Gpresult Appear In Other Group
Greetings, I'm trying to figure out what is going on and it's driving me crazy!I have a few GPOs that are not applying to users and they are not showing up in any of the logging (GpSvc.log), GPRESULT, RSOP or anything else. About the only place they show up is in the GPMC and in the Sysvol. I've taken the following steps to try and figure out what's going on:1. Create test user within the OU that I have a GPO linked to that I'm trying to apply1a. Even tested with blocking inheritance on the OU to limit the amount of GPOs that would be shown.2. Added user explicitly to Security Filtering3. Added the user to delegation with Read explicitly (even though it's in groups that it applies to like Authenticated users)4.
No WMI filters applied5. I have logged on as the user and browsed to the GPO folders in the sysvol successfully opening files within that folder.GPO/OU information: OU is user OU. GPO has user settings and loopback enabled for replace. The GPO status is enabled (neither user or computer disabled). User logs onto citrix or workstation that are in different role based OUs.
Jun 4, 2014 - Group Policy – GPResult Examples. GPResult is a command-line utility for determining the resultant set of policy for a given user and/or computer. In other words, it shows you what Group Policy Objects have been applied and their settings.
Gpresult Computer
8pin rj 45 power pins. No RBAC at this point on any OU containers.Any help and thoughts would be appreciated!!-Lori. The link is enabled.
I also did have enforced just to see.The setting is for a mapped drive. Which is under prefences but should still show up. I have this occuring with three different GPOs but choose to focus on one and see if I can't ferret out the issue that way.I believed that I needed loopback but I could be (and probably am) completely wrong; I just want to make sure it always applies to the user no matter what object it logs into.
I am rethinking this logic now because isn't loopback more for applying certain machine settings to a user logging on?One GPO was in place OCT2013; another was created FEB2014 and another (the drive mapping one that I am troubleshooting primarily) was created in MAY2014.Sysvol seems healthy and replicating fine from the dcdiag tests I've ran.I initially started this testing on monday on my workstation wher eI was able to log on as my newly created test user within the above OU. I was able to reboot and resync and update and still the GPO will not appear. It's as though whatever makes it look like a GPO (being present in Sysvol?) isn't there. The computer and the user can access and browse it however. BTW - Did find: and have looked through all of the information in there. (for anyone that is also looking at this issue. That may help them:) )None of that is either applicable or has worked yet.
I haven't tried the last suggestion for the reg mod yet- looking into possible implications of doing that one. There's only so much I can do on the fly and still be at a keyboard tomorrow. I will test again with replace. I had changed it to update for testing.
I will remove loopback. The computers/servers are in regular OUs.What drive maps preference enabled for the computer do you have?
I have remote offices and each needs their 'S' drive to be mapped to a specific folder, which is the main point of this GPO (one of three that isn't applying or showing up).I will put in: Process over slow network, process even if GPO hasn't changed and the policy is already enforced for testing reasons. I currently have my test user in a sub OU of the RS office I'm trying ot get sorted out. It has blocked inher. On it to wittle away the amount of GPOs returned as I'm looking for success on this GPO showing up.