GPO Not Applying

HI All,
  I have a OU for Computers and OU for USers.
 Create the FolderRedirect GPO for User configuration ( Folder Redirection) for One Security Group (OLGroup) of people only.
 I have applied to users but this policy not applying?  Do i need Computers and Users in same OU?
AS

GPO delegation to Sub OU is the same as the domain OU?
any conflicting GPOs that you think that might cause the problem?
or check the GPO inheritance and precedence:
Group Policy settings are processed in the following order:
Local Group Policy object—Each computer has exactly one Group Policy object that is stored locally. This processes for both computer and user Group Policy processing. 
Site—Any GPOs that have been linked to the site that the computer belongs to are processed next. Processing is in the order that is specified by the administrator, on the Linked Group Policy Objects tab for the
site in Group Policy Management Console (GPMC). The GPO with the lowest link order is processed last, and therefore has the highest precedence.
Domain—Processing of multiple domain-linked GPOs is in the order specified by the administrator, on the Linked Group Policy Objects tab for the domain in GPMC. The GPO with the lowest link order is
processed last, and therefore has the highest precedence.
Organizational units—GPOs that are linked to the organizational unit that is highest in the Active Directory hierarchy are processed first, then GPOs that are linked to its child organizational unit, and so on. Finally, the GPOs that are
linked to the organizational unit that contains the user or computer are processed. 
At the level of each organizational unit in the Active Directory hierarchy, one, many, or no GPOs can be linked. If several GPOs are linked to an organizational unit, their processing is in the order that is specified by the administrator, on the Linked
Group Policy Objects tab for the organizational unit in GPMC. The GPO with the lowest link order is processed last, and therefore has the highest precedence.
This order means that the local GPO is processed first, and GPOs that are linked to the organizational unit of which the computer or user
is a direct member are processed last, which overwrites settings in the earlier GPOs if there are conflicts. (If there are no conflicts, then the earlier and later settings are merely aggregated.)
from this link: http://technet.microsoft.com/en-us/library/cc785665(v=ws.10).aspx

Similar Messages

  • WSUS GPO not applying on server restart

    At first I thought this was limited to a single SBS 2008 server but I have now seen this behavior on another SBS2008 and SBS2011 server.  Basically what happens is I patch the server, I restart the server but... somehow the GPO for WSUS does not apply
    and leaves the server Windows update settings set on Download automatically and install at 3am when it should be the Standard "Download and Notify for install"
    I can open a command prompt and perform a gpupdate /force and the the correct policy immediately applies.
    Has anyone seen this behavior?  Is it possible a windows patch that has caused this issue.  It must be something common amongst all three different instances of SBS.  I do not see any errors in event logs regarding group policy.
    Please Help

    Hi skahlam,
    Does this issue always occur when you reboot the server?
    If yes, to verify if this issue is related to the updates, please try to remove the updates installed recently.
    If issue persists after removing the updates, please try to run the gpresult /h C:\report.html
    to check the detailed information about the GPO.
    Note: This procedure needs the privilege of the Administrator.
    Best Regards.
    Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • GPO not applied at all with build 9926

    Hello,
    I have a Samba 4 Active Directory Domain controler. My LAN is composed of XP and 7 computers ; everything works well.
    I also have tested previous builds of Windows 10, and had no particular problem with Group Policies.
    With build 9926, my GPOs are not applied at all. It seems there is a big change making Group Policies not applied / not reloaded when users log in. Here are step by steps what I have noticed :
    0) At the very first log in, when I do a gpresult /V, i have a message saying something like "no rsop data for this user"
    1) I performed a gpupdate /force
    2) I performed another gpresult /V and then I got information about my GPO
    3) I logged out and logged in with same user --> my GPO is applied
    4) I modified my GPO to set new policy
    5) I loggged out and in again --> old policies are applied but new policy is not applied
    6) I performed gpresult /V --> new policy is not displayed
    7) I performed a gpupdate /force and then a gpresult /V --> new policy appears
    8) I loggged out and in again --> All policies, including the new one are applied
    So it seems the GPOs are not automatically updated and applied when logging in, and I have to force them manually.
    The good question is : WHY ? :)
    Thanks
    Will

