Troubleshooting AD GPO not applied tips and suggestion ?

People,

Can anyone please suggest me what else the steps and things to consider when troubleshooting Active Directory Group Policy not applying to my Windows client ?

For example logon script running .VBS applied but not working for one Windows 10 client, but applied successfully for the laptop in same OU.

I've tried:

1. Look in local workstation Eventvwr
2. GPUpdate /Force and restart multiple times
3. GPResult /R and compare it with my laptop that is working, but all seems to be same.

I'm running out of idea.

Thanks in advance,
LVL 9
Senior IT System EngineerIT ProfessionalAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Tom CieslikIT EngineerCommented:
I had same problem with Folder Redirection in my Policy.
Policy was applied to all Windows Workstations except Windows 10
Then I found some article about CIMv2 filter. Someone said that for default policy is applied to Windows version 6 and if you want to applied to Windows 10 need to add version to filter.

So I did. and it's working now.

Open your GPO Editor go to WMI Filters and create new filter.
You can name it "Fol all Windows" or whatever you want.
in Queries put this string

select * from Win32_OperatingSystem where (Version like "6.%" OR Version like "10.%") and ProductType = "1"

Save and assign this filter to your GPO

Refresh policy on Workstation with Windows 10 and restart workstation.
Check if Policy was applied.

Capture.JPG
Then go to Your Policy Delegation Tab and Add Domain Computers and Authenticated Users with READ right

Capture.JPG
1

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Senior IT System EngineerIT ProfessionalAuthor Commented:
Thanks Tom,

I appreciate your tips for the above, I think I have used your tips before resolving the problem few months back. :-)
What I'm looking for is the other ways or methods that I may have missed for troubleshooting GPO in general.
0
yo_beeDirector of Information TechnologyCommented:
What is the VBS code? You can add some error checking.
https://technet.microsoft.com/en-us/library/ee692852.aspx

Were you able to successfully run the script manually on a Windows 10 machine?

For example logon script running .VBS applied but not working for one Windows 10 client, but applied successfully for the laptop in same OU.
I will assume that the Laptops in the same OU are Windows 7 machines.
1
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

Senior IT System EngineerIT ProfessionalAuthor Commented:
The VBS code is just basically configuring the email signature template.

When I run it manually on the Windows 10 laptop using cmd prompt, it doesn't do any prompt or error, then nothing changed in Outlook.

Even after rebooting and running the script again while the Outlook is closed.
0
Senior IT System EngineerIT ProfessionalAuthor Commented:
So how and where to see if Group Policy is not working for a client OS ?
is it from the windows server side event log or the client ?
0
Tom CieslikIT EngineerCommented:
Run CMD as Administrator on some computer you want to test

GPRESULT /R /user   xxxxxx

xxxxx is your domain user name log on on this computer

Or if you want to check remotely

GPRESULT /S  sytemname /R /user   xxxxxx

systemname replace by computer name you want to test and xxxxx by user who is using this computer
(RPC service) must be ON on this machine


You'll get all informations
1
Senior IT System EngineerIT ProfessionalAuthor Commented:
@Tom: if I follow your first step to map the network drive GPO with WMI filter, does it going to break the existing Windows 7 drive mapping ? Because at the moment the Windows 7 workstation works fine, but only 1 or 2 Windows 10 got this issue of not mapping.
0
Tom CieslikIT EngineerCommented:
As long as there is no duplicates, then no.
But if your user has let say X:\ drive mapped to  \\server\share and you'll create X:\ drive to different location on the server in GPO then GPO will overwrite user settings.
1
Senior IT System EngineerIT ProfessionalAuthor Commented:
Tom, somehow the mapped network drive in those two users is not mapped to anything at all.
I assume yes, the GPO should overwrite anything mapped with the same drive letter.
0
Senior IT System EngineerIT ProfessionalAuthor Commented:
See this one GPO that is not working:

Drive GPO
Somehow it is not working for that one particular person, it is the most important thing to resolve.
0
Tom CieslikIT EngineerCommented:
what is the result when your run from his computer ?

GPRESULT /R /user   xxxxxx
1
Senior IT System EngineerIT ProfessionalAuthor Commented:
Thanks !
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 10

From novice to tech pro — start learning today.