Windows could not apply the registry-based policy settings

Question

i have 2 Domain controller 2016 after I restore DC1 from backup and it's running ok but when i run Gpupdate/force on client /Servers workstation i got below error
** Windows could not apply the registry-based policy settings for the Group Policy object LDAP://CN=Machine,CN=xxxxxxxx **

Answer 1

Hello

Thank you for your question and reaching out.

1. Ensure the registry.pol file exists in the location and has the same permissions as the gpt.ini file in the same Group Policy object (GPO).
2. Ensure Sysvol replication is working properly on domain controllers.
3. Delete the GPO and recreate it.
4. repadmin /showrepl * /csv >showrepl.csv

If above steps does not work then follow below steps.
check the last modified date of the following file:

C:\Windows\System32\GroupPolicy\Machine\ Registry.pol
(note: GroupPolicy is a hidden folder, you may need to enable hidden folders to navigate to this path)

Almost for certain, the last modified date will be a long time ago (or at least earlier than “today”). If this is the case, delete the file REGISTRY.POL, and run “gpupdate /force” from a Command Prompt. This forces the group policies to re-apply. Problem solved :

https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc727302(v=ws.10)?redirectedfrom=MSDN

-------------------------------------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--