Troubleshooting AD GPO not applied tips and suggestion ?

Senior IT System Engineer
Senior IT System Engineer used Ask the Experts™
on
People,

Can anyone please suggest me what else the steps and things to consider when troubleshooting Active Directory Group Policy not applying to my Windows client ?

For example logon script running .VBS applied but not working for one Windows 10 client, but applied successfully for the laptop in same OU.

I've tried:

1. Look in local workstation Eventvwr
2. GPUpdate /Force and restart multiple times
3. GPResult /R and compare it with my laptop that is working, but all seems to be same.

I'm running out of idea.

Thanks in advance,
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
IT Engineer
Distinguished Expert 2017
Commented:
I had same problem with Folder Redirection in my Policy.
Policy was applied to all Windows Workstations except Windows 10
Then I found some article about CIMv2 filter. Someone said that for default policy is applied to Windows version 6 and if you want to applied to Windows 10 need to add version to filter.

So I did. and it's working now.

Open your GPO Editor go to WMI Filters and create new filter.
You can name it "Fol all Windows" or whatever you want.
in Queries put this string

select * from Win32_OperatingSystem where (Version like "6.%" OR Version like "10.%") and ProductType = "1"

Save and assign this filter to your GPO

Refresh policy on Workstation with Windows 10 and restart workstation.
Check if Policy was applied.

Capture.JPG
Then go to Your Policy Delegation Tab and Add Domain Computers and Authenticated Users with READ right

Capture.JPG

Author

Commented:
Thanks Tom,

I appreciate your tips for the above, I think I have used your tips before resolving the problem few months back. :-)
What I'm looking for is the other ways or methods that I may have missed for troubleshooting GPO in general.
yo_beeDirector of Information Technology

Commented:
What is the VBS code? You can add some error checking.
https://technet.microsoft.com/en-us/library/ee692852.aspx

Were you able to successfully run the script manually on a Windows 10 machine?

For example logon script running .VBS applied but not working for one Windows 10 client, but applied successfully for the laptop in same OU.
I will assume that the Laptops in the same OU are Windows 7 machines.
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Author

Commented:
The VBS code is just basically configuring the email signature template.

When I run it manually on the Windows 10 laptop using cmd prompt, it doesn't do any prompt or error, then nothing changed in Outlook.

Even after rebooting and running the script again while the Outlook is closed.

Author

Commented:
So how and where to see if Group Policy is not working for a client OS ?
is it from the windows server side event log or the client ?
Tom CieslikIT Engineer
Distinguished Expert 2017

Commented:
Run CMD as Administrator on some computer you want to test

GPRESULT /R /user   xxxxxx

xxxxx is your domain user name log on on this computer

Or if you want to check remotely

GPRESULT /S  sytemname /R /user   xxxxxx

systemname replace by computer name you want to test and xxxxx by user who is using this computer
(RPC service) must be ON on this machine


You'll get all informations

Author

Commented:
@Tom: if I follow your first step to map the network drive GPO with WMI filter, does it going to break the existing Windows 7 drive mapping ? Because at the moment the Windows 7 workstation works fine, but only 1 or 2 Windows 10 got this issue of not mapping.
Tom CieslikIT Engineer
Distinguished Expert 2017

Commented:
As long as there is no duplicates, then no.
But if your user has let say X:\ drive mapped to  \\server\share and you'll create X:\ drive to different location on the server in GPO then GPO will overwrite user settings.

Author

Commented:
Tom, somehow the mapped network drive in those two users is not mapped to anything at all.
I assume yes, the GPO should overwrite anything mapped with the same drive letter.

Author

Commented:
See this one GPO that is not working:

Drive GPO
Somehow it is not working for that one particular person, it is the most important thing to resolve.
Tom CieslikIT Engineer
Distinguished Expert 2017

Commented:
what is the result when your run from his computer ?

GPRESULT /R /user   xxxxxx

Author

Commented:
Thanks !

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial