"The user username does not have RSOP data" - Group Policy not processing

Hello all

I'm testing a DR site and have run into a problem with group policy.  Here is the scenario:

I have a datacenter where all of my VMware VMs are replicated to.  We are connecting staff doing DR testing to the datacenter using a Cisco VPN.  The goal is to bring up all the replicated VMs at the datacenter and have the users connect over the VPN to test.  We are using HP thin clients and Citrix and I had no problems joining a new machine and running Citrix the group policies that should be applied to the workstation don't get applied.  When I run gpresult I get the error in the title.  I suspect the problem lies with how we are handling the IP addressing of the test workstations.  The servers are all retaining their regular IPs which are in the range.  The workstations get a DHCP address handed out by the Cisco ASA which is making the VPN connection.  This range is  I can ping and RDP into any device on the 10. range so routing is working as expected but I'm not clear on why I can't get group policy to apply.  Running gpupdate /force returns a success message for both computer and user but the settings never actually take hold.

I'd appreciate any help on this one, thanks!
First LastAsked:
Who is Participating?
First LastConnect With a Mentor Author Commented:
Update 2:  Figured it out, this was a problem on the ASA.  By default it was dropping ICMP traffic which the XP clients need to communicate to the DCs for group policy.
btanExec ConsultantCommented:
not sure if this can help though which they stated Citrix UPM

also for other win client OS

also saw this from technet


also below :

INFO: The user xxx does not have RSOP data.
It turns out that during boot up or user logon, the CSE (Client Side Extension) on the domain member machine adds computer and user data to a WMI database. RSOP and GPResult pull data from the database. If a user is not listed in the RSOP GUI, or cannot be listed by GPResult, then the WMI database might not be getting updated by GPOs from the domain controller. To troubleshoot, run gpupdate /force [in the missing user's session]. This may illicit text error messages or group policy events in the (system) event logs, suggesting why group policy updating is failing.
First LastAuthor Commented:
Trying this now, I'll let you know how the testing goes.  Thank you!
First LastAuthor Commented:
Update:  I've been through the articles above and so far haven't figured this one out.  I've isolated to the problem to Windows XP machines, this doesn't happen on Win7.  I tried both the registry fix and group policy change for slow link detection (which I thought was going to be it) but this didn't make any difference.  I also tried some of the other suggestions but I'm not too concerned about the XPe machines where the RSOP data might not show up.  I'm now testing with a full XP workstation and getting the same problem.
First LastAuthor Commented:
Found own solution
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.