User GPO not showing in gpresultGPO Computer Settings not updating. Default Domain policy and all User Settings work fineGroup Policy GPO not 'seen' at clientGPO Run these programs at user logon not taking effectgpo ie user force updateHow to bypass GPO loopback processing for some users?GPO shows applied under user settings, but contains only computer settingsGPO Access Denied (Security Filtering)gpresult doesn't show all applied GPOsApply GPO to certain usersWhy does my GPO not apply?
Pedaling at different gear ratios on flat terrain: what's the point?
When did Britain learn about the American Declaration of Independence?
Why didn't Daenerys' advisers suggest assassinating Cersei?
How was the blinking terminal cursor invented?
Cryptic crossword (printer's devilry edition)
How to draw pentagram-like shape in Latex?
Failing students when it might cause them economic ruin
Combining two Lorentz boosts
multicol package causes underfull hbox
Can I modify the report menu?
FIFO data structure in pure C
on the truth quest vs in the quest for truth
Can ThermodynamicData be used with NSolve?
What should I wear to go and sign an employment contract?
Why is Drogon so much better in battle than Rhaegal and Viserion?
How does this piece of code determine array size without using sizeof( )?
Driving a school bus in the USA
Why are stats in Angband written as 18/** instead of 19, 20...?
pwaS eht tirsf dna tasl setterl fo hace dorw
Can a generation ship withstand its own oxygen and daily wear for many thousands of years?
How to laser-level close to a surface
Does the talk count as invited if my PI invited me?
Is it standard to have the first week's pay indefinitely withheld?
Why does string strummed with finger sound different from the one strummed with pick?
User GPO not showing in gpresult
GPO Computer Settings not updating. Default Domain policy and all User Settings work fineGroup Policy GPO not 'seen' at clientGPO Run these programs at user logon not taking effectgpo ie user force updateHow to bypass GPO loopback processing for some users?GPO shows applied under user settings, but contains only computer settingsGPO Access Denied (Security Filtering)gpresult doesn't show all applied GPOsApply GPO to certain usersWhy does my GPO not apply?
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I have a GPO that maps a drive for users. I have tested it and it works for a newly created test user.
Settings are: User Configurations > Pref > Windows Settings > Drive Maps : SETTINGS
The issue: Some users do not get the drive!
Troubleshooting: perform a gpresult /r to see what is up.
Result: GPO's are not showing AT ALL in the report?!
OK so I verify user location in AD: DOMAIN.local>compOU>usersOU>USER
USER is member of group: TESTGROUP
In GPM the scope of the GPO is: Links: DOMAIN.localcompOUusersOU
Security filtering: TESTGROUP
No WMI filtering
Why is the policy no applying, or at least showing up ?
active-directory group-policy domain domain-controller users
asked Nov 23 '16 at 13:02
Heðin A. JohansenHeðin A. Johansen
134
add a comment |
I have a GPO that maps a drive for users. I have tested it and it works for a newly created test user.
Settings are: User Configurations > Pref > Windows Settings > Drive Maps : SETTINGS
The issue: Some users do not get the drive!
Troubleshooting: perform a gpresult /r to see what is up.
Result: GPO's are not showing AT ALL in the report?!
OK so I verify user location in AD: DOMAIN.local>compOU>usersOU>USER
USER is member of group: TESTGROUP
In GPM the scope of the GPO is: Links: DOMAIN.localcompOUusersOU
Security filtering: TESTGROUP
No WMI filtering
Why is the policy no applying, or at least showing up ?
active-directory group-policy domain domain-controller users
asked Nov 23 '16 at 13:02
Heðin A. JohansenHeðin A. Johansen
134
Do Authenticated Users have read permission?
– Greg Askew
Nov 23 '16 at 15:06
Under "Delegation" authenticated users is not defined, but the TESTGROUP is defined as having "Read" and "Apply group policy" as allow.
– Heðin A. Johansen
Nov 23 '16 at 15:19
Check for the loop back policy ... If you have it in the environment then just disable it for a while and then check ur new GPO...
– Udit Maheshwari
Aug 4 '17 at 2:46
Are all the users members of the UsersOU? are all users members of the TestGroup?
– Michael Brown
Aug 4 '17 at 8:40
add a comment |
I have a GPO that maps a drive for users. I have tested it and it works for a newly created test user.
Settings are: User Configurations > Pref > Windows Settings > Drive Maps : SETTINGS
The issue: Some users do not get the drive!
