I'm having a problem with group policy

Kevin Cornett 31 Reputation points

I have policy set to add "NT SERVICE / ALL SERVICES" to the "Log on as a service" on all domain computers and member servers. This has always worked and I've never had an issue... until today. I logged on to one of our member servers running WSUS and found I could not load WSUS. I looked at services and saw the WID service was not running due to a log on failure. I look in "log on as a service" and I see NT SERVICE / ALL SERVICES is not there. I look on my own computer, and it's not there. I then log on to another server running WSUS that just happens to be a DC, and WSUS loads fine. The "ALL SERVICES" is in "log on as a service" on that server. I then check all other WSUS servers. On all which are DCs, WSUS loads fine. On all which are member servers, WSUS fails to load.

Member servers of course have different domain policy from DCs. I looked in security policy for domain computers and servers, and the "ALL SERVICES" is in there, so it SHOULD be propagating to all computers and member servers. Only for some reason it isn't. Forcing a group policy update has not effect. Something has screwed us up, and I have no idea what it could be. What could cause something to actually be in policy, but not be pushed out?

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,085 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Amandayou-MSFT 11,046 Reputation points

    Hi @Kevin Cornett

    We could run it command using administrator and without administrator(Just open the cmd an run it):
    gpresult /h c:\test\report.html

    And then we will get two different results, please show the results. (Please erase privacy)

    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.