Hi TechNet Community,
I am currently running into a roadblock with Group Policy, and I am unsure exactly what might be causing the problem.
Domain Level Server 2012 R2
Windows 7 Professional Clients
When I run GPUpdate /force from an elevated command prompt, I receive this error:
When I run Resultant Set of Policy (rsop.msc), I receive this error only on the User Configuration GPO section:
Tuesday, January 24, 2017 2:02:36 PM
Group Policy Infrastructure failed due to the error listed below.
The data is invalid.
Note: Due to the GP Core failure, none of the other Group Policy components processed their policy. Consequently, status information for the other components is not available.
I researched this error, I found that this could be a result of improperly configured DNS servers configured on the domain controllers. Sure enough, I had configured the alternative DNS servers to point to 127.0.0. But t changing these to the private IP addresses of the local DC did not resolve the issue.
I then looked within the properties of User Configuration of RSOP to see which policies have applied, and policies that have not, and found that there are two GPOs that have been deleted, but are still being applied. And the GPOs that are under the red box annotation are shown to have a linked scope to the domain within RSOP, but they are currently not linked to the domain, and are only linked to OUs.
I confirmed that these stale GPOs are being applied to every other user on our domain.
I have attempted to recreate these User Configuration GPOs in attempts to eliminate the stale, tattoo’d GPO that is still being applied.
I have tested that SYSVOL DFS-R replication is healthy, via the DFS-R propagation and reporting tools on the domain controllers, but that the replication time is 39 minutes from one of our remote AWS domain controllers. As well as I used the AD Replication Status Tool to ensure that replication has no errors among domain controllers. DCDIAG throws an error for the SystemLog, but I believe that is unrelated.
I have since also ensured that the replication topology is in a good state based upon our network infrastructure, and have tested a manually replication task within AD Sites and Services.
Thank you for your assistance in advance!
Gpresult /v is too long to post in this.
Daniel Scoland Windows 7 Professional SharePoint 2010 Microsoft Office 2010