    Hi Will799114,
    I tested this in my environment, it seems a restart would apply group policy successfully, but a sign out and sign in would not trigger this procedure.
    Here I would suggest you post your feedback directly to our Feedback channel:
    http://windows.microsoft.com/en-in/windows/preview-how-to#how-to=tab7
    Alex Zhao
    TechNet Community Support

  • User GPO not applying

    I have just started at a new company and trying to to setup some new GPO's
    We have all the users in a root OU called Accounts
    We have  all the computers in a root OU Company\Workstations
    There are a number of GPO assigned to the "Workstations" OU for both Users and Computer Policy's
    I would like to add some new GPO's to the Users OU for Uses settings but they will not apply or appear.
    I have run a Group Policy Results on a few workstations and I can see the GPO being applied from the Workstations OU but none from the Users OU.  However if I set the GPO to run off the Workstations OU it appears.  
     

    > GPO's in the Workstations OU and if there are any users settings I will
    > have to create a new GPO in for the Accounts' OU for any user settings
    > before I disabled the Loopback GPO?
    Basically "yes". Alternatively change Loopback "replace" to Loopback
    "merge".
    Martin
    Mal ein
    GUTES Buch über GPOs lesen?
    NO THEY ARE NOT EVIL, if you know what you are doing:
    Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))

  • PIN sign-in GPO not applying to workstations

    I am currently testing Windows server 2012 R2 with Windows 8.1 tablets and cannot get PIN sign-in to work on the client machines, I have disabled local policy processing and all of the management is coming from GP, however when I manually apply the policy
    setting using gpedit.msc it works, does anyone of a way to have it read from GPO in domain?

    Hi,
    Before going further, the setting Turn on PIN sign-in allows users to set up and sign in with PIN. As Don suggested we could check the registry key to confirm if the policy
    setting was enabled successfully. If yes, to use PIN sign-in option, 
    users need to create a PIN for themselves. After a PIN is created, users should be able to choose to sign in with PIN sign-in option when they log on. After we enabled the turn on PIN sign-in setting, user also need to set the password for sign-in account.
    After reset the account, user can use sign-in when user re-logon.
    We can follow the steps below to set account password: to create a PIN, the following steps can be referred to as reference:
    Step 1: Swipe in from the right edge of the screen, and then tap Settings.
    (If you're using a mouse, point to the upper-right corner of the screen, move the mouse pointer down, and then click Settings.) 
    Step 2: Tap or click Change PC settings, and then tap or click Accounts. 
    Step 3: Tap or click Sign-in options, and under PIN, tap or click Add.
    If you don't have a password on your account, you'll need to create a password before you can create a PIN. 
    Step 4: Confirm your current password and then you can create a PIN.
    If there is any question, don’t hesitate to let us know.
    Best Regards,
    Erin

  • GPO not applying to all users in the same security groups

    If Elaine logs in on Angie's PC does it work?

    Using Windows Server 2008 R1. I have a single domain with two DCs (both Server 2008 R1). Both DCs seem to be communicating without issues, as changes on one DC are replicating normally to the other for all services.I have a group policy set up to set drive mapping for my users. However when I run the GP modeling wizard only a few of the users receive the proper mappings. In this specific instance I have two users, Elaine and Angie. 1. Both are members of the Domain Users security group and another security group I created called Staff2. Neither user is a member of any other security groups.3. My group policy Security Filtering setting is set to apply the policy ONLY to the Staff security group4. When running the GP Results Wizard, Elaine's computer successfully processes the policy, but Angie's does not, and returns "Access Denied...
    This topic first appeared in the Spiceworks Community

