Problem with group policy enforcement

Anonymous
2023-10-19T10:20:48+00:00

Good morning everyone.

I'm adding group policies for mapping network drives, already done in the past.

I create the policy, add the group as the item destination.

The policy doesn't work, I check: the target users are present in the group I included.

I look an old policy: same configurations. I insert the 2 users as recipients of the policy (at least initially), launch a gpupdate and the drive is mapped.

If I remove it from one of the mapping groups, delete all the network drives and do gpupdate /force, the same drive is remapped. Cleaning the domain policies on the client, doing a gpupdate /sync and restarting, the mappings are correct.

When I perform a gpupdate /force I receive the message relating to a policy with an ID that does not exist (I also looked in the sysvol directories of the two domain controllers).

In gpresult the mappings that I try to apply / no longer apply are not shown. No errors reported, except for a warning regarding a fast link.

Thanks to anyone who can help me.

gpupdate /force
Aggiornamento criteri in corso...

Aggiornamento dei criteri computer completato.

Durante l'elaborazione dei criteri computer sono stati generati gli avvisi seguenti:

Impossibile applicare le impostazioni {XXXXXXX}. È possibile che per le impostazioni {XXXXXXX} sia disponibile un file di registro specifico. Fare clic sul collegamento "Ulteriori informazioni".
Aggiornamento dei criteri utente completato.

Per informazioni più dettagliate, esaminare il registro eventi o eseguire GPRESULT /H GPReport.html dalla riga di comando per accedere alle informazioni sui risultati di Criteri di gruppo.

repadmin /showrepl

Repadmin: esecuzione del comando /showrepl sul controller di dominio completo SRV.dominio.net
dominio\server
Opzioni DSA: IS_GC
Opzioni sito: (none)
GUID oggetto DSA: ID
ID chiamata DSA: ID

==== ROUTER ADIACENTI IN INGRESSO ==============================

DC=dominio,DC=net
dominio\SRV-dc2 tramite RPC
GUID oggetto DSA: ID
Ultimo tentativo in data 2023-10-19 10:39:19 riuscito.

CN=Configuration,DC=dominio,DC=net
dominio\SRV-dc2 tramite RPC
GUID oggetto DSA: ID
Ultimo tentativo in data 2023-10-19 09:57:23 riuscito.

CN=Schema,CN=Configuration,DC=dominio,DC=net
dominio\SRV-dc2 tramite RPC
GUID oggetto DSA: ID
Ultimo tentativo in data 2023-10-19 09:57:23 riuscito.

DC=DomainDnsZones,DC=dominio,DC=net
dominio\SRV-dc2 tramite RPC
GUID oggetto DSA: ID
Ultimo tentativo in data 2023-10-19 09:57:23 riuscito.

DC=ForestDnsZones,DC=dominio,DC=net
dominio\SRV-dc2 tramite RPC
GUID oggetto DSA: ID
Ultimo tentativo in data 2023-10-19 09:57:23 riuscito.

C:\WINDOWS\system32>repadmin /replsummary
Ora di inizio riepilogo replica: 2023-10-19 10:42:30

Inizio raccolta dati per il riepilogo della replica. Attendere:
.....

DSA di orig. delta maggiore op. non riuscite/tot. %% errore
SRV-dc1 47m:02s 0 / 5 0
SRV-dc2 45m:07s 0 / 5 0

DSA di destin. delta maggiore op. non riuscite/tot. %% errore
SRV-dc1 45m:07s 0 / 5 0
SRV-dc2 47m:02s 0 / 5 0

C:\WINDOWS\system32>repadmin /queue

Repadmin: esecuzione del comando /queue sul controller di dominio completo SRV-dc1.dominio.net
La coda contiene 0 elementi.

Windows for business | Windows Server | Directory services | Deploy group policy objects

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Anonymous
    2023-10-23T06:48:32+00:00

    Hello chandler1408,

    Thank you for posting in Microsoft Community forum.

    1.How many Domain Controllers are there in your domain?

    2.Please run repadmin /showrepl * /csv >c:\repsum.csv on PDC and check the result**.**3.Did you put the user account into the OU that linked the GPO?

    4.Check the GUID folder about this GPO is in \domain.com\SYSVOL\domain.com\Policies folder.

    5.For checking User Configurations within gpresult, we can follow steps below.

    5.1Logon the machine using normal domain user account (the user account within the OU and the group you mentioned).

    5.2Create a folder named F1.

    5.3Open CMD (do not run as Administrator).

    5.4Type gpresult /h C:\F1\gpo.html and click Enter.

    5.5Open gpo.html and check drive map gpo setting under "User Details".

    I hope the information above is helpful.

    If you have any question or concern, please feel free to let us know.

    Best Regards,
    Daisy Zhou

    0 comments No comments