• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 28
  • Last Modified:

GPO policy being denied

I have created a GPO computer based policy for the deployment of an .msi in a test environment  It is succeeding on one client but failing on  another.  GPresult, attached, report.htm shows that the policy is being denied.  I have gone through an extensive list of troubleshooting tips described here http://social.technet.microsoft.com/wiki/contents/articles/22457.10-common-problems-causing-group-policy-to-not-apply.aspx, but have not been able to resolve the issue.  Any thoughts?
0
HeilandS
Asked:
HeilandS
  • 4
  • 3
1 Solution
 
Adam BrownSr Solutions ArchitectCommented:
The GPO status shows as "Empty" on your report, which suggests the GPO has the installation using the Computer Settings section instead of the User Settings section. Try to run your report against the Computer's context instead of your user's context.

That said, also make sure this GPO is linked to an OU with computer objects in it. If you want the installation to occur for a specific group of users rather than a group of computers, then you need to change the GPO so it uses the User Settings\Software Deployment section instead of Computer Settings\Software Deployment.
0
 
HeilandSAuthor Commented:
I do want the installation to occur for a specific group  of computers.  How do I run the report against the computer context?
0
 
Adam BrownSr Solutions ArchitectCommented:
gpresult /SCOPE computer /H c:\file.html

Open in new window

on one of the computers should do it for you.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
HeilandSAuthor Commented:
I'm getting an access denied when I try to use the /SCOPE computer.  I tried logging on a a local admin as well.  Same result.
0
 
Adam BrownSr Solutions ArchitectCommented:
Right click the CMD and select Run as administrator before running the command.
0
 
HeilandSAuthor Commented:
It shows that the policy has been applied.  There is just no evidence that my .msi ran.  I'll owrk on troubleshooting that next.

Thank you for your help!
0
 
Adam BrownSr Solutions ArchitectCommented:
You usually have to reboot the computer after the policy is applied to get the installation to run when it's done through Computer Settings in a GPO.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now