I wanted to ask if anyone knows of a tool that will identify what may be blocking a group policy from applying on a domain network.
Go to the target computer and run gpresult /z and see if it was applied and when. If It is applied by GPP (preferences) make sure that the setting are set to update.MCTS - Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
http://mariusene.wordpress.com/
February 4th, 2012 1:37am
You could use the group policy management console,
Down the bottom it has Group Policy Modeling and Group Policy Results.
If you run the modeling and select a computer in the OU that is having the problem and also a user that is logging on tot he machine, follow the rest of the screens it will run a simulation of the group policys that ahve been applied.
It will give you a report with a few tabs so you can see which settings were applied by which gpo, it will also tell you the winning gpo (this can be handy if there is more than 1 gpo changing a setting) it will also tell you which GPO's were not applied
usually because of group filtering.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. If you
find an answer helpful then please "Vote As Helpful"
Free Windows Admin Tool Kit Click here and download it now
February 4th, 2012 7:03am
We are applying a group policy that sets the power management on laptops. This policy seems to be working well at other locations but at one location something is preventing the policy from being applied correctly.
I have imaged a laptop running Windows XP SP3 and joined it to our domain and I have ran all available updates and at first everything checks out correctly. However one day later something causes the policy not to apply anymore.
Does anyone know of an available tool or a way to find out what might be blocking this gpo from applying?
Thanks
Brian
February 4th, 2012 3:03pm
Go to the target computer and run gpresult /z and see if it was applied and when. If It is applied by GPP (preferences) make sure that the setting are set to update.
MCTS - Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
http://mariusene.wordpress.com/
Thanks Marius i will give it a try next time I am on site.
Free Windows Admin Tool Kit Click here and download it now
February 4th, 2012 3:29pm
Adam thanks for your help I will try that next week when I am back on site.
February 4th, 2012 3:30pm
Go to the target computer and run gpresult /z and see if it was applied and when. If It is applied by GPP (preferences) make sure that the setting are set to update.MCTS - Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
http://mariusene.wordpress.com/
Free Windows Admin Tool Kit Click here and download it now
February 4th, 2012 5:40pm
Hi,
Please use GPMC.log to troubleshoot the issue:
GPMC.log
==================
a.
On domain controller, click Start -> Run, type GPMC.MSC, it will load the GPMC console.
b.
Right click on "Group Policy Result" and choose wizard to generate a report for the problematic computer and user account (please place appropriately). (Choose computer and select the proper user in the wizard)
If the policy is related to GPP, please make sure the CSE had been installed:
•Windows XP, 64-bit edition
http://www.microsoft.com/downloads/details.aspx?FamilyId=249C1AED-C1F1-4A0B-872E-EF0A32170625
•Windows XP, 32-bit edition
http://www.microsoft.com/downloads/details.aspx?FamilyId=E60B5C8F-D7DC-4B27-A261-247CE3F6C4F8
If the issue persist, please collect userenv.log to troubleshoot:
Userenv.log
====================
1.
Start Registry Editor.
2.
Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
3.
Right-click and new add DWORD(32-bit) with the Value of "UserEnvDebugLevel"
4.
Type in 10002(Hexadecimal) or 65538(Decimal) in the Value data box, and then click OK.
5.
Reboot the problematic computer to make the change take into effect.
The Userenv.log is located in the following folder: %SYSTEMDRIVE%\Debug\UserMode\
If you encounter any difficulties when reading the gpmc.log, please contact me with my account:
v-xchen@microsoft.com to get a workspace to upload the information.
As there are too many threads, please clearly states the thread name in the email subject, please post the thread link in the email. Thanks for your understanding!
In addition, there are some useful articles for your reference:
Troubleshooting Group Policy
http://technet.microsoft.com/en-us/library/cc758608(v=WS.10).aspx
Troubleshooting Group Policy Using Event Logs
http://technet.microsoft.com/en-us/library/cc749336(v=WS.10).aspx
Your Guide to Group Policy Troubleshooting
http://technet.microsoft.com/en-us/magazine/2007.02.troubleshooting.aspx
Hope this helps!
Best Regards
Elytis Cheng
Please remember to click Mark as Answer on the post that
Elytis Cheng
TechNet Community Support
February 6th, 2012 12:50pm
Hi,
Please use GPMC.log to troubleshoot the issue:
GPMC.log
==================
a.
On domain controller, click Start -> Run, type GPMC.MSC, it will load the GPMC console.
b.
Right click on "Group Policy Result" and choose wizard to generate a report for the problematic computer and user account (please place appropriately). (Choose computer and select the proper user in the wizard)
If the policy is related to GPP, please make sure the CSE had been installed:
•Windows XP, 64-bit edition
http://www.microsoft.com/downloads/details.aspx?FamilyId=249C1AED-C1F1-4A0B-872E-EF0A32170625
•Windows XP, 32-bit edition
http://www.microsoft.com/downloads/details.aspx?FamilyId=E60B5C8F-D7DC-4B27-A261-247CE3F6C4F8
If the issue persist, please collect userenv.log to troubleshoot:
Userenv.log
====================
1.
Start Registry Editor.
2.
Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
3.
Right-click and new add DWORD(32-bit) with the Value of "UserEnvDebugLevel"
4.
Type in 10002(Hexadecimal) or 65538(Decimal) in the Value data box, and then click OK.
5.
Reboot the problematic computer to make the change take into effect.
The Userenv.log is located in the following folder: %SYSTEMDRIVE%\Debug\UserMode\
If you encounter any difficulties when reading the gpmc.log, please contact me with my account:
v-xchen@microsoft.com to get a workspace to upload the information.
As there are too many threads, please clearly states the thread name in the email subject, please post the thread link in the email. Thanks for your understanding!
In addition, there are some useful articles for your reference:
Troubleshooting Group Policy
http://technet.microsoft.com/en-us/library/cc758608(v=WS.10).aspx
Troubleshooting Group Policy Using Event Logs
http://technet.microsoft.com/en-us/library/cc749336(v=WS.10).aspx
Your Guide to Group Policy Troubleshooting
http://technet.microsoft.com/en-us/magazine/2007.02.troubleshooting.aspx
Hope this helps!
Best Regards
Elytis Cheng
Please remember to click Mark as Answer on the post that
Elytis Cheng
TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
February 12th, 2012 4:50am