when a Network will be considered slow and as a result will not process some GPOs (I guess Start Menu Redirection is one of these GPOs) and rules the client (PC) if it should even consider Slow Networks at all.

I would give it a try.
0
 
LVL 53

Assisted Solution

by:Will Szymkowski
Will Szymkowski earned 2000 total points
ID: 38345627
On the machines that are encountering this issue is it a particular machine or group of machines each time? What I would recommend is doing an RSOP on the machine in question and then look at the policy settings to verify if the policies are actually being applied.

I would also suggest looking at the event viewer as well to see if there are any policy processing issues listed.

Another question are all of the workstations Windows 7 mix environment with Windows XP?
0
 
LVL 8

Author Comment

by:Casey Weaver
ID: 38345650
All 1,600 machines are Windows 7, there's nothing below Windows 7 or Windows Server 2008 on the network.

The machines are random, and frequently happens when the area comes under great strain, such as 60 netbooks hitting a Meru 320i AP. More than not enough signal strength (that's fine) it seems the netbooks themselves get connectivity issues when so many of them are crammed into one area. Throughput is fine, but some are taking longer than others to negotiate that first link up.
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 38345683
If you are using Windows XP clients then you want to use the method above "Slow Network Detection" as this was turned off in windows xp so the users experience would be a faster logon. This should not be the issue in Windows 7 as this setting was once again enabled.
0
 
LVL 53

Assisted Solution

by:Will Szymkowski
Will Szymkowski earned 2000 total points
ID: 38345932
As you have stated in your eariler post that when you have several users connecting to a wireless AP which is when the issues arise with group policy not processing, it seems to me that it is more of a network issue then a group policy issue.

Have you checked or done any tests with the wireless at the peak times when you are running into issues?

Also, can you try doing an rsop.msc on the machines in question. This will determine what policies have been applied and also the reason why they failed.
0
 
LVL 8

Author Comment

by:Casey Weaver
ID: 38346145
RSOP points to network timeout being the issue when affected. And that's the issue, the machine isn't waiting long enough. We can't make the network any faster, it's the fact their netbooks with crappy 2x2 antennas, as many as 120 of them in a 50x50 area. The AP's can keep up but the netbooks run over each other in terms of interference and take awhile to negotiate their channels. That's why we're trying to get them to wait so that the gpo has enough time to download and process.
0
 
LVL 59

Expert Comment

by:LeeTutor
ID: 38428433
I've requested that this question be deleted for the following reason:

The question has either no comments or not enough useful information to be called an "answer".
0
 
LVL 8

Author Comment

by:Casey Weaver
ID: 38428434
I have been gleaning alot of logs over the last two week to try to better understand the issue. In the end, it seems to be the previous admins gpo that is the cause of the issue. The single gpo seems to be far too large (approximately 90 changes). I've broken it down into a test group of about 17 different gpos to make it smaller and it seems to be taking every time. I'll have to watch a little more to see.

-Casey
0
 
LVL 8

Author Comment

by:Casey Weaver
ID: 38429693
I'll make sure to watch this better. Thanks!
0
 
LVL 8

Accepted Solution

by:
Casey Weaver earned 0 total points
ID: 38445894
After lots of testing, it's conclusive that breaking up the gpo's has solved the problem. The issue has not re-occured, and even with the increased amount of gpo's everything is working.

For extra data, it wasn't found to actually be an ordeal with wireless, bigger laptops worked fine. It was only netbooks, which seems to be related to their utterly pitiful load speeds compared to any other system.
0
 
LVL 8

Author Closing Comment

by:Casey Weaver
ID: 38458032
My own finding ended up being the best ending. I have repped those that have given excellent diagnostic examples for these kinds of issues.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Unable to change the program that handles the scan event from a network attached Canon/Brother printer/scanner. This means you'll always have to choose which program handles this action, e.g. ControlCenter4 (in the case of a Brother).
Scripts are great for performing batch jobs against users, however sometimes the GUI is all you need.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…
Suggested Courses

571 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question