Domain tablet GP updates not applying

We have a number of surface tab 4's floating around on the domain.

These are joined to the domain but go home with their respective users. The user then connects back into the domain via Sonicwall NetExtender/ SSL VPN thingy to access network/ domain stuff....

I have a GP that restarts all the clients at a specific time during the night. all of the machines within are part of this policy - except servers an other critical machines etc.

Now i have amended the policy to exclude a specific Surface Tab as the user was complaining it was restarting when they were using it (really late at night) so i tried to make the Policy run even later - this didn't change on the effected Tab.

So I removed the specific tab from the policy - but the tab still restarts!!

Any thoughts on this?
Who is Participating?
McKnifeConnect With a Mentor Commented:
You never told us how you made the device restart. Did you deploy a scheduled task? That task won't be deleted, if you unlink the policy, it stays in place.
Muhammad MullaConnect With a Mentor Commented:
It's possible that the user isn't keeping the tab connected to the VPN long enough to get a gpupdate.

Ask the user to connect to the SSL VPN and then run
gpupdate /force

Open in new window

from the command line.
Mohammed KhawajaConnect With a Mentor Manager - Infrastructure:  Information TechnologyCommented:
Has the policy been updated on the device, did you run gpupdate /force?
Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

mudcow007Author Commented:
The tablet is on site today, connected to corporate wifi.

I did a RSOP.msc which said the policies were updated today?!

after that I issued a gpupdate /force an will wait until wednesday night to see if it reboots

updates to follow
Mohammed KhawajaManager - Infrastructure:  Information TechnologyCommented:
OK, I believe it should work fine now.
mudcow007Author Commented:
I made the device restart today, by manually rebooting the device then forcing an update

The GP i have configured to restart domain machines uses scheduled tasks through group policy. which is set onto a specific OU - the tablet is not part of that OU

hope that makes sense?

I already wrote: the scheduled tasks remain in place after you remove the specific tablet from the policy. That is normal, you need to delete that task manually.
Muhammad MullaCommented:
As McKnife has mentioned, scheduled tasks will remain in place after you remove the device from the OU. You can either:

Delete the task manually (easiest if it's only one tablet).
Create a GP Preference to delete the specified scheduled task.
mudcow007Author Commented:
Awesome, the comments were things i hadn't thought of - so Thanks
All Courses

From novice to tech pro — start learning today.