Solved

Domain tablet GP updates not applying

Posted on 2016-10-18
9
21 Views
Last Modified: 2016-10-20
We have a number of surface tab 4's floating around on the domain.

These are joined to the domain but go home with their respective users. The user then connects back into the domain via Sonicwall NetExtender/ SSL VPN thingy to access network/ domain stuff....

I have a GP that restarts all the clients at a specific time during the night. all of the machines within are part of this policy - except servers an other critical machines etc.

Now i have amended the policy to exclude a specific Surface Tab as the user was complaining it was restarting when they were using it (really late at night) so i tried to make the Policy run even later - this didn't change on the effected Tab.

So I removed the specific tab from the policy - but the tab still restarts!!

Any thoughts on this?
0
Comment
Question by:mudcow007
  • 3
  • 2
  • 2
  • +1
9 Comments
 
LVL 9

Assisted Solution

by:Muhammad Mulla
Muhammad Mulla earned 125 total points
ID: 41848004
It's possible that the user isn't keeping the tab connected to the VPN long enough to get a gpupdate.

Ask the user to connect to the SSL VPN and then run
gpupdate /force

Open in new window

from the command line.
0
 
LVL 24

Assisted Solution

by:Mohammed Khawaja
Mohammed Khawaja earned 125 total points
ID: 41848006
Has the policy been updated on the device, did you run gpupdate /force?
0
 

Author Comment

by:mudcow007
ID: 41848023
The tablet is on site today, connected to corporate wifi.

I did a RSOP.msc which said the policies were updated today?!

after that I issued a gpupdate /force an will wait until wednesday night to see if it reboots

updates to follow
0
 
LVL 24

Expert Comment

by:Mohammed Khawaja
ID: 41848033
OK, I believe it should work fine now.
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 
LVL 53

Accepted Solution

by:
McKnife earned 250 total points
ID: 41848091
You never told us how you made the device restart. Did you deploy a scheduled task? That task won't be deleted, if you unlink the policy, it stays in place.
1
 

Author Comment

by:mudcow007
ID: 41848273
I made the device restart today, by manually rebooting the device then forcing an update

The GP i have configured to restart domain machines uses scheduled tasks through group policy. which is set onto a specific OU - the tablet is not part of that OU

hope that makes sense?

thanks
0
 
LVL 53

Expert Comment

by:McKnife
ID: 41848283
I already wrote: the scheduled tasks remain in place after you remove the specific tablet from the policy. That is normal, you need to delete that task manually.
1
 
LVL 9

Expert Comment

by:Muhammad Mulla
ID: 41848334
As McKnife has mentioned, scheduled tasks will remain in place after you remove the device from the OU. You can either:

Delete the task manually (easiest if it's only one tablet).
Create a GP Preference to delete the specified scheduled task.
0
 

Author Closing Comment

by:mudcow007
ID: 41851637
Awesome, the comments were things i hadn't thought of - so Thanks
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

When it comes to showing a 404 error page to your visitors, you do not want that generic page to show, and you especially do not want your hosting provider’s ad error page to show either. In this article, I will show you how to enable the custom 40…
This is an article about Leadership and accepting and adapting to new challenges. It focuses mostly on upgrading to Windows 10.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now