Link to home
Create AccountLog in
Active Directory

Active Directory

--

Questions

--

Followers

Top Experts

Avatar of Manuel
Manuel

GPO applied but not showing in gpresult
I have created a new GPO with a couple of computer settings and set it to 2 OUs with clients inside.

The policy settings is applied and listed in the rsop report but when i run gpresult in cmd the GPO is not listed under
applied group policy objects.

Any ideas what could be the issue?

Zero AI Policy

We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.


Avatar of Hello ThereHello There

Make sure that GPO is linked to the correct OU and an OU contains all objects + that GPO is not enforced, no Block inheritance is set or no security filtering or WMI filtering is applied.

To apply your GPO:
GPO Computer Configuration
- wait up to 120 mins
OR gpupdate/force + reboot
OR just reboot

GPO User configuration
- wait up to 120 mins
OR gpupdate/force + log off and log in
OR log off and log in at least twice

Avatar of McKnifeMcKnife🇩🇪

Where do you run rsop.msc and gpresult, both at the client, I hope. gpresult needs to be run on an elevated command prompt, if you are investigating computer policies. So right click cmd.exe and select "run as administrator" and then run gpresult.

Avatar of zvitamzvitam🇮🇱

If you run gpresult /r at command prompt you will only see user settings.  If you have no user defined GPOs then Applied GPOs will show NA

Run command prompt as administrator and then run gpresult /r and you'll see the computer settings and user settings.  You'll then see the computer applied GPOs.

Add read permission to domain computers on the GPO

Reward 1Reward 2Reward 3Reward 4Reward 5Reward 6

EARN REWARDS FOR ASKING, ANSWERING, AND MORE.

Earn free swag for participating on the platform.


Avatar of ManuelManuel

ASKER

The weird thing is if i run rsop, i see the settings in there and also from the correct gpo.
And the settings are definitly applied to the computer. I tested the affected configuration changes.

I tried running cmd as admin but still cant see it.

Avatar of McKnifeMcKnife🇩🇪

Where do you run rsop?
Did you run gpresult elevated?

I asked before, please include me in your feedback.

Avatar of ManuelManuel

ASKER

I ran rsop on the client where the policies are applied and yes i ran gpresult elevated

Free T-shirt

Get a FREE t-shirt when you ask your first question.

We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.


Avatar of McKnifeMcKnife🇩🇪

rsop shows the policies, gpresult not? Can you prove that with a screenshot? Weird.

Avatar of ManuelManuel

ASKER

in an elevated gpresult /r there is no "ISMS" GPO shown
User generated image
the rsop report shows the setting being applied from the GPO "ISMS"
User generated image

ASKER CERTIFIED SOLUTION
Avatar of McKnifeMcKnife🇩🇪

Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.
Create Account

Avatar of ManuelManuel

ASKER

Well, i thought i read trough the gpresult very carefully, now im embarrassed.

Reward 1Reward 2Reward 3Reward 4Reward 5Reward 6

EARN REWARDS FOR ASKING, ANSWERING, AND MORE.

Earn free swag for participating on the platform.


Avatar of McKnifeMcKnife🇩🇪

Don't be. All this complex computer stuff, it sometimes gets over one's head :-)

thanks
Active Directory

Active Directory

--

Questions

--

Followers

Top Experts

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.