I always force replication when working with GPs, makes testing that much faster, as well as running gpupdate on the client side.
Don Guyer Systems Engineer - Information Services Prudential, Fox & Roach/Trident Group 431 W. Lancaster Avenue Devon, PA 19333 Direct: (610) 993-3299 Fax: (610) 650-5306 [email protected] <mailto:[email protected]> From: Ken Schaefer [mailto:[email protected]] Sent: Monday, January 04, 2010 4:24 AM To: NT System Admin Issues Subject: RE: simple gp issue Computer and User GPOs can be applied separately (as they occur at different times in the startup cycle) Running gpupdate /force should force both to be updated at the same time. However, if machines are getting policies from different DCs, and replication hasn’t occurred yet, then differing results can be expected at the client end. Running gpresult won’t necessarily tell you (as that tells you GPOs that have been applied only). Running RSOP.msc on the clients should tell you effective settings applied, and which DC the settings are coming from. If replication hasn’t occurred, troubleshoot replication issues (AD, and Sysvol/FRS) Cheers Ken From: Richard Stovall [mailto:[email protected]] Sent: Friday, 1 January 2010 2:40 PM To: NT System Admin Issues Subject: RE: simple gp issue Ah yes. That could explain it. I wonder if Computer and User policies are applied/updated independently of one another. If that’s the case, and round robin is enabled, it might explain what you’re seeing. Maybe one of the heavy hitters here can tell us for sure. Once your updated GPOs replicated to the DC in the other site did you see the expected behavior? From: Paul Everett [mailto:[email protected]] Sent: Thursday, December 31, 2009 4:20 PM To: NT System Admin Issues Subject: RE: simple gp issue Thanks for that. Seems like I neglected to mention that I have another Domain Controller at another site and the User settings were being applied from there. Interesting though that my Computer settings were from one DC and the User settings from the other. Appreciate the help. Happy New Year to you. Paul ________________________________ From: Richard Stovall [mailto:[email protected]] Sent: Thursday, December 31, 2009 3:39 PM To: NT System Admin Issues Subject: RE: simple gp issue After running gpupdate, you can run “gpresult /z > output.txt” and examine the resulting file to see if your policies are being applied correctly. From: Paul Everett [mailto:[email protected]] Sent: Thursday, December 31, 2009 3:28 PM To: NT System Admin Issues Subject: simple gp issue I hope this is simple. I made an Intranet webpage everyone’s home page using my domain group policy. The problem is some people are getting it and some aren’t. All users are in the same OU and all computers are in the same OU (only the Domain policy applies to each). I tried gpupdate /force locally on the computers, but this works on some and not others. Is this just a waiting game, or is there another issue. I thought “gpupdate /force” would be the end all. Thanks, Paul Everett IS Dept. Lee Mental Health Center ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