  • Cross Forest User GPOs not applying

    I know I've read a ton of forums concerning this issue and most were resolved but nothing read so far has helped and I'm really hoping there are a few ideas out there that I have missed.
    We have two forests: a new 2012 forest and an 2008 at an 2003 forest level with two way forest trust.
    We are able to login to computers in the 2012 forest regardless of domain with any user in the 2008 forest.  However we are setting up our workstation environment in the 2012 forest which requires us applying user policies.  All users are in the
    2008 forest.  We have enabled the allow cross forest policy and the loopback processing applied to the OU where the client machines are located in Active Directory.  We have verified the trust on both sides and tested DNS using nslookup on both sides.
     The DCs for both forest are located in the same physical building but two different subnets.  The WAN guy has assured us that there are no ACLs involved.  The firewall has been shut off on all DCs and all workstations.  I see no LSA errors
    on the DCs.  Each forest has a stub DNS zone to the other forest zones.  I've been able to successfully setup computer gpos to map drives to the users when they login to 2012 clients.
    I'm completely lost for what else we need to be looking at to solve this problem.   Any suggestion would be most welcome.  

    Hi,
    Before going further, what settings have we configured? Which Loopback mode have we chosen, Merger or Replace? What are operating systems of our clients?
    For further troubleshooting, we can follow the following article to collect Gpsvc.log file.
    How to enable GPO logging on windows 7 /2008 r2 ?
    http://blogs.technet.com/b/csstwplatform/archive/2010/11/09/how-to-enable-gpo-logging-on-windows-7-2008-r2.aspx
    After getting the log, you may upload it to OneDrive and provide us the download link.
    Besides, we can try using netmon.exe to further trace network to see if this is caused by network traffic.
    Microsoft Network Monitor 3.4
    http://www.microsoft.com/en-in/download/details.aspx?id=4865
    How to use Network Monitor to capture network traffic
    http://support.microsoft.com/kb/812953/en-us
    TechNet Subscriber Support
    If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
    Best regards,
    Frank Shen

  • Hide Display Settings not applied in User GPO

    Hello,
    I am trying to hide the display settings via a GPO so folks can't change the resolution. I set the "Disable the Display Control Panel" setting to enable, but users can still go to the Control Panel and change the display settings. Other parts of
    the GPO are applying, like the Ctrl+Alt+Del settings. The GPO has the loopback function set to replace. From my understanding, that should force all user settings in that GPO on everyone who logs into the computer, whether they are in that OU or not.
    Some settings apply, just not the Display settings. Is there something else I have to enable to get that working?
    Thanks
    Jason Watkins MCSE, MCSA, MCDBA, CCNA

    Hi Jason,
    It's been a while. How is it going? If it still doesn't work out, we can run command
    gpresult/h report.html to collect group policy result to check this. Note: to collect computer part group policy settings, we need to run the command with administrative privileges.
    In addition, regarding troubleshooting group policy issues, the following thread can be referred to as reference.
    [Forum FAQ] Common steps to start troubleshooting Group Policy application issues
    https://social.technet.microsoft.com/Forums/windowsserver/en-US/382c97e8-93c8-4022-b8fe-22401037d14c/forum-faq-common-steps-to-start-troubleshooting-group-policy-application-issues?forum=winserverGP
    Best regards,
    Frank Shen
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • GPO preference not applying to map network drive?

    Hello,
    Server 2008 r2 GPO preference not applying to users to map network drive? When I see errors on client pc, here is the error I found?
    Log Name: Application
    Source: Group Policy Drive Maps
    Date: 1/7/2014 1:47:33 PM
    Event ID: 4098
    Task Category: (2)
    Level: Warning
    Keywords: Classic
    User: SYSTEM
    Description:
    The user 'S:' preference item in the 'GPO {C990F58F-E8B2-41BF-B6FD-E1BAC389C4F1}' Group Policy object did not apply because it failed with error code '0x80070037 The specified network resource or device is no longer available.' This error was suppressed.
    GPresult shows following message on client pc:
    The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.
    Winning GPO Name GPO
    Result: Failure (Error Code: 0x80070037)
    I also have tried using full server name in the share, IP address but no success. :(
    I'm using variable %username% in share location: \\servername\share\%username%
    Any idea? Please help. Thanks

