This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 13%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EZ%3C/text%3E%3C/svg%3E)
Hi, I would like to know why my changes to Advanced Audit Policy Configuration in a GPO attached to an OU are not being applied to member servers (running windows server 2016)? I have done everything to check what's going on but I always see local group policy as the wining policy for this setting, but all other changes are successfully applied on the local GP.
auditpol.exe /get /category:* shows me totally different settings than what I have in my GPO gpresult /H c:\gpresults.html and shows me that for advanced auditing the local policy is winning Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings 
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 96%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFF%3C/text%3E%3C/svg%3E)
Hi,
To know the issue more clearly, would you please right click the GPO to save the GPO report and share a screenshot of it？
Also a screenshot of the gpresults.html
Please hide the private information.
Best Regards,
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 80%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETB%3C/text%3E%3C/svg%3E)
Hi,
Check if there is a WMI or group filter set on the GPO.
run the following command to get more details about all GPO settings and filters applied on the server.
gpresult /H c:\gpresult.html
Please don't forget to mark this reply as answer if it help you to fix your issue
@Thameur-BOURBITA Thank you for the response.
Actually I don't see any filters except on one GPO that has nothing configured related to what im doing, and its not my GPO that im testing.
I have snapshots of the gpo report that I can share, but something interesting im seeing that I haven't checked before is on the local GPO under Extensions Configured I see Audit Policy Configuration and with my basic understanding of GPOs could this be something related to my issue and overwriting my GPO ?
The local would be applied earlier then the domain GPOs.
So if there are conflicts , the domain GPOs would overwriting the local policy.
@Fan Fan this is exactly what is not happening in my case.
No matter what changes I do in the domain GPO advanced audit policy its not overwriting local.
Thats why I mentioned in my response above that the only thing I see on the local GPO is that extension configuration, set to Audit Policy Configuration, and wanted to know if thats something related to my issues in this case ?
I have attached a screenshot
Hi,
In this situation ,I would recommend you enable the GPSVC to check why the domain GPO failed to apply.
https://blogs.technet.microsoft.com/askds/2015/04/17/a-treatise-on-group-policy-troubleshootingnow-with-gpsvc-log-analysis/
Due to security reason, it is not suggested share the log here!
Best Regards,