GPO's aren't appling to users

Hello - We have a Server 2008 R2 datacenter box setup.  Users will login via terminal services.  We have setup a GPO for each OU of users (there are 6 different OU's for users)  that is supposed to run an executable upon login but doesn't work.    The testaccess user i'm testing with is a user in one of the OU's that has a GPO linked to it to run the exe upon login.  Group policy modeling shows that the GPO applies to testaccess user but when i run the Group Policy Results from Group policy management the GPO doesn't apply.  
I've found some have fixed this or a similar situation by applying the loopback option to the default domain gpo but this didn't work for me.  I'm not sure if something in the default domain policy is blocking this user policy or if has to do with the fact that its being applied on the server by users logging in with terminal services.
gpo1.png
thecomputerplaceAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Jason O'RourkeSystems AdministratorCommented:
If the GPO is linked to the user's OU, loopback processing won't be required. Loopback allows you to apply user settings based on a GPO linked to the computer accounts OU.

Take a look at the Group Policy Results you've run and check under the User Configuration Summary. Assuming your GPO is linked and enabled, the only reason it wouldn't be applied is if it is being denied for some reason: the Denied GPOs section should include it and tell you why.

Oh, also check the GPO status to make sure user configuration settings aren't disabled.

- Jason
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
thecomputerplaceAuthor Commented:
Disabling the loopback option on the default domain policy resolved this - whats weird is that in testing i moved a test user from one OU to another (drag and drop) and after that cannot get the GPO linked to that OU to apply to that user - maybe i'm not waiting long enough or maybe dragging and dropping really isn't good as it warns you it isn't.  If i create a new user in that OU it has no problem applying the correct GPO's to that user upon login.
0
thecomputerplaceAuthor Commented:
Out of curiosity, where would one go to verify if user configuration settings aren't disabled in the GPO?
0
Jason O'RourkeSystems AdministratorCommented:
Go to the GPO itself (not the link on the OU, but the actual GPO), right-click and check under GPO Status.
0
thecomputerplaceAuthor Commented:
thanks!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.