Solved

Help doagnosing why Group Policy not applying on one machine

Posted on 2014-01-08
9
2,549 Views
Last Modified: 2014-01-13
I have one desktop which seems to not be getting the group policies. All my machines are Windows 7 Enterprise. When I manually do a gpupdate /force it shows successful but I don't see any of the changes being implemented. How would I diagnose where the problem is.

I checked the event log on that machine. There is an event source SceCli which says "security policy in the Group policy objects has been applied successfully"

There is another entry source gupdate which says "The description for Event ID 0 from source gupdate cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

Service stopped"

Not sure if that is related to the problem.
0
Comment
Question by:swenger7
  • 5
  • 3
9 Comments
 
LVL 20

Expert Comment

by:Patrick Bogers
ID: 39765974
Hi

Is this a policy for users or computers?

If for computers, is this particulair pc in the AD-group of pc;s where the GPO should apply?

If for users, same issue. Is this particulair user member of the group the GPO should apply?
0
 
LVL 22

Expert Comment

by:yo_bee
ID: 39765976
I would run RSOP /h Filepath.html and look at that.
See what policies are applying.

You can run the Group Policy Result Wizard also from within GPMC and target that computer.

You should see if the policies are being seen at all.
0
 

Author Comment

by:swenger7
ID: 39765984
yes. It is part of both the computer and user AD groups. Other computer and users in the same AD group are working.
0
NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

 

Author Comment

by:swenger7
ID: 39765999
I tried the command RSOP /h Filepath.html and received the following result:

The RSoP snap-in was unable to generate the computer's data due to insufficient permissions. The snap-in will continue to start but only the user's data will be displayed.

Access denied.
0
 
LVL 22

Expert Comment

by:yo_bee
ID: 39766000
Run CMD as a domain Admin
then enter the command RSOP or just use the Group Policy Result within GPMC
0
 
LVL 22

Expert Comment

by:yo_bee
ID: 39766003
Note that the Filepath should be c:\file.html
0
 

Author Comment

by:swenger7
ID: 39766014
what's interesting is that the RSOp did come up with the user configurations and some of the policies were applied but a couple weren't. I would like to figure out why they were not.

When I use the Group Policy Results Wizard in the GPM and choose this computer and username the summary shows under user Configuration that these GPO are applied.

But I can see from looking at her machine that they were NOT applied.
0
 

Accepted Solution

by:
swenger7 earned 0 total points
ID: 39766244
Sorry. Seems I had an issue with this user being moved from a group which I didn't realized. Sorry for the trouble.

Thanks,
0
 

Author Closing Comment

by:swenger7
ID: 39776091
The problem was actually as a result of a change that was done on my network which I had not realized
0

Featured Post

Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
In-place Upgrading Dirsync to Azure AD Connect
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

838 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question