Solved

Help doagnosing why Group Policy not applying on one machine

Posted on 2014-01-08
9
2,475 Views
Last Modified: 2014-01-13
I have one desktop which seems to not be getting the group policies. All my machines are Windows 7 Enterprise. When I manually do a gpupdate /force it shows successful but I don't see any of the changes being implemented. How would I diagnose where the problem is.

I checked the event log on that machine. There is an event source SceCli which says "security policy in the Group policy objects has been applied successfully"

There is another entry source gupdate which says "The description for Event ID 0 from source gupdate cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

Service stopped"

Not sure if that is related to the problem.
0
Comment
Question by:swenger7
  • 5
  • 3
9 Comments
 
LVL 19

Expert Comment

by:Patricksr1972
ID: 39765974
Hi

Is this a policy for users or computers?

If for computers, is this particulair pc in the AD-group of pc;s where the GPO should apply?

If for users, same issue. Is this particulair user member of the group the GPO should apply?
0
 
LVL 21

Expert Comment

by:yo_bee
ID: 39765976
I would run RSOP /h Filepath.html and look at that.
See what policies are applying.

You can run the Group Policy Result Wizard also from within GPMC and target that computer.

You should see if the policies are being seen at all.
0
 

Author Comment

by:swenger7
ID: 39765984
yes. It is part of both the computer and user AD groups. Other computer and users in the same AD group are working.
0
 

Author Comment

by:swenger7
ID: 39765999
I tried the command RSOP /h Filepath.html and received the following result:

The RSoP snap-in was unable to generate the computer's data due to insufficient permissions. The snap-in will continue to start but only the user's data will be displayed.

Access denied.
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 
LVL 21

Expert Comment

by:yo_bee
ID: 39766000
Run CMD as a domain Admin
then enter the command RSOP or just use the Group Policy Result within GPMC
0
 
LVL 21

Expert Comment

by:yo_bee
ID: 39766003
Note that the Filepath should be c:\file.html
0
 

Author Comment

by:swenger7
ID: 39766014
what's interesting is that the RSOp did come up with the user configurations and some of the policies were applied but a couple weren't. I would like to figure out why they were not.

When I use the Group Policy Results Wizard in the GPM and choose this computer and username the summary shows under user Configuration that these GPO are applied.

But I can see from looking at her machine that they were NOT applied.
0
 

Accepted Solution

by:
swenger7 earned 0 total points
ID: 39766244
Sorry. Seems I had an issue with this user being moved from a group which I didn't realized. Sorry for the trouble.

Thanks,
0
 

Author Closing Comment

by:swenger7
ID: 39776091
The problem was actually as a result of a change that was done on my network which I had not realized
0

Featured Post

Want to promote your upcoming event?

Are you going to an event? Are you going to be exhibiting at a tradeshow? Talking at a conference? Using a promotional banner in your email signature ensures that your organization’s most important contacts stay in the know and can potentially spread the word about the event.

Join & Write a Comment

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now