Share via

Weird experience with GPO

Janus Bariñan 1,126 Reputation points
May 17, 2021, 11:21 AM

Hi,

I have 3 problems when implementing Group Policy

  1. Not all computer configurations are applied to the target machine even if there is no conflicting gpo.
    In this case sometimes it appears, and at other times it suddenly disappears in the target machine.
  2. The entire Advance Audit Policy suddenly disappears.
    At first the Advance audit policies appeared on the target machine. But as I continually do gpupdates and reboot to apply the other policies it suddenly disappear and no matter what I do (create new policies, move the target machine to an out without policy then move it back again) it no longer appears on the target machine.
    Configured in the group policy object:
    97147-image.png

No longer appears on the target machine.
97077-image.png

  1. In the GPO a computer policy is set as enabled, but when the gpo is applied to the target machine that policy is becomes disabled. Clearly the opposite of what was set in the gpo.

Enabled in GPO:
97114-image.png
97115-image.png

Has opposite value on the target machine:
97125-image.png
97201-image.png

There is no conflict with other GPOs as seen also in the winning GPO, the winning GPO is the one with the correct value.

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
5,548 questions
{count} votes

Accepted answer
  1. Janus Bariñan 1,126 Reputation points
    May 31, 2021, 2:36 AM

    Hi Sorry for the late response.

    What I just did was re-created the GPOs from scratch. While there were still some policies that exhibited the weird behavior, what I did was created a registry equivalent of the GPO.

    Thanks!


2 additional answers

Sort by: Most helpful
  1. Fan Fan 15,351 Reputation points Microsoft Vendor
    May 18, 2021, 12:42 AM

    Hi,

    If possible, would you please share a screenshot of the gpresult?
    Run the CMD as administrator and run command: gpresult /h c:\report.html.

    If there are not conflicts and error in the output of the gpresult, we may need to get more information using the gpsvc log.
    For how to use enable and find the gpsvc log, you can refer to the following link:
    https://blogs.technet.microsoft.com/askds/2015/04/17/a-treatise-on-group-policy-troubleshootingnow-with-gpsvc-log-analysis/

    Sorry that we can provide log analysis due to the rule and security reason.
    If there are any clues, you can share a screenshot here!

    Best Regards,

    0 comments No comments

  2. Fan Fan 15,351 Reputation points Microsoft Vendor
    May 18, 2021, 12:42 AM

    Hi,

    If possible, would you please share a screenshot of the gpresult?
    Run the CMD as administrator and run command: gpresult /h c:\report.html.

    If there are not conflicts and error in the output of the gpresult, we may need to get more information using the gpsvc log.
    For how to use enable and find the gpsvc log, you can refer to the following link:
    https://blogs.technet.microsoft.com/askds/2015/04/17/a-treatise-on-group-policy-troubleshootingnow-with-gpsvc-log-analysis/

    Sorry that we cannot provide log analysis due to the rule and security reason.
    If there are any error messages, you can share a screenshot here!

    Best Regards,


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.