GPO policies

Question

Hi there,

I have an Windows server with ADDS ,DNS and GPO services.
An workstation is member of the Domain.

I configured 3 GPO's : 1 dont acces pc settings, 2, deployment google chrome and 3 lockscreen and desktop wallpaper.
GPO 1 works fine on the workstation but 2 and 3 not. On the workstation I only see on the desktop an black background and lockscreen image the standard from microsoft.

On the windows server I configure GPO 2 and 3 but only GPO 3 works..

Hopefully its enough info, please need some help

Answer 1

Hi Hannah, I have and Windows 10 pro client/workstation with version 1703. ![18816-capture1.jpg][1] above User configuration works the same like what you said. That's great. ![18931-capture2.jpg][2] above with Computer configuration doesn't work and that makes me confused.. ![18835-capture3.jpg][3] above two gpupdate /force is when I applied the GPO on Computer Configuration. the last gpupdate is when I change it to User configuration. Then it works fine. [1]: /api/attachments/18816-capture1.jpg?platform=QnA [2]: /api/attachments/18931-capture2.jpg?platform=QnA [3]: /api/attachments/18835-capture3.jpg?platform=QnA

Answer 2

Hello,

Thank you so much for posting here.

To troubleshoot the issue, we could check the following points:

1, As per the three GPOs, there are computer configuration and user configuration. For User Configuration section, our Group Policy object must be linked to an OU with users objects. Then the users in this OU will apply the user setting within this GPO object. While for Computer Configuration, the GPO must be linked to an OU with computer objects.

We could kindly have a check whether they are correctly configured.

2, After the configuration, if we want GPO settings to refresh, we can run gpupdate /force command.

For several special GPO settings, such as folder redirection, drive map, Software Installation, Disk Quota, we must restart the machines or sign out and sign in the user account to refresh these GPO settings.

3, To check if the specific settings get applied or not, we could run “gpresult /h” to get a detailed group policy result report.

If it is computer configuration,

1. Logon one client with the Administrator account.
2. Open CMD, run as administrator.
3. Type gpresult /h C:\report.html and click Enter.
4. Open report file to check the policies under Computer Details.

If it is user configuration,

1. Logon one client with domain user account who is within the OU linked by the GPO.
2. Create a new folder in C drive named Folder.
3. Open CMD, type gpresult /h C:\Folder\report.html and click Enter.
4. Open report file to check the policies under User Details.

For any question, please feel free to contact us.

Best regards,
Hannah Xiong

Answer 3

Hi Hannah and thanks for the detailed explain.

GPOs for Computer configuration are not listed in the reports but User Configuration does.
The thing is when I switch GPO for google chrome from Computer to User configuration then it works, but users have to install it by hand.
I want it installed automatically.

It is weird because the GPO's for wallpaper, lock screen image and deploy google chrome only works on my DC server..
I have applied more GPOS based on computer and user config on my workstations and they working fine..

For me right know I just want only the 3 GPO desktop wallpaper, lock screen image and deploy google chrome to work..

Answer 4

Hi,

GPOs for Computer configuration are not listed in the reports but User Configuration does.

To display the GPO settings for computer configuration , you have to launch gpresult command with a local administrator account on member machine.

Please don't forget to mark this reply as answer if it help you to fix your issue

Answer 5

Hi,

You are welcome. Thank you so much for your feedback.

To check the computer configuration on the servers, we have to run as administrator to open CMD. Hope we could have a recheck.

As for the deployment of google chrome, there will be computer configuration and user configuration. If it is computer configuration, the GPO will be linked to the OU with computer accounts. And the deployment method is assigned.

If it is user configuration, the GPO will be linked to the OU with user accounts. The deployment method could be published or assigned. If it is published, it will not install automatically when the user logs on to the computer. If we want it installed automatically, we could choose assigned deployment method. Besides, under the Deployment tab, choose "Install this application at logon".

According to our description, the GPOs work fine on our DC server, but not working on our workstation. May I know what the workstation is, member server or client? If it is client, what the version is?

Since the GPOs work on the DC server, there will be no problem with the configurations. Then to check whether it is applied or not on the workstation, we could run gpresult /h to check the result report as mentioned before.

For any question, please feel free to contact us.

Best regards,
Hannah Xiong