Help troublshooting group policy not applying on Dell laptops

acenyc 81 Reputation points
2021-09-29T18:57:30.917+00:00

I have a test network that I am using to teach myself group policy. I am using a Dell latitude 6410 laptop as the client machine. The laptop is joined to the domain, the laptop can access the sysvol folder and all of the subfolders and users can login to their accounts. The problem is, none of the group policies are applying to the user on the laptop. The group policies are all user policies. I have been troubleshooting this problem for a week with no luck. I have decided to clear all the gpo's from the client computer with this method. 

Open My Computer / Computer
In the URL or address bar paste: %windir%\system32\GroupPolicy.
Right click and delete the: Machine and User folders to clear local group policy cache.
Restart the computer to reapply the group policies.

When I get to the group policy folder, it only contains the DATASTORE folder. There is no MACHINE and USER folder there for me to delete. The DATA STORE folder contains a folder named 0. Inside of that folder is the SYSVOL folder and all of the sub folders. How can I fix this error? It may be the cause of the GPO's not applying.
I also captured the gpsrvc log file from the client machine. It's too large to add the post, so I have a gdrive link posted. Can someone take a look at the log. I am trying to teach myself how to analyze the gpsrvc logs, but I'm still not understanding it.
any help will be greatly appreciated
This is the log file link:

https://drive.google.com/file/d/1Z-BJ1P9xgLFWbjJNybh3vRO2j1-mkhDp/view?usp=sharing

Thank you.

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,724 questions
0 comments
Accepted answer
  1. Pavel yannara Mirochnitchenko 11,616 Reputation points
    2021-09-29T20:22:09.233+00:00

    Okay so you are studying this from a beginning. That shouldn't be so hard, I think you are poking in the wrong direction. There are two good and simple troubleshoting method I use for GPO,

    1. GPO results in GPMC console
    2. gpresult /H c:\temp\gpo.hmtl (run as admin from client machine)

    Also, make sure you have linked GPO to the right OU.

    0 comments

6 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. acenyc 81 Reputation points
    2021-09-29T21:06:26.213+00:00

    Thank you very much for helping. I am running GPO result /r from the client laptop, and in the applied group policy objects section, it shows only the print GPO is being applied. The print gpo is a gpo that deploys printers to users based on user group, and it is working. The printers are being deployed to users based on user group. The print GPO is linked at the domain level.
    What do you mean by:

    GPO results in GPMC console

    All the GPO's that are not working, are linked to OU's with the users in them. I have created the gpo.html file. I am in NYC and I must leave the office now for covid cleaning. I will send you the GPO html file first thing in the morning.
    Thank you again.

  2. Pavel yannara Mirochnitchenko 11,616 Reputation points
    2021-09-30T10:06:22.717+00:00

    Try to use this, but it require live remote connection and proper rights.

    136598-image.png

    0 comments
  3. acenyc 81 Reputation points
    2021-09-30T15:31:24.473+00:00

    Thank you again. I figured out how to run the group policy result from the gpmc. I want to post a screen shot of the output of one the users logged in to the laptop, but it's too big to fit in one screen shot. Is there a way I can save the output as a text file?

    This is a screen shot of my GPMC. None of the gpo's that are linked to OU's with the users in them are applying

    136686-cli-srv-gpo.png

    This is a text file of gpresult from the client laptop

    Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
    c Microsoft Corporation. All rights reserved.

    Created on ?9/?30/?2021 at 11:13:05 AM

    RSOP data for PHOTONICS\plagac on PHOTONICS06 : Logging Mode

    -------------------------------------------------------------

    OS Configuration: Member Workstation
    OS Version: 10.0.19042
    Site Name: Default-First-Site-Name
    Roaming Profile: N/A
    Local Profile: C:\Users\plagac
    Connected over a slow link?: No

    COMPUTER SETTINGS

    ------------------ 

    CN=PHOTONICS06,OU=Workstations,OU=photonics,DC=photonics,DC=org  
Last time Group Policy was applied: 9/29/2021 at 4:49:33 PM  
Group Policy was applied from:      photonics-dc02.photonics.org  
Group Policy slow link threshold:   500 kbps  
Domain Name:                        PHOTONICS  
Domain Type:                        Windows 2008 or later  

Applied Group Policy Objects  
-----------------------------  
    Enable NTP clients GPO  
    Default Domain Policy  

The following GPOs were not applied because they were filtered out  
-------------------------------------------------------------------  
    Local Group Policy  
        Filtering:  Not Applied (Empty)  

The computer is a part of the following security groups  
-------------------------------------------------------  
    BUILTIN\Administrators  
    Everyone  
    BUILTIN\Users  
    NT AUTHORITY\NETWORK  
    NT AUTHORITY\Authenticated Users  
    This Organization  
    PHOTONICS06$  
    Domain Computers  
    Authentication authority asserted identity  
    System Mandatory Level

    USER SETTINGS

    -------------- 

    CN=Clay Plaga,OU=IT,OU=photonics,DC=photonics,DC=org  
Last time Group Policy was applied: 9/29/2021 at 3:42:17 PM  
Group Policy was applied from:      photonics-dc02.photonics.org  
Group Policy slow link threshold:   500 kbps  
Domain Name:                        PHOTONICS  
Domain Type:                        Windows 2008 or later  
  
Applied Group Policy Objects  
-----------------------------  
    print  
    Default Domain Policy  

The following GPOs were not applied because they were filtered out  
-------------------------------------------------------------------  
    Local Group Policy  
        Filtering:  Not Applied (Empty)  

The user is a part of the following security groups  
---------------------------------------------------  
    Domain Users  
    Everyone  
    BUILTIN\Users  
    BUILTIN\Administrators  
    NT AUTHORITY\INTERACTIVE  
    CONSOLE LOGON  
    NT AUTHORITY\Authenticated Users  
    This Organization  
    LOCAL  
    IT  
    Domain Admins  
    Authentication authority asserted identity  
    Denied RODC Password Replication Group  
    High Mandatory Level

    The only gpo that is working is the print gpo, linked at the domain level. The correct printers are being deployed for every user on every laptop. I am 99% sure that all of the gpo settings are correct. There's something else that's causing the gpo's to fail to deploy. I will send any additional information you need.
    Thank you.

    0 comments
  4. Pavel yannara Mirochnitchenko 11,616 Reputation points
    2021-09-30T19:28:37.22+00:00

    Yep, crystal clear what is wrong. Your user and GPO are placed in different locations;

    USER > OU=IT,OU=photonics,DC=photonics,DC=org
    GPO -> OU=cli srv,OU=photonics,DC=photonics,DC=org

    0 comments