I have a 2012 R2 DC1 and a Server 08 R2 standard secondary DC, I inherited a bear of a GPO with most policies in the default domain policy and 31 other policy objects, all set to enforced and working against each other. Also all are deployed domain wide with everyone in the same OU.
Here's the rub, I'm trying to setup encrypted backups, the GPO setting for fixed drives using bitlocker with smartcards had been set to enabled, I disabled it. I then waited about a day and ran an RSOP on our backup server and saw it still says the smartcard policy is enabled. However if I run a RSOP on the DC it says disabled following the same GPO. Tried running a RSOP on the secondary DC and it shows up as enabled as well. Something isn't allowing it to replicate, tried doing gpupdate, gpupdate /force and reboots of all three machines with no difference. Any ideas???