GPO name is there but it settings are not applied

Boopathi S 3,391 Reputation points
2020-11-12T21:29:50.627+00:00

Hi,

  1. I got an issue that expected GPO settings are not applied in the particular country Active directory OU computers.
    I used gpresult /r /scope:computer command and see the GPO name. But its settings are not applied.
  2. Few scripts configured to run at Startup of the computer. How do i check whether it executed or not
  3. How do i check whether network/firewall is blocking the GPO settings to apply. Because i get request time out when ping the computer name or its IP address.

Please help

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
5,389 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Hannah Xiong 6,276 Reputation points
    2020-11-13T02:37:16.86+00:00

    Hello,

    Thank you so much for posting here.

    1, As for the GPO not applied, we could run gpresult /h C:\report.html (run CMD as administrator) to get a detailed group policy result report, then check if the specific setting get applied or not. Besides, we could also check whether there is any error message.

    In addition, have we checked whether the registry entry and value corresponding to the GPO setting are changed or not?

    2, So, we configured the computer startup script via GPO, right? First check whether the configuration is correct, and then check whether the GPO is applied or not as mentioned above. Last we could see whether the script is executed on the clients.

    3, For the firewall port requirements for group policy, we could refer to the below:

    https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj572986(v%3Dws.11)

    To further troubleshoot, we would like to get more information from you.

    1, Only the startup script GPO is not applied, right? Other GPOs could be successfully applied to the computers, right?
    2, The startup script GPO is not applied to specific computer or all the computers?
    3, When we run gpupdate /force on the computer on which the GPO is not applied, is there any error message?
    4, On the computer where the GPO is not applied, if we ping the domain name or the DC IP address, what are the outputs?

    39515-3.png

    5, If possible, May I know more about the startup script and the computer version information on which the GPO is not applied?

    For any question, please feel free to contact us.

    Best regards,
    Hannah Xiong

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

  2. Hannah Xiong 6,276 Reputation points
    2020-11-23T05:29:57.743+00:00

    Hello @Boopathi S ,

    Thank you so much for your kindly reply.

    To troubleshoot group policy, we could refer to the below document:
    https://learn.microsoft.com/en-us/archive/blogs/grouppolicy/troubleshooting-group-policy

    As mentioned before, we could run gpresult /h C:\report.html (run CMD as administrator) to get a detailed group policy result report, then check if the specific setting get applied or not. Besides, we could also check whether there is any error message.

    If we could get the group policy names in the gpresult, we could then check whether the corresponding registry entries and values based on the above policy settings are changed (If there are corresponding registry entries and values).

    May I know more information about the GPO settings not being applied? For group policy, the user and/or computer should be part of the site/domain/OU to which this Group Policy Object is linked.

    For any question, please feel free to contact us.

    Best regards,
    Hannah Xiong

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.