Environment: Windows 8.1 Enterprise with DirectAccess, AD 2012R2
Computer used with two accounts, a domain account (for business), and Microsoft account (personal use)

Occasionally, maybe once out of 10 or 15,when I open my Microsoft account, it tries to apply GPP defined in the domain (group policy shortcuts, group policy environment, drive maps etc), which causes an endless opening session, as if it was waiting for a timeout foreach GPP before move to the next.

Usually I end up getting tired, I turn off my PC violently, and I restarts by switching off the wifi (and therefore DirectAccess) to be sure it will not retry the same

I don't understand why a local MS account is trying to apply domain GPP.

 

• Edited by Benoit Machiavello Tuesday, June 23, 2015 6:56 PM

No, it's two different account. Just maybe (I'm not sure because I have "recently" reinstalled my Windows) I have use my MS account in the Store app in my domain session. But my domain session is not connected with my Microsoft Account.

I know what I can do with a Microsoft Account :D

But I don't understand why my MS account sometimes try to apply domain GPO when I login.

Hi Benoit,

Thanks for your update.Would you please run a RSOP report with "gpresult/r" in the command prompt. The command would return a RSOP report and for XXXX(user account) on XXXX(computer account).

Would you please help to check the user account listed and let me know the result?

Best Regards,

Elaine

Hi Benoit,

Thanks for your update.

I had a test on my win8.1 environment and log in with microsoft account and checked the RSOP, no domian policy was applied. And I can see the microsoft account was under the local machine not the domain.

Would you please run a RSOP report with "gpresult/r" in the command prompt. The command would return a RSOP report and for XX\XX(user account) on XXXX(computer account).

Would you please help to check the user account listed and let me know the result?

 

Best Regards,

sorry for the response time.

The problem just reproduce by logging me tonight.

Unfortunately I'm on Windows in french so the back of the command is in French.

He tries well to apply it on my Microsoft account:

Outil de rsultat du systme d'exploitation Microsoft (R) Windows (R) v2.0
c 2013 Microsoft Corporation. Tous droits rservs.

Cr le 02/07/2015 20:05:50

Donnes RSOP pour UC023631\bxxxx_000 sur UC023631 : mode journalisation
------------------------------------------------------------------------

Configuration du systme d'exploitation : Station de travail membre
Version du systme d'exploitation...... : 6.3.9600
Nom du site............................ : N/A
Profil itinrant :             N/A
Profil local........................... : C:\Users\bxxxx_000
Connexion via une liaison lente ? : Non

PARAMETRES UTILISATEURS
------------------------

    Heure de la dernire application de la stratgie de groupe : 02/07/2015 19
:37:46
    Stratgie de groupe applique depuis :      MSAD2.domain.local
    Seuil de liaison lente dans la stratgie de groupe :   500 kbps
    Nom du domaine :                        UC023631
    Type de domaine :                        <Ordinateur local>

    Objets Stratgie de groupe appliqus
    -------------------------------------
        N/A

    Les objets stratgie de groupe n'ont pas t appliqus
    car ils ont t refuss
    ----------------------------------------------------------------------------
-------
        Stratgie de groupe locale
          Filtrage :  Non appliqu (vide)

    L'utilisateur fait partie des groupes de scurit suivants
    ----------------------------------------------------------
        Niveau obligatoire lev
        Tout le monde
        Compte local et membre du groupe Administrateurs
        Administrateurs
        Utilisateurs
        INTERACTIF
        OUVERTURE DE SESSION DE CONSOLE
        Utilisateurs authentifis
        Cette organisation
        b.xxxxxxx@live.fr
        Compte local
        LOCAL
        Authentification de compte Microsoft

Hi Benoit,

According to your RSOP report here, the system didn't apply domain policy.

You might post your question on the client forum regarding the log on slowly while use microsoft account.

Best Regards,

Elaine