Troubleshooting: perform a gpresult /r to see what is up.
Result: GPO's are not showing AT ALL in the report?!
OK so I verify user location in AD: DOMAIN.local>compOU>usersOU>USER
USER is member of group: TESTGROUP
In GPM the scope of the GPO is: Links: DOMAIN.localcompOUusersOU
Security filtering: TESTGROUP
No WMI filtering
Why is the policy no applying, or at least showing up ?
active-directory group-policy domain domain-controller users
asked Nov 23 '16 at 13:02
Heðin A. JohansenHeðin A. Johansen
134
I have a GPO that maps a drive for users. I have tested it and it works for a newly created test user.
Settings are: User Configurations > Pref > Windows Settings > Drive Maps : SETTINGS
The issue: Some users do not get the drive!
Troubleshooting: perform a gpresult /r to see what is up.
Result: GPO's are not showing AT ALL in the report?!
OK so I verify user location in AD: DOMAIN.local>compOU>usersOU>USER
USER is member of group: TESTGROUP
In GPM the scope of the GPO is: Links: DOMAIN.localcompOUusersOU
Security filtering: TESTGROUP
No WMI filtering
Why is the policy no applying, or at least showing up ?
active-directory group-policy domain domain-controller users
active-directory group-policy domain domain-controller users
asked Nov 23 '16 at 13:02
Heðin A. JohansenHeðin A. Johansen
134
asked Nov 23 '16 at 13:02
Heðin A. JohansenHeðin A. Johansen
134
asked Nov 23 '16 at 13:02
Heðin A. JohansenHeðin A. Johansen
134
asked Nov 23 '16 at 13:02
Heðin A. JohansenHeðin A. Johansen
134
asked Nov 23 '16 at 13:02
Heðin A. JohansenHeðin A. Johansen
134
134
Do Authenticated Users have read permission?
– Greg Askew
Nov 23 '16 at 15:06
Under "Delegation" authenticated users is not defined, but the TESTGROUP is defined as having "Read" and "Apply group policy" as allow.
– Heðin A. Johansen
Nov 23 '16 at 15:19
Check for the loop back policy ... If you have it in the environment then just disable it for a while and then check ur new GPO...
– Udit Maheshwari
Aug 4 '17 at 2:46
Are all the users members of the UsersOU? are all users members of the TestGroup?
– Michael Brown
Aug 4 '17 at 8:40
add a comment |
Do Authenticated Users have read permission?
– Greg Askew
Nov 23 '16 at 15:06
Under "Delegation" authenticated users is not defined, but the TESTGROUP is defined as having "Read" and "Apply group policy" as allow.
– Heðin A. Johansen
Nov 23 '16 at 15:19
Check for the loop back policy ... If you have it in the environment then just disable it for a while and then check ur new GPO...
– Udit Maheshwari
Aug 4 '17 at 2:46
Are all the users members of the UsersOU? are all users members of the TestGroup?
– Michael Brown
Aug 4 '17 at 8:40
Do Authenticated Users have read permission?
– Greg Askew
Nov 23 '16 at 15:06
Do Authenticated Users have read permission?
– Greg Askew
Nov 23 '16 at 15:06
Under "Delegation" authenticated users is not defined, but the TESTGROUP is defined as having "Read" and "Apply group policy" as allow.
– Heðin A. Johansen
Nov 23 '16 at 15:19
Under "Delegation" authenticated users is not defined, but the TESTGROUP is defined as having "Read" and "Apply group policy" as allow.
– Heðin A. Johansen
Nov 23 '16 at 15:19
Check for the loop back policy ... If you have it in the environment then just disable it for a while and then check ur new GPO...
– Udit Maheshwari
Aug 4 '17 at 2:46
Check for the loop back policy ... If you have it in the environment then just disable it for a while and then check ur new GPO...
– Udit Maheshwari
Aug 4 '17 at 2:46
Are all the users members of the UsersOU? are all users members of the TestGroup?
– Michael Brown
Aug 4 '17 at 8:40
Are all the users members of the UsersOU? are all users members of the TestGroup?
– Michael Brown
Aug 4 '17 at 8:40
add a comment |
1 Answer
1
active
oldest
votes
Authenticated Users must have read permission on the Delegation tab. This allows the computer to read the GPO, which is required even though it is for user settings.
answered Nov 23 '16 at 15:27
Greg AskewGreg Askew
29.3k33770
I'm not saying you are wrong, but how do you then explain how the testuser is able to get the policy ?