    Just a control question, can you actually access the users homefolder manually from the client?
    Drive maps for GP Preferences is used to map drives only. It cannot create folder on the server and that’s why we see the error “0x80070037 The specified network resource or device is no longer available.”.  If you'd like to use share location
    with Variable, please ensure that these folders exist on the file server.
    Hope this helps you!
    Microsoft Certified Trainer
    MCSE: Desktop, Server, Private Cloud, Messaging
    Blog: http://365lab.net

  • Windows Server 2012 GPO setting are not apply on windows Xp clients

    Hi
    I am create GPO on windows server 2012.  300 clients on domain are working fine, GPO setting apply on all windows 7, 8 clients. But 200 clients of windows XP are not working. GPO setting are not applies on XP. I am trying to Group Policy
    Preference Client Side Extensions for Windows XP (KB943729) on one window XP client, all GPO servers 2012 setting is working fine. But is not solution. I have 200 clients of windows XP, Please provide batter solution on one click command and apply all 200
    XP clients.
    Thanks.

    Dear,
    I have Windows server 2012 ,  i have install ADDS with Forest functional level 2008 & Domain functional level 2008 .
    I have applied GPO to particular OU, when i login to domain user on Windows 7 PC all GPO working fine but when i login on Windows Xp SP3 PC its not applied on XP. 
    I am facing issue on windows XP clients it is true. Please see this URL address:
    http://blogs.technet.com/b/grouppolicy/archive/2009/03/27/group-policy-preferences-not-applying-on-some-clients-client-side-extension-xmllite.aspx
    Please provide batter solution on one click command
    Thanks.

  • GPO settings are not applied

    Hi everyone
    I am using WSUS in my internal network.
    When i am trying to deploy GPO, The GPO seems to be applying on the computer but the 
    GPO settings are not being applied.
    I am getting error An error occured while checking for updates for your computer
    and in Windows update change settings, i can see it is grayed out with the option
    Download updates but let me choose wheter to install them(some settings are managed by your system administrator)
    I have disabled windows firewall when i was using Windows XP computers, Is any settings of windows firewall creating issues?
    I have created a computer group in WSUS say TESTGroup
    In GPO I have assigned the following settings(Please correct me if i am going wrong with the settings)
    Configure Automatic updates : 3-Auto download and notify for install
    Specify Intranet microsoft update service location: http://mywsus (here should it be mywsus or mywsus:8530)
    Enable Client Side targeting : TestGroup ( I have OU in active directory with Computers)
    Do not display install updates and shutdown option : Enabled
    Automatic Updates detection frequency : 2 hours
    Allow Non administrators to receive update notification : Enabled
    Allow Automatic updates immedidate installation : Enabled
    Turn of recommended updates via automatic updates : Enabled
    Reschedule automatic udpates scheduled installation : 10 min
    I have approved few updats in WSUS console to install on TestGroup
    On Client Computer ihave used the command 
    wuauclt /detectnow and wuauclt /reportnow
    Please guide me

