Home / server / Questions / 5556
Accepted
Marc-Andre R.
Asked: 2009-05-07 16:11:32 +0800 CST

GPO Randomly applying

  • 772

I got a problem since a while with my XP client connected on a 2003 R2 Server Active Directory.

Sometime GPO doesn't load when a user log on. Some other time, It work.

I search many time on google to find a solution about that problem but I never found one.

I look for DNS but it doesn't seems to be the issue there.

Is anyone already encountered this problem before?

Thanks for you precious answer it's been several months I'm searching for a solution since this problem happen in a school environnement so this is really important that GPO apply correctly everytime!

EDIT : Problem still not solved, did what all of you said but doesn't help... I'll check it out on monday when I'll go back to work.

EDIT : I'm still searching for a solution on this, suggested solution up to now still not resolved the problem. Thanks however for those ;)

windows-server-2003 group-policy windows-xp

4 Answers

  1. Run rsop.msc, the Resultant Set of Policy snap-in, against the machine and the user that's having the problem. What does it tell you? (If it can't run, then that's a result itself--the GP processing is broken on that machine.)

    • 2

  2. One thing I always use when troubleshooting GPO issues is the gpupdate/gpresult commands.

    I'm not sure if you're familiar with these, but if not, simply open a command prompt on the client machine and type gpupdate to attempt to reload group policy from the domain controller. Also, gpresult will show you the policies being applied on the user and computer level since the last GPO update. You'll also see other bits and pieces such as domain

    This information has really come in handy a number of times for me, so hopefully it will at least give you something to go on. I'd look at gpresult in particular in this instance.

    • 1
  3. Best Answer

    It may be something to do with group policy refresh settings.

    I'd try:

    1. Disable Turn off background refresh of Group Policy in Computer Configuration | Administrative Templates | System | Group Policy
    2. Enable Always wait for the network at comptuer startup and login in Computer Configuration | Administrative Templates | System | Logon

    Particularly setting 2 above; it may be that the XP machines aren't getting the GPO setting until they do a background refresh. If it's a per-user setting rather than using loopback, and you're removing the profile on logoff, then this would definitely apply.

    • 1

  4. http://technet.microsoft.com/en-us/library/cc784062(WS.10).aspx

    This note gives a few examples of troubleshooting GPOs. The only item I see that might apply is the "slow link" definition. Is it possible that the users are logging on with cached credentials or that the network isn't responding fast enough? Try modifying the Slow Link Detection.

    • 1