Quantcast
Channel: Group Policy forum
Viewing all articles
Browse latest Browse all 19997

New GPO - inaccessible, empty or disabled - 2012 Domain - applied to W7 computer

$
0
0

Can anyone tell me what I can do to fix my new GPO not arriving on my W7 or W10 computers?

2012 Domain (with one 2008 DC in the mix)

New group policy apx 2 days old is a user config setting:  Disable WPAD
(unchecks the Automatically Detect Settings in IE, Connections, LAN ....via reg file)

The group policy results wizard on the Summary tab of gpmc.msc, reports this and all other policies are Inaccessible, Empty or Disabled. (there is no version mismatch seen indicating a replication problem)

This report is rather incorrect as the older group policies are applying fine, when checked on the target PC.  ie my mapped drives are there, document redirection etc.

This same report on the details tab shows all the attempts I have made to get it to apply by adding different groups to the security filtering:

ie: it reflects what is seen in the GPO object view Delegation tab correctly:
Authenticate Users - read
CG-Laptops - read (computer group of which the target is a member)
Domain Users - read
and edit for the more privileged users such as domain admins etc

This same report on the policy event tab logs repeatedly: Security policy in the Group policy objects has been applied successfully.

From the target PC I ran gpresult /H and the output shows 13 policies applied, when 14 are set on this Test OU in AD.
Of course the one missing is the Disable WPAD policy.
The local output also has mistakes in reporting: it reports under component status that my policy to map drives did not complete due to the user needing to log off and back on again...well the mapped drives are all there an working.

I have reviewed MANY blogs and suggestions on this problem to no avail.

Some people believe this problem is related to recent security vulnerabilities that MS patched for group policy.

I believe I am losing my patience with this non-sense.

Please can someone suggest something logical ?

thanks

Andy



Viewing all articles
Browse latest Browse all 19997

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>