SCCM and Group Policy Issues

Question

We have been having some issues with Group Policies being applied and I believe the issue is related to the SCCM agent. Specifically, Folder Redirection settings, which I've read can be caused by this option. I’ve disabled the option, but the issue has been persisting.

I believe this option is tied to this registry key, but I could be wrong. This key appears on the machines with the issue. I've tried changing the value to 0 but after a reboot or a gpupdate /force the registry key comes back. Since it's under the CCM Key I believe it has to do with the SCCM agent. I've attempted to remove the CCM Agent but the key persists.

I'm hoping someone can point me in the right direction.

Answer 1

Hi, @Vincent Sprague

Thank you for posting in Microsoft Q&A forum.

I believe you have read this article for the solution:

https://learn.microsoft.com/en-us/troubleshoot/windows-server/group-policy/folder-redirection-group-policy-not-applied

You may need to configure the "Enable compliance evaluation on clients" to Yes and "Enable User Data and Profiles" to No.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".

Answer 2

So I've figured out a part of the mystery. The "EnableGroupPolicySideExtension" registry key is coming from this local Group Policy setting.

For some reason the SCCM agent failed to revert this setting on this machine. Even after removing the agent entirely. Unfortunately even after changing this back to "Not configured" Folder Redirection is still not working. So it is possible something else is causing an issue on this machine.

The MDM policy was pulled and is no longer applied from AD so I'm not sure why warning keeps popping up. When I run a gpresult report I see this.

For further clarification, I have several machines in a test ou. Not all of the machines have an issue with Folder Redirection and with at least a couple it appears that removing the setting in SCCM did work. So at this point I think there is something else on these workstations that is causing issues with group policy. This MDM error is the only other issue I'm seeing evidence of in the event logs at this point. So I'm assuming it is at least related to the overall issue.