Default Domain Policy and Local Group Policy are shown twice.

nav2567
nav2567 used Ask the Experts™
on
For some reason, the "Default Domain Policy" and "Local Group Policy" are being shown twice in my gpresult /R on my test workstations.  

I have checked and expand the OU of the test workstations and I do not see the "Default Domain Policy".  The policy only links to my domain.  

Please advise.

Thanks.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2016

Commented:
the default domain policy is in the root folder of the domain.
Distinguished Expert 2018

Commented:
Quote the output.

Author

Commented:
Thanks.  Any idea of why it is being shown twice?
gpo_issue.png
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Distinguished Expert 2018

Commented:
I think there's a parameter for gpresult in order to display verbose output. See if the GUIDs are really the same for those pairs.

Author

Commented:
I tried gpresult /V and still see the duplicate of both "Default Domain Policy" and "Local Group Policy".  

I do not see any GUIDs.

Author

Commented:
I do not know what else to check.  

I just have the "Default Domain Policy" linked at the domain level and in *none* of my other OUs under the domain level.

Author

Commented:
I searched again and there is similar issue: http://www.experts-exchange.com/questions/24095266/GPO-user-config-policies-applied-twice.html

After looking at it, I still have no idea...

Author

Commented:
I have a few GPOs  that link to that OU using loopback processing.

Do you think this is the root cause?
Distinguished Expert 2018

Commented:
No idea, but surely not loopback processing. Since the local policy can't be linked twice, this sounds like a bug in gpresult.

Author

Commented:
No problem.  Thanks a lot for your comments.

Just some more questions, I should not need to download and import any admx/adml files to create WIN7 policies from a WIN2K8 domain controllers or to create WIN10 policies from a WIN2012 domain controllers excepts for products such as IE11, Office 2013 and so on, right?
Top Expert 2016
Commented:
Incorrect, you need the admx's somewhere to create the group policy using these templates.  you can create the group policy on a machine that has the .admx but the .admx is not needed to read/execute the policy.
Distinguished Expert 2018
Commented:
Take win10, use RSAT to connect to your DC and you have all policies at your disposal.

Author

Commented:
Thanks, guys.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial