Link to home
Start Free TrialLog in
Avatar of J.R. Sitman
J.R. SitmanFlag for United States of America

asked on

NEW GPO's are not getting applied to workstations

I am trying to deploy a new GPO to "Authenticated users" and it is not getting deployed.  I added a second GPO called Test and it also is not getting deployed.

Where do I start looking to trouble shoot?
Avatar of Mike Kline
Mike Kline
Flag of United States of America image

Run an RSoP report (from GPMC or command line rpresult).

Make sure the GP is linked to where your workstations are or the workstations are inheriting it from a higher level.  Make sure the computer settings are set.

What settings are you trying to set?

Thanks

Mike
Avatar of J.R. Sitman

ASKER

I ran RSoP see attached.  Neither new GPO or the existing GPO's are there except the defaults.  What exactly am I looking for.  
The GP is linked to "Authenticated users"
What computer settings do I need to check?
I'm trying to deploy a new msi package.
gpo186.jpg
a GP can't be linked to authenticated users it can be linked at the site, domain, or OU level.  Authenticated users is the security filter...that is correct.

For a test create a new OU, more a computer into it.  Link your GP to that OU and test the installation. (assuming your MSI and settings are correct)

Thanks

Mike
When I tried to add the OU see attached,  It states the object can't be found
ou.jpg
Are you trying to link the group policy?  Use GPMC to do that.  THat is showing AD Users and computers

Thanks

Mike
I was just showing you the OU I was trying to link to.  Yes I'm using GPMC
odd so in GPMC you right click on the and tell it to link an existing GP and that doesn't work?
yep, see attached
gperror.jpg
With the error screen shot, you haven't selected that you're searching for a computer object. Use the object types button to select what object types shall be searched.
same results.  See attached.  

So I added a "users" group to the GP and it is still not getting deployed
gperror2.jpg
maybe the problem is the "location" section of the new GPO is blank.  How do I add to it.  See attached example of one of the GPO's that work.
GPlink.jpg
ASKER CERTIFIED SOLUTION
Avatar of Mike Kline
Mike Kline
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
perfect.  I found that and added the link.  It's working now.
thanks
The GPlink.jpg displays you have linked the GPO to a OU named "standard users", but the question is about computer policy. GPOs with computer policy settings nead to be linked to OU-structure containing the computer object. The computer object that shall be affected by the computer settings nead to "see" the GPO when looking up in the structure.

The same thing with GPOs containing user configuration settings that they nead to be linked to OU-structure containing user objects.
User GPOs can be linked to OU-structure with computer objects that doesn't contain the user only if enabling loopback processing on the computer that the user is logging on to.

When looking closer on the GPerror image, and re-reading your and Mike's comments, I understand you've tried to add the OU-name "Windows 7" in the search box for user,group or computer name. The search box is used when restricting the GPO to be applied to a subset of users or computers objects by using security filtering.
glad to help out, glad you got things working.


Thanks

Mike