    I have installed the updates KB2720211 KB2530678 KB2530709 KB2734608 on WSUS Server
    My GPO settings are 
    Configure Automatic updates : 3-Auto download and notify for install
    Allow signed updates from an intranet microsoft update service location : Enabled(i am using internal WSUS server exporting updates from internet connected WSUS to internal WSUS)
    GPO is applying but settings are not being applied.
    please do refer the client logs & attachment.
    Triggering AU detection through DetectNow API
    START ##  AU: Search for updates
    <<## SUBMITTED ## AU: Search for updates [CallId = {A52428A8-E7EC-4CAB-9842-0B66F6969382}]
    ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    Agent *********
    * Online = Yes; Ignore download priority = No
    * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    Agent   * Search Scope = {Machine}
    Setup Checking for agent SelfUpdate
    Setup Client version: Core: 7.6.7600.320  Aux: 7.6.7600.320
    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080:
    Microsoft signed: NA
    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\TMP8FF3.tmp with dwProvFlags 0x00000080:
    Triggering AU detection through DetectNow API
    Piggybacking on an AU detection already in progress
    Microsoft signed: NA
    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab with dwProvFlags 0x00000080:
    Microsoft signed: NA
    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab with dwProvFlags 0x00000080:
    Microsoft signed: NA
    Setup Determining whether a new setup handler needs to be downloaded
    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\Handler\WuSetupV.exe with dwProvFlags 0x00000080:
    Microsoft signed: NA
    Setup SelfUpdate handler update NOT required: Current version: 7.6.7600.320, required version: 7.6.7600.320
    Evaluating applicability of setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.6.7600.320"
    Setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.6.7600.320" is already installed.
    Setup Evaluating applicability of setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~x86~~7.6.7600.320"
    Setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~x86~~7.6.7600.320" is already installed.
    Evaluating applicability of setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.6.7600.320"
    Setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.6.7600.320" is already installed.
    SelfUpdate check completed.  SelfUpdate is NOT required.
    +++++++++++  PT: Synchronizing server updates  +++++++++++
    + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://MYWSUSServer/ClientWebService/client.asmx
    WARNING: GetConfig failure, error = 0x80244019, soap client error = 10, soap error code = 0, HTTP status code = 404
    WARNING: PTError: 0x80244019
    WARNING: GetConfig_WithRecovery failed: 0x80244019
    WARNING: RefreshConfig failed: 0x80244019
    WARNING: RefreshPTState failed: 0x80244019
    WARNING: Sync of Updates: 0x80244019
    WARNING: SyncServerUpdatesInternal failed: 0x80244019
     * WARNING: Failed to synchronize, error = 0x80244019
    * WARNING: Exit code = 0x80244019
    **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    Agent *************
    WARNING: WU client failed Searching for update with error 0x80244019
    >>##  RESUMED  ## AU: Search for updates [CallId = {A52428A8-E7EC-4CAB-9842-0B66F6969382}]
    # WARNING: Search callback failed, result = 0x80244019
    # WARNING: Failed to find updates with error code 80244019
    ##  END  ##  AU: Search for updates [CallId = {A52428A8-E7EC-4CAB-9842-0B66F6969382}]
    Need to show Unable to Detect notification
    Successfully wrote event for AU health state:1
    AU setting next detection timeout to 2015-03-20 20:18:22
    Successfully wrote event for AU health state:1
    Successfully wrote event for AU health state:1
    Report REPORT EVENT: {5BCEA64A-0FEB-4B01-9509-CE94AFE0D04A}
    2015-03-20 21:19:59:003+0300 1
    148 101
    {00000000-0000-AutomaticUpdates Failure
    Software Synchronization Windows Update Client failed to detect with error 0x80244019.
    CWERReporter::HandleEvents - WER report upload completed with status 0x8
    WER Report sent: 7.6.7600.320 0x80244019 00000000-0000-0000-0000-000000000000 Scan 101 Managed
    Report CWERReporter finishing event handling. (00000000)
    WARNING: GetConfig failure, error = 0x80244019, soap client error = 10, soap error code = 0, HTTP status code = 404
    WARNING: PTError: 0x80244019
    WARNING: GetConfig_WithRecovery failed: 0x80244019
    WARNING: RefreshConfig failed: 0x80244019
    WARNING: RefreshPTState failed: 0x80244019
    WARNING: PTError: 0x80244019
    WARNING: Reporter failed to upload events with hr = 80244019.
    WARNING: GetConfig failure, error = 0x80244019, soap client error = 10, soap error code = 0, HTTP status code = 404
    WARNING: PTError: 0x80244019
    WARNING: GetConfig_WithRecovery failed: 0x80244019
    WARNING: RefreshConfig failed: 0x80244019
    WARNING: RefreshPTState failed: 0x80244019
    WARNING: PTError: 0x80244019
    WARNING: Reporter failed to upload events with hr = 80244019.

