Solved

Help doagnosing why Group Policy not applying on one machine

Posted on 2014-01-08
9
2,536 Views
Last Modified: 2014-01-13
I have one desktop which seems to not be getting the group policies. All my machines are Windows 7 Enterprise. When I manually do a gpupdate /force it shows successful but I don't see any of the changes being implemented. How would I diagnose where the problem is.

I checked the event log on that machine. There is an event source SceCli which says "security policy in the Group policy objects has been applied successfully"

There is another entry source gupdate which says "The description for Event ID 0 from source gupdate cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

Service stopped"

Not sure if that is related to the problem.
0
Comment
Question by:swenger7
  • 5
  • 3
9 Comments
 
LVL 19

Expert Comment

by:Patricksr1972
ID: 39765974
Hi

Is this a policy for users or computers?

If for computers, is this particulair pc in the AD-group of pc;s where the GPO should apply?

If for users, same issue. Is this particulair user member of the group the GPO should apply?
0
 
LVL 22

Expert Comment

by:yo_bee
ID: 39765976
I would run RSOP /h Filepath.html and look at that.
See what policies are applying.

You can run the Group Policy Result Wizard also from within GPMC and target that computer.

You should see if the policies are being seen at all.
0
 

Author Comment

by:swenger7
ID: 39765984
yes. It is part of both the computer and user AD groups. Other computer and users in the same AD group are working.
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 

Author Comment

by:swenger7
ID: 39765999
I tried the command RSOP /h Filepath.html and received the following result:

The RSoP snap-in was unable to generate the computer's data due to insufficient permissions. The snap-in will continue to start but only the user's data will be displayed.

Access denied.
0
 
LVL 22

Expert Comment

by:yo_bee
ID: 39766000
Run CMD as a domain Admin
then enter the command RSOP or just use the Group Policy Result within GPMC
0
 
LVL 22

Expert Comment

by:yo_bee
ID: 39766003
Note that the Filepath should be c:\file.html
0
 

Author Comment

by:swenger7
ID: 39766014
what's interesting is that the RSOp did come up with the user configurations and some of the policies were applied but a couple weren't. I would like to figure out why they were not.

When I use the Group Policy Results Wizard in the GPM and choose this computer and username the summary shows under user Configuration that these GPO are applied.

But I can see from looking at her machine that they were NOT applied.
0
 

Accepted Solution

by:
swenger7 earned 0 total points
ID: 39766244
Sorry. Seems I had an issue with this user being moved from a group which I didn't realized. Sorry for the trouble.

Thanks,
0
 

Author Closing Comment

by:swenger7
ID: 39776091
The problem was actually as a result of a change that was done on my network which I had not realized
0

Featured Post

Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This article runs through the process of deploying a single EXE application selectively to a group of user.
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question