Hello Everyone,
We have recently run into some issues with user group policies not applying or only applying about 25% of the time on computers running windows 10 and was hoping to get some ideas on what could be causing the issue. This had originally been working fantastic for the past year or so and we have not added any new GPOs recently.
The computers are all running windows 10 v1809 or 1909 and are fully patched.
We have seen 0 issues with computer configuration policies.
When looking at the event logs on the computers we are seeing the following:
\*\SysVol*\Policies{4F74ECA8-0EE9-4834-9B6B-313206B0702A}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
If we run a gpresult it tells us “The user does not have RSoP data”
But
When the user policies don’t apply, we are able to run gpupdate /force and it successfully applies the user policies that failed originally.
We have done the following.
- Verified we can navigate to the Sysvol folder mentioned in the error log.
- Ran health checks on DCs, dcdiag, tested DNS, and haven’t experienced any errors.
- Verified DFS is running.
- Restarted DFS NameSpaces and DFS replication services.
- Moved users and computers to different OUs and had the same results.