asked on 3/26/2016

Default Domain Policy and Local Group Policy are shown twice.

For some reason, the "Default Domain Policy" and "Local Group Policy" are being shown twice in my gpresult /R on my test workstations.

I have checked and expand the OU of the test workstations and I do not see the "Default Domain Policy". The policy only links to my domain.

Please advise.

Thanks.

Active Directory

Last Comment

nav2567

4/7/2016

David Johnson, CD

3/26/2016

the default domain policy is in the root folder of the domain.

McKnife

3/26/2016

Quote the output.

nav2567

3/26/2016

ASKER

Thanks. Any idea of why it is being shown twice?
gpo_issue.png

McKnife

3/26/2016

I think there's a parameter for gpresult in order to display verbose output. See if the GUIDs are really the same for those pairs.

nav2567

3/27/2016

ASKER

I tried gpresult /V and still see the duplicate of both "Default Domain Policy" and "Local Group Policy".

I do not see any GUIDs.

nav2567

3/27/2016

ASKER

I do not know what else to check.

I just have the "Default Domain Policy" linked at the domain level and in *none* of my other OUs under the domain level.

nav2567

3/27/2016

ASKER

I searched again and there is similar issue: https://www.experts-exchange.com/questions/24095266/GPO-user-config-policies-applied-twice.html

After looking at it, I still have no idea...

nav2567

3/27/2016

ASKER

I have a few GPOs that link to that OU using loopback processing.

Do you think this is the root cause?

McKnife

3/27/2016

No idea, but surely not loopback processing. Since the local policy can't be linked twice, this sounds like a bug in gpresult.

nav2567

3/27/2016

ASKER

No problem. Thanks a lot for your comments.

Just some more questions, I should not need to download and import any admx/adml files to create WIN7 policies from a WIN2K8 domain controllers or to create WIN10 policies from a WIN2012 domain controllers excepts for products such as IE11, Office 2013 and so on, right?

SOLUTION

David Johnson, CD

3/28/2016