– Heðin A. Johansen
Nov 23 '16 at 15:35
1
Have just verified that the "Authenticated users" don't need the have read on the delegations tab, only the user has read permissions and no computer objects are defined, still applies correctly to the test user
– Heðin A. Johansen
Nov 23 '16 at 15:45
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f816601%2fuser-gpo-not-showing-in-gpresult%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Authenticated Users must have read permission on the Delegation tab. This allows the computer to read the GPO, which is required even though it is for user settings.
answered Nov 23 '16 at 15:27
Greg AskewGreg Askew
29.3k33770
I'm not saying you are wrong, but how do you then explain how the testuser is able to get the policy ?
– Heðin A. Johansen
Nov 23 '16 at 15:35
1
Have just verified that the "Authenticated users" don't need the have read on the delegations tab, only the user has read permissions and no computer objects are defined, still applies correctly to the test user
– Heðin A. Johansen
Nov 23 '16 at 15:45
add a comment |
Authenticated Users must have read permission on the Delegation tab. This allows the computer to read the GPO, which is required even though it is for user settings.
answered Nov 23 '16 at 15:27
Greg AskewGreg Askew
29.3k33770
I'm not saying you are wrong, but how do you then explain how the testuser is able to get the policy ?
– Heðin A. Johansen
Nov 23 '16 at 15:35
1
Have just verified that the "Authenticated users" don't need the have read on the delegations tab, only the user has read permissions and no computer objects are defined, still applies correctly to the test user
– Heðin A. Johansen
Nov 23 '16 at 15:45
add a comment |
Authenticated Users must have read permission on the Delegation tab. This allows the computer to read the GPO, which is required even though it is for user settings.
answered Nov 23 '16 at 15:27
Greg AskewGreg Askew
29.3k33770
Authenticated Users must have read permission on the Delegation tab. This allows the computer to read the GPO, which is required even though it is for user settings.
answered Nov 23 '16 at 15:27
Greg AskewGreg Askew
29.3k33770
answered Nov 23 '16 at 15:27
Greg AskewGreg Askew
29.3k33770
answered Nov 23 '16 at 15:27
Greg AskewGreg Askew
29.3k33770
answered Nov 23 '16 at 15:27
Greg AskewGreg Askew
29.3k33770
29.3k33770
I'm not saying you are wrong, but how do you then explain how the testuser is able to get the policy ?
– Heðin A. Johansen
Nov 23 '16 at 15:35
1
Have just verified that the "Authenticated users" don't need the have read on the delegations tab, only the user has read permissions and no computer objects are defined, still applies correctly to the test user
– Heðin A. Johansen
Nov 23 '16 at 15:45
add a comment |
I'm not saying you are wrong, but how do you then explain how the testuser is able to get the policy ?
– Heðin A. Johansen
Nov 23 '16 at 15:35
1
Have just verified that the "Authenticated users" don't need the have read on the delegations tab, only the user has read permissions and no computer objects are defined, still applies correctly to the test user
– Heðin A. Johansen
Nov 23 '16 at 15:45
I'm not saying you are wrong, but how do you then explain how the testuser is able to get the policy ?
– Heðin A. Johansen
Nov 23 '16 at 15:35
I'm not saying you are wrong, but how do you then explain how the testuser is able to get the policy ?
– Heðin A. Johansen
Nov 23 '16 at 15:35
1
1
Have just verified that the "Authenticated users" don't need the have read on the delegations tab, only the user has read permissions and no computer objects are defined, still applies correctly to the test user
– Heðin A. Johansen
Nov 23 '16 at 15:45
Have just verified that the "Authenticated users" don't need the have read on the delegations tab, only the user has read permissions and no computer objects are defined, still applies correctly to the test user
– Heðin A. Johansen
Nov 23 '16 at 15:45
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f816601%2fuser-gpo-not-showing-in-gpresult%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Do Authenticated Users have read permission?
– Greg Askew
Nov 23 '16 at 15:06
Under "Delegation" authenticated users is not defined, but the TESTGROUP is defined as having "Read" and "Apply group policy" as allow.
– Heðin A. Johansen
Nov 23 '16 at 15:19
Check for the loop back policy ... If you have it in the environment then just disable it for a while and then check ur new GPO...
– Udit Maheshwari
Aug 4 '17 at 2:46
Are all the users members of the UsersOU? are all users members of the TestGroup?
– Michael Brown
Aug 4 '17 at 8:40