We have a GPO configured primarily for RDP settings.  This GPO is linked and enabled at the top of the domain and uses the default security filtering of "authenticated users".

Specifically in the GP we are trying to configure "Computer Configuration > Admin Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host" settings.  The GPO objects themselves say "at LEAST windows XP & 2003"

All of our server OS (2008R2, 2012) are applying the GPO and it's settings correctly.

All of our desktop OS (7, 8) are applying the GPO, but none of the settings apply.

We have tried creating brand new GPOs, enabling/disabling enforcement, changing GPO priorities.  We are at a loss as to why a GPO setting (which exists in windows 7 & 8) is not accepting the configuration settings it is receiving.

Thanks

• Edited by Mr Paul S Friday, January 17, 2014 4:15 PM

Have you tried troubleshooting with rsop.msc on a client, to see if you have a conflicting GPO?

On a client that the policy should apply to, run rsop.msc as an administrator. Then you'll be able to dig down to the policy setting and determine if you have conflicting policys on that setting and what priorities they have.

Hi,

Check also if you have enabled  loopback processing.

Hi,

Regarding the current issue, in order to narrow down the cause of the issue, please collect the following information for further research.

GPMC.log

==================

a. On domain controller, click Start ->Run, type GPMC.MSC, it will load the GPMC console.

b. Right click on "Group Policy Result" and choose wizard to generate a report for the problematic computer and user account (please place appropriately). (Choose computer and select the proper user in the wizard)

c. Right click  the resulting group policy result and click the "Save Report" => save report to save the report to a HTML file.

Once we get the report, please check if the GPO has been applied to these client correctly.

In addition, the following log may also be useful for troubleshooting.

Collect Gpsvc.log(Vista/Win 7)

==============

To collect the GPSVC.log, we need to modify the following registry:

Subkey: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics

Entry: GpSvcDebugLevel

Type: REG_DWORD

Vaule data: 0x30002

The Gpsvc.log is located in the following folder: %SYSTEMDRIVE%\Debug\UserMode\

For details about how to troubleshoot Group Policy issue, please refer to the following article.

Troubleshooting Group Policy Problems

http://technet.microsoft.com/en-us/library/cc787386(v=ws.10).aspx

Hope this helps.

Best Regards,

Andy Qi

TechNet Subscriber Support

If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.

Um, you are configuring "Remote Desktop Session Host" settings?
These are not "Remote Desktop Client" settings - they are only relevant when the configured machine is acting as an RD Host, not an RD Client.

A "Windows Client" OS can be a host, but only for a very limited number of sessions (perhaps only one).

Or, have I completely missed your point?