Group Policy - some settings not being applied

David Zemdegs 1,561 Reputation points
2023-03-06T00:28:49.11+00:00

Hi,

We have an issue with our 'Default Domain Policy'. For some computers, all settings in that policy are being applied. For other computers, only some of the settings are being applied. For the latter, GPResult shows that the policy is applying and looking at the settings it lists some settings having the 'Winning GPO' as the Default Domain Policy but not all settings from the Default Domain Policy are applied. We have tried to clear the GP cache and even removed and re-added the computer account to the domain. None of these fixed the issue.

Please note: All computer accounts are in the same OU and are Windows 10. The Default Domain Policy has no filters and is applied to Authenticated Users.

Thanks

David

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,731 questions
0 comments

6 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. JimmySalian-2011 41,916 Reputation points
    2023-03-06T11:56:58.7066667+00:00

    @David Zemdegs can you export the GPresult /V output and check the settings if they are applied and the ones that are missing share the export here? Also you can completely reset the GP settings to default check this - https://www.windowscentral.com/how-reset-local-group-policy-objects-their-default-settings-windows-10

    Were these machines upgraded or migrated from another domain? Did you tested with a new build of Windows 10 to confirm if the policies are deployed?

    Hope this helps.

    JS

    ==

    Please accept as answer and do a Thumbs-up to upvote this response if you are satisfied with the community help. Your upvote will be beneficial for the community users facing similar issues.

    0 comments
  2. JimmySalian-2011 41,916 Reputation points
    2023-03-06T11:57:00.17+00:00

    @David Zemdegs can you export the GPresult /V output and check the settings if they are applied and the ones that are missing share the export here? Also you can completely reset the GP settings to default check this - https://www.windowscentral.com/how-reset-local-group-policy-objects-their-default-settings-windows-10

    Were these machines upgraded or migrated from another domain? Did you tested with a new build of Windows 10 to confirm if the policies are deployed?

    Hope this helps.

    JS

    ==

    Please accept as answer and do a Thumbs-up to upvote this response if you are satisfied with the community help. Your upvote will be beneficial for the community users facing similar issues.

    0 comments
  3. David Zemdegs 1,561 Reputation points
    2023-03-06T20:43:37.55+00:00

    We are a highly secure organisation so cannot export anything publicly.

    I cannot see how resetting the local policies will help as they are domain based. And this may affect hundreds of machines so it is impractical.

    Machines were never migrated from another domain. the lack of policy application is completely random. Some machines get the whole policy - some not. Some are new, some are old. It is very difficult to get an idea of exactly which machines are affected and which are not.

    0 comments
  4. Limitless Technology 43,926 Reputation points
    2023-03-07T08:11:15.8633333+00:00

    Hello

    Thank you for your question and reaching out. I can understand you are having query\issues related to some GPO settings are not getting applied.

    1. Please verify Date and time should be synced with ADC.
    2. Please check AD replication health is Good and all Domain DCs are synced.

    Repadmin /replsummary

    Repadmin /Showrepl

    Repadmin /syncall

    1. From that client computer please check if sysvol folder data exist

    \domain\SysVol\domain\Policies{GPO GUID}\

    1. Please check on the Client Computer event logs for GPO errors.
    2. Disable fast start up from client PC

    Powercfg -h off

    --If the reply is helpful, please Upvote and Accept as answer--

  5. Thameur-BOURBITA 32,496 Reputation points
    2023-03-07T23:22:20.8033333+00:00

    Hi @David Zemdegs

    Did you have the same GPO report gpresult on all impacted computer ?

    You should see winning GPO which help you to understand which GPO manage each setting.

    Did you try use another GPO(by importing settings from Default domain policy and linked to root level) instead of Default domain policy to check if you still the same behavior ?

    Please don't forget to mark helpful answer as accepted