Link to home
Start Free TrialLog in
Avatar of Wataw
WatawFlag for Hong Kong

asked on

GPO (computer policy) not working after reboot.

Dear Sir,

I had created some Group policy (Computer Policy) for Windows 7. Is that suppose the computer policy will deployed once the workstations are restarted. I had found that some workstations not apply the new computer policy until I manually type gpupdate /force in command prompt and then restart once again.

Please advise and correct me if I am wrong. Thank you.

With regards,
Wataw
SOLUTION
Avatar of Olgierd Ungehojer
Olgierd Ungehojer

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Wataw

ASKER

Dear Olegierd,

Thanks for your reply. Our network had around 150 workstations, but only 10 of them new group policy (computer policy that install SSL cert) need to do it in front of the computer. Before reboot, I type gpresult /R . I see the GPO is applied on the list.  Then I reboot but no luck. Type gpupdate /force and then reboot. Then it works. Please advise what's happening?

Thank you.

With regards,
Wataw
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Reboot works only for local group policies

For domain:-
But if you have set new group policies for a PC then you have to run gpupdate /force on doman controller and then restart remote systems which are in domain OR wait for 120 mins as mentioned above.
When you make a change to a group policy, you may need to wait two hours (90 minutes plus a 30 minute offset) before you see any changes on the client computers. Even then, some changes will not take effect until after a reboot of the computer.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Hello There
Hello There

Make sure that GPO is linked to the correct OU and an OU contains all objects + that GPO is not enforced, no Block inheritance is set or no security filtering or WMI filtering is applied.