gpupdate /force client don't receive policy

Question

first i have DFSR Event ID 4012 MaxOfflineTimeInDays (replication issue)
i try fix this issue using (How to force authoritative and non-authoritative synchronization for DFSR-replicated sysvol replication)

https://learn.microsoft.com/en-US/troubleshoot/windows-server/group-policy/force-authoritative-non-authoritative-synchronization

The problem solving process succeeded

but when using gpupdate /force in win10 (client) displays an error message

Computer policy could not be updated successfully. The following errors were encountered: The processing of Group Policy failed. Windows attempted to read the file \company.com\sysvol\company.com\Policies{0567324A-F81D-45D5-8BAA-BE1CF484DA84}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved.
This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
User Policy update has completed successfully.
The following warnings were encountered during user policy processing:
Windows failed to apply the Group Policy Drive Maps settings.
Group Policy Drive Maps settings might have its own log file. Please click on the "More information" link. To diagnose the failure, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.

when i checked GUID have found maybe 4 policy have problem

Answer 1

Hi Ziyad,

Can you please check the status of the DFSR by running this command and providing the output

dfsrmig.exe /getglobalstate
If the result shows: 3 (ELIMINATED) ,it means DFSR

Also the DC Health status will be good to know before we proceed with investigation.

Dcdiag /v >c:\dcdiag1.log
Repadmin /showrepl >C:\repl.txt
Repadmin /syncall /APeD

As a test can you create a new Win10 GPO with some settings and apply on the device, proceed to run the GPUpdate /force on the client and check whether this GPO has been applied succesfully. If it does apply it means replication and DFSR is working and the original GPO is corrupted or having read permissions issue.

Answer 2

I checked dfsr migrate ( successfully),,
and repadmin /replasummary ( no fails),,,
and repadmin /syncall /Adep ( no error)
and I checked dfs logs ( no logs with error, and the file sysvol and netlogin are normal shared between the primary domain and additional).
and I test with win10 (client) to gpupdate maybe succeed and maybe not, display the same error

( Computer policy could not be updated successfully. The following errors were encountered: The processing of Group Policy failed. Windows attempted to read the file \company.com\sysvol\company.com\Policies{0567324A-F81D-45D5-8BAA-BE1CF484DA84}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. )

and I want to ask you what you mean by permission issue.?