Solved

GPOs won't run on 2012 R2 AD DC with DRP

Posted on 2014-12-09
10
136 Views
Last Modified: 2014-12-15
I have a very irritating problem where GPOs won't apply on my RDP users on AD DC with RDP server (TS).

There are two test policies, removal of Recycle Bin and one startup script with SUSBT command, but neither runs, and RSoP gives positive results for both.

Can anyone help?

Thanks.

UPDATE: I have tried enforcing the policies, and forced gpupdate, from admin account, but neither worked.
0
Comment
Question by:mrmut
  • 7
  • 2
10 Comments
 
LVL 19

Expert Comment

by:Miguel Angel Perez Muñoz
Comment Utility
Removal of Recycle Bin is a user GPO, only fail on DC or on all computers? could you check your GPO link is on users container?
0
 
LVL 6

Expert Comment

by:Thomas Wheeler
Comment Utility
What are the results of gpresult /v do you see the policies?  Are there event logs showing errors ?
0
 

Author Comment

by:mrmut
Comment Utility
Everthing passwed without errors. Tried Win+R command, and it worked.

Will check errors and report back.
0
 

Author Comment

by:mrmut
Comment Utility
I see no errors i Applications log. Any other place to check?
0
 
LVL 6

Expert Comment

by:Thomas Wheeler
Comment Utility
Did gpresult show your policies?
0
Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

 

Author Comment

by:mrmut
Comment Utility
Yes. As applied group policy objects.

I tried "shaking" the system (restart), and the Recycle bin and some other settings work fine now, however my startup command with subst doesn't seem to work. (I will go and check permissions now)
0
 

Author Comment

by:mrmut
Comment Utility
Checked it - permissions are OK
0
 

Author Comment

by:mrmut
Comment Utility
I tried using map network drive (hosted on the same machine), and that worked with no problems.
However, using map instead subs for local usage is bad performance wise.
0
 

Accepted Solution

by:
mrmut earned 0 total points
Comment Utility
I solved it.

It seems that subst is not on the same permission elevation as the user, thus it is shown in another space, "invisible" to the user.

 I have ammended this by creating "permanent" registry subst by adding:

HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\DOS Devices

Key:

Z:


Value:

\\??\\DRIVE:\\PATH\\PATH

It works.
0
 

Author Closing Comment

by:mrmut
Comment Utility
This worked.
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

Understanding the various editions available is vital when you decide to purchase Windows Server 2012. You need to have a basic understanding of the features and limitations in each edition in order to make a well-informed decision that best suits y…
Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
In this Micro Tutorial viewers will learn how to restore their server from Bare Metal Backup image created with Windows Server Backup feature. As an example Windows 2012R2 is used.
This tutorial will walk an individual through the process of installing the necessary services and then configuring a Windows Server 2012 system as an iSCSI target. To install the necessary roles, go to Server Manager, and select Add Roles and Featu…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now