  • Webfeed gpo is applied (in resultant Policy) but RADC is not configured

    After tests for placing Remote app shortcut in Start menu of Windows 7 client and getting positive result I want to automate the process.
    So I created computer GPO for SSO and linked it to OU where test computer resides.
    I created User GPO for WebFeed and linked it to Test Users OU (User1, User2)
    Resultant Policy shows that User GPO is applied to each user. But I cannot get webfeed URL in RADC when logged in with test User2.  To be sure that final solution works I entered manually webfeed url in RADC when logged in as USER1
    1 Remote App works fine from shortcut in start Menu and Desktop when
    USER1 is logged in.
    WebFeed link is entered manually in RADC applet in Control Panel for user USER1
    2. The last desired point is to make work WebFeed GPO.
    If I login as USER2 no icon in start menu. RADC is empty.
    As mentioned Resultant GPO shows that webfeed GPO is applied to USER1 and USER2
    How to troubleshoot this thing?
    &quot;When you hit a wrong note it's the next note that makes it good or bad&quot;. Miles Davis

    what is the registry ? if I want to insert it in the image.
    Can you provide a script plz.
    In GPO itself it says Windows 8 or RT minimum. But I think I saw somewere that I can use it on Windows 7 with RDP 8.
    Thanks.
    &quot;When you hit a wrong note it's the next note that makes it good or bad&quot;. Miles Davis

  • ZCM 11 Group Policies not applying to satellite servers

    Hi there
    We are running 2 Windows 2012 Primary Servers and a SQL 2012 Database server at our main site, all remote sites have SLES11 SP2/OES11 SP1 as satellite servers. We upgraded all servers last weekend to 11.3.1 and now have an issue with Group Policies applying to the satellites. The satellites are all set up the same with Authentication, Collection, Content and Imaging roles.
    Since we upgraded Group Policies are (99% of the time) not applying on satellite sites. I have tried manually replicating content (I assume policies will come from content replication?) to the satellites - I've done this with a zac cdp replicate and zac cvc and everything seems to replicate over however I tried highlighting a satellite server and clicking on Action, Specify Content - select the Policy that is not applying and move it into the selected Content to update column and when I click finish I get the error "The Wizard cannot continue for the following reason(s): Unable to complete your request for the following reason: Error updating content"
    On a managed device at the satellite site if you look at the properties of the Zenworks agent and click on Policies it has applied 4 device assigned policies successfully - Remote Management, Power Management, Application Launcher Config and Application Control Policy, also has successfully applied 3 out of the 4 User Assigned Policies - Mandatory Profile, Dynamic Local User, Application Control - but not the Windows Group Policy.
    Our PCs are on Windows 8.1 and all policies were applying fine before the weekend upgrade......
    Has anyone else had any experience of Group Policies not applying that could point me where to look? I have logged an SR with Novell through our reseller but as yet I am getting no response back at all, not even asking me for more information.
    Many thanks
    Sharon

    Sounds like you have a content replication issue more than a GPO issue.
    Especially if the GPO works for locations that point to the Primaries
    for Content.
    Do you have throttling configured anywhere in any fashion?
    You may need to increase the Replication Timeout to make sure content is
    getting over to the Sats. Often increasing from 60 to 240 helps, but
    watch out for throttling preventing content replication.
    It is possible things are backing up.
    On 7/31/2014 8:26 AM, shazzypoos wrote:
    >
    > I should add that when you looked at the "Click for Details" to the
    > right of the Effective "Failed" status the message is "Policy
    > Enforcement Failed : The action (0) threw an exception. Message (1).
    > Exception (2) (grouppolicy, "None of the source locations could be
    > found"
    >
    > Hmmmm! Currently in closest server rules there is only the server for
    > the site it's on set - we do not want it to come back to the Primary for
    > policies. As I say, this was working before the weekend upgrade. Thanks!
    >
    >
    Craig Wilson - MCNE, MCSE, CCNA
    Novell Technical Support Engineer
    Novell does not officially monitor these forums.
    Suggestions/Opinions/Statements made by me are solely my own.
    These thoughts may not be shared by either Novell or any rational human.

