Group Policy not deploying MSI Softwares

Question

Dears,
I have Windows server 2008 and 2012. end-users used Windows 10.
Windows 2008 was the primary domain controller. I have transferred the 5 Roles to Windows 2012.
I have a problem with deploying MSI software via GPO. sometimes it is showing the below.

Computer policy could not be updated successfully. The following errors were encountered:

The processing of Group Policy failed. Windows attempted to read the file \ abc.local \SysVol\ abc.local \Policies{D3F169CD-E34A-4BD6-A21B-2F5D43C50B06}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
User Policy could not be updated successfully. The following errors were encountered:

The processing of Group Policy failed. Windows attempted to read the file \abc.local\SysVol\abc.LOCA\Policies{E0FDFD88-F54A-4BC2-B37A-9EEA2C1993C6}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.

I ran this command GPRESULT /H GPReport.html and did not find the policy created on the applied policies.

or showing the below error on the users' PCs

The Group Policy Client Side Extension Software Installation was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance.
User Policy update has completed successfully.

or showing the below error on the users' PCs
can't connect to the file share because it's not secure. This share requires the obsolete SMB1 protocol, which is unsafe and could expose your system to attack.
Your system requires SMB2 or higher. For more info on resolving this issue, see: https://go.microsoft.com/fwlink/?linkid=852747

I have tested the replication between Domains by replication tool, it is working without any issues this on both servers.

Answer 1

Please run;

Dcdiag /v /c /d /e /s:%computername% >C:\dcdiag.log
repadmin /showrepl >C:\repl.txt
ipconfig /all > C:\dc1.txt
ipconfig /all > C:\dc2.txt

then put unzipped text files up on OneDrive and share a link.

Answer 2

Hi,
As the error message mentioned above, following advice for your reference:
1, Check the DNS configuration on the clients and DCs, you can run command: ipconfig /all to check the result.
2, If the AD replication is good, we can confirm if the SYSVOL replication is good. Check if the {D3F169CD-E34A-4BD6-A21B-2F5D43C50B06}\gpt.ini file is existing on both the DCs.
Or try to create a file on one DC and check if it will replicate to the other one.
3, Check if the network connection is good.
If there are any progresses, welcome to share here!
Best Regards,

Answer 3

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--