GPO's are not being enforced on domain

Discussion in 'OT Technology' started by Stev, Jan 18, 2008.

  1. Stev

    Stev Active Member

    Joined:
    Mar 12, 2004
    Messages:
    11,409
    Likes Received:
    0
    ERROR: 01/18/2008 05:08:09 - (Userenv) The Group Policy client-side extension Internet Explorer Branding failed to log RSOP (Resultant Set of Policy) data. Please look for any errors reported earlier by that extension.
    ERROR: 01/18/2008 07:06:16 - (Userenv) Windows cannot query for the list of Group Policy objects. A message that describes the reason for this was previously logged by the policy engine

    These are commonplace throughout the network. For example, I cant get people to engage to our WSUS Server. GPUPDATE does not yield any results. Each computer will eventually show the event that they have applied the GPO's successfully, but none of settings on the PC that should be changed, have changed.

    Ive gone over the microsoft fixes for this, no luck. Is there something i am missing? Has anyone dealt with a similar situation before?
     
  2. EvilSS

    EvilSS New Member

    Joined:
    Jun 11, 2003
    Messages:
    5,104
    Likes Received:
    0
    Location:
    STL
    Have you run a GPRESULT on one of the client machines? If not, that should be your first step. It will tell you which policies are (and are not) applying to the machine.
     
  3. scarredupmario

    scarredupmario New Member

    Joined:
    May 16, 2007
    Messages:
    19
    Likes Received:
    0
    Location:
    MN
    I've had problems with machines that are ghosted with out refreshing the SID (previous admin not knowing about ghost walker) had to remove machines from domain, restart add machine to domain restart.
     
  4. scarredupmario

    scarredupmario New Member

    Joined:
    May 16, 2007
    Messages:
    19
    Likes Received:
    0
    Location:
    MN
    also
    "Always wait for the network at computer startup and logon".
    found in the computer configuration/administrative templates/system/logon.
    makes the computer wait for the network to come up before login and that helps to apply group policy
     
  5. Stev

    Stev Active Member

    Joined:
    Mar 12, 2004
    Messages:
    11,409
    Likes Received:
    0
    gpresult is misleading it doesn't show policies that it is applying... Doesn't show any.. So idk wat to think
     
  6. scarredupmario

    scarredupmario New Member

    Joined:
    May 16, 2007
    Messages:
    19
    Likes Received:
    0
    Location:
    MN
    If your open rsop.msc (start-Run) then right click on either computer configuration or user configuration and go to properties the first tab should show you applied policies, Check the box Display all GPO's and filtering status to see the policies that are not being applied.
     

Share This Page