Solved

NEW GPO's are not getting applied to workstations

Posted on 2013-01-16
16
399 Views
Last Modified: 2013-01-16
I am trying to deploy a new GPO to "Authenticated users" and it is not getting deployed.  I added a second GPO called Test and it also is not getting deployed.

Where do I start looking to trouble shoot?
0
Comment
Question by:J.R. Sitman
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 8
  • 6
  • 2
16 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 38784001
Run an RSoP report (from GPMC or command line rpresult).

Make sure the GP is linked to where your workstations are or the workstations are inheriting it from a higher level.  Make sure the computer settings are set.

What settings are you trying to set?

Thanks

Mike
0
 

Author Comment

by:J.R. Sitman
ID: 38784118
I ran RSoP see attached.  Neither new GPO or the existing GPO's are there except the defaults.  What exactly am I looking for.  
The GP is linked to "Authenticated users"
What computer settings do I need to check?
I'm trying to deploy a new msi package.
gpo186.jpg
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 38784141
a GP can't be linked to authenticated users it can be linked at the site, domain, or OU level.  Authenticated users is the security filter...that is correct.

For a test create a new OU, more a computer into it.  Link your GP to that OU and test the installation. (assuming your MSI and settings are correct)

Thanks

Mike
0
Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

 

Author Comment

by:J.R. Sitman
ID: 38784188
When I tried to add the OU see attached,  It states the object can't be found
ou.jpg
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 38784218
Are you trying to link the group policy?  Use GPMC to do that.  THat is showing AD Users and computers

Thanks

Mike
0
 

Author Comment

by:J.R. Sitman
ID: 38784234
I was just showing you the OU I was trying to link to.  Yes I'm using GPMC
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 38784271
odd so in GPMC you right click on the and tell it to link an existing GP and that doesn't work?
0
 

Author Comment

by:J.R. Sitman
ID: 38784342
yep, see attached
gperror.jpg
0
 
LVL 31

Expert Comment

by:Henrik Johansson
ID: 38784415
With the error screen shot, you haven't selected that you're searching for a computer object. Use the object types button to select what object types shall be searched.
0
 

Author Comment

by:J.R. Sitman
ID: 38784456
same results.  See attached.  

So I added a "users" group to the GP and it is still not getting deployed
gperror2.jpg
0
 

Author Comment

by:J.R. Sitman
ID: 38784542
maybe the problem is the "location" section of the new GPO is blank.  How do I add to it.  See attached example of one of the GPO's that work.
GPlink.jpg
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 38784727
Are you seeing this screen first

GPMC
Thanks

Mike
0
 

Author Comment

by:J.R. Sitman
ID: 38784745
perfect.  I found that and added the link.  It's working now.
0
 

Author Closing Comment

by:J.R. Sitman
ID: 38784749
thanks
0
 
LVL 31

Expert Comment

by:Henrik Johansson
ID: 38784750
The GPlink.jpg displays you have linked the GPO to a OU named "standard users", but the question is about computer policy. GPOs with computer policy settings nead to be linked to OU-structure containing the computer object. The computer object that shall be affected by the computer settings nead to "see" the GPO when looking up in the structure.

The same thing with GPOs containing user configuration settings that they nead to be linked to OU-structure containing user objects.
User GPOs can be linked to OU-structure with computer objects that doesn't contain the user only if enabling loopback processing on the computer that the user is logging on to.

When looking closer on the GPerror image, and re-reading your and Mike's comments, I understand you've tried to add the OU-name "Windows 7" in the search box for user,group or computer name. The search box is used when restricting the GPO to be applied to a subset of users or computers objects by using security filtering.
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 38784776
glad to help out, glad you got things working.


Thanks

Mike
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question