  • The user '*' preference item in the 'User - 6th Form Students Policy {E03166E7-A848-48B5-AA93-97B848AA9C13}' Group Policy object did not apply because it failed with error code '0x80070003 The system cannot find the path specified.' This error was suppres

    I am looking at an issue with users not getting specific group policies. 
    After searching a number of client computers I found that the following error
    The user '*' preference item in the 'User - 6th Form Students Policy {E03166E7-A848-48B5-AA93-97B848AA9C13}' Group Policy object did not apply because it failed with error code '0x80070003 The system cannot find the path specified.' This error was suppressed.
    I can find the folder in the Sysvol folder on all of the domain controllers. 
    The issue with end users seems to be that the proxy settings for internet explorer is not being applied. 
    Potential problems?
    one folder in sysvol entry is empty 
    \\<server>\SYSVOL\<domain.name>\Policies\{E03166E7-A848-48B5-AA93-97B848AA9C13}\User\microsoft\IEAK\LOCK
    or is this our issue
    The old method of configuring proxy settings  to Internet Explorer 9 has changed?
    https://support2.microsoft.com/kb/2530309?wa=wsignin1.0 
    http://thommck.wordpress.com/2013/11/08/the-new-way-to-configure-internet-explorer-proxy-settings-with-group-policy/

    Hi all 
    In administering this policy I am a little confused. 
    We have a policy that distributes proxy settings in the internet explorer maintenance settings section - however when opening this policy up in GPO editor the internet explorer maintenance section is not present.
    I plan to apply the settings via User/preferences/control panel settings/ internet settings (or registry settings from article) however I am unable to edit the settings for internet explorer maintenance and these will persist. Ideas????

  • Urgent Group Policy Issue - not applying despite saying it does

    Thank you for this urgent help. Auditors checking this out tomorrow morning.
    We have a GPO that sets the eventlog audit settings for success or failure security events. The scope is set to Authenticated Users.
    When I run the group policy wizard in GPMC it shows the settings applying to one of our servers in that OU.
    When I run gpresult/z from that server it shows the policy applying to that server.
    But when I go into gpedit.msc the security audit settings are all set to "not defined" and they are grayed out so I can't edit them manually.
    As a test I set the GPO to deny applying to that server. I ran gpudpate/force on the system and then gpresult and it shows the GPO now not applying. But the settings are still set to not defined and still not editable. they are not being set by any other GPO.
    In the event logs I only see three GPO errors but they are unrelated. A separate GPO is having issues creating user accounts. No other GPOs apply.
    Quick help would be fantastic.
    Server runs on Windows Server 2008 R2 (I can edit GPO but not the domain ones and I don't have access to the domain controllers).

    OK, After several hours I figured it out. Turns out there's bugs and odd functionality.
    If someone ever tested the 'advanced audit settings' (which I did in the same GPO at some point) then it sets a registry key to disable the use of the older basic audit settings. But when you stop using those advanced settings in your GPO it doesn't remove
    that registry bit. So I used the GPO to undo that setting. This was the first step. This is found Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options > "Audit: Force audit policy subcategory
    settings (Windows Vista or later) to override audit policy category settings" to DISABLED.
    Even though this is done, sometimes the GPO files on the domain controllers don't remove the old audit settings. So in the comments of another thread I found out you may have to go to
    \\domain-fqdn\SYSVOL\domain-fqdn\Policies\{your-policy-id-where-this-setting-was-originally-set}\Machine\Microsoft\Windows NT\ and delete the Audit folder which is left behind due to some odd bug. If you don't do this even after doing the next step the
    next gpupdate will bring that security setting above back down.
    Next you have to reset your audit settings on your PC to the defaults. Unfortunately there is no way to do this. Auditpol /clear does not accomplish this. The only way to do this is to take the audit settings from another working system, export them and
    then 'restore' those same settings to the affected server. To do this:
    1. On 'working system' run cmd.exe as administrator and export the audit settings to a folder like this:
    auditpol /backup /file:c:\working-auditpol-settings.txt
    2. Copy that file to the broken system such as the C:\ drive and run this on the broken system:
    auditpol /restore /file:c:\working-auditpol-settings.txt
    Open GPEDIT.MSC and verify the audit settings are back to normal. Computer Configuration > Windows Settings > Security Settings > Local Policies > Audit Policy
    Then run gpupdate/force on the formerly broken system. Close gpedit.msc and reopen and verify the settings were not overwritten. If you skipped the sysvol audit folder deletion step they may come back.
    Hope this helps someone.

Maybe you are looking for