Why isn't my new Group Policy Object applying to users?
Asked by
TechSavvy42
I recently created a new Group Policy Object (GPO) aimed at adding a printer for user configurations. This GPO is applied to our users' Organizational Unit (OU) and has enforcement enabled. There's no security filtration in the way—Authenticated Users have been granted the necessary permissions to read and apply the settings.
While using GPO Modeling, it shows that the GPO should be applied without a hitch. However, when I log into the test computer with a user account, the printer doesn't appear, and running 'gpresult /h' doesn't show the GPO applied or denied under user settings.
I've checked that the GPO is present in our sysvol folder, and there are no relevant errors in the Application & Security logs on the computer. Plus, when I check Application & Services under Windows Group Policy Operational, I can see other GPOs being downloaded at logon, but not this new one.
All diagnostics from the Domain Controllers reflect that there are no DFS or replication issues. I'm at a loss about what I might be doing wrong here.
Answers
Have you tried running a 'gpupdate /force'? Sometimes group policy changes can get cached, and a refresh might help. If that doesn't work, consider trying another test machine or even rebuilding the one you're using.
Reply to this answer
Double-check the permissions related to the GPO. Even if you think it should be correct, verify that the Domain Computers group has read access to it. For additional troubleshooting, running a Resultant Set of Policy (RSoP) can also provide helpful insights.
Reply to this answer
It's important to run gpresult for user policies while logged in as that user. Use 'gpresult /r' after a 'gpupdate /force' to check for any errors. Sometimes issues arise from not being connected to the right VLAN or not having access to the necessary DNS servers. Also, confirm that the printer you're trying to add is on a print server with the correct V4 drivers to avoid installation issues.
Reply to this answer
If you have multiple Domain Controllers, make sure to check that the GPO is properly present in the local sysvol of each one. Sometimes replication issues can cause problems like this.
Reply to this answer
Make sure that when you run the gpresult command, it's executed from an admin command prompt. And when you're using the '/h' flag, remember to specify a destination for the report, like this: 'gpresult /h C:GPO_Report.html'. That could be why you're not seeing the output you're expecting.
Reply to this answer
Add your answer
Answers are reviewed before publication.
Related Discussions