Trying to troubleshoot a GP related issue wehre it appears workstations (Win 7 Enterprise) aren't getting the lastest group policy changes. It does appear to get them at some point after a arbitrary time period (two or three weeks) but that's insane.
- Have verified with GPMC (connecting to each DC individually) that all four DC's (W2K8 R2) are running the same newer version; no replication errors. Would run GPOtool but google suggests it has problems with W2K8 R2.
- No errors are showing up on the workstation or DC logs (both logs\winlogon and Event Viewer->Group Policy)
- gpupdate /force runs with no errors
- gpresult and rsop both complete with no errors BUT shows the OLD GP version settings as applying.
- No error show up when the following undocumented (as far as I can tell) debug is also enabled: [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Diagnostics\"GPSvcDebugLevel"=dword:00030002
My gut is telling me the problem is client side and the GP's aren't being pulled/repliacted/whatever to the workstation in a timely manner (reboot, gpupdate /force, etc) but not sure how to troubleshoot this any further.
BTW while I havent' been able to confirm it, it only appears to affect GP versions when I only either update an admin template setting OR an advanced FW settings.