This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 9%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
We use RDWeb for access and there are two policy settings we must set to Disabled for them to work.
Admin Templates - System - Remote Procedure Call - "Enable RPC Endpoint Mapper Client Authentication" and "Restrict Unauthenticated RPC Clients"
I have these set to Disabled in GPO and it is applying. Yet for some reason something is setting them back to "Enabled" in local gpedit. Whatever is setting them is random, yet I know it is not a user manually doing this. I am trying to find out what process might be the culprit.
I will also note, these originally were set to "Enabled" with lgpo when building the machine. I was under the impression GPO should always override local policy. Is that still true with anything imported via lgpo?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(96, 62%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDZ%3C/text%3E%3C/svg%3E)
Hello mginster-0346,
How are things going on your end? Please keep me posted on this issue. I appreciate your time and efforts.
Your time is greatly appreciated.
Best Regards,
Daisy Zhou
============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Hello mginster-0346,
Thank you for posting in our Q&A forum.
1.What did you mean "anything imported via lgpo"?
2.Would you please check whether any other local policy is applying over domain GPO? Or only the following two domain GPO settings is applying over domain GPO?
Admin Templates - System - Remote Procedure Call - "Enable RPC Endpoint Mapper Client Authentication" and "Restrict Unauthenticated RPC Clients"
If the two local group policies and other local policies are all applying over domain GPO, maybe it is related something imported via lgpo.
If only the two local group policies you mentioned are applying over domain GPO, I suggest you can try to troubleshoot the issue using process monitor and analyze what process changes the setting.
https://learn.microsoft.com/en-us/sysinternals/downloads/procmon
Hope the information above is helpful.
Best Regards,
Daisy Zhou
===============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.