My situation is as follows:
- I have 1 Windows Server 2016 as Domain Controller which provides policies (DC1).
- I have 1 Windows Server 2016 as Terminal server (RD1).
- I have multiple PC's
All are joined to the domain.
I have set network share access using policies with the Replace option.
My problem is: Every 90 or so minutes, Background policies are executed, and as such the share policy refreshes the share, which means, remove share, recreate.
Any program using a file on the share suddenly can't find the file for a brief moment. For example VLC Media player will crash, Visual Studio will say the project was modified from the outside and asks if I want to reload it.
I know I can change the replace to update or another method, but I want to be able to remove the share simply by removing a user from the usergroup attached to that share.
In order to combat this, I changed the group policy to not do background sync of policies, which is a computer policy and requires a restart. But after a restart, it still syncs every 90 minutes. I then changed the sync interval to the maximum of 31 days (yes, it used to be 45), restarted, still syncing every 90 minutes. There's even a policy I found that doesn't refresh policies unless the policy object itself has changed. Again, this has no effect.
I did a gpresult /v and saw that the policies mentioned above are not even listed.
I have added the computer to the policy and gave it read permissions, similar to how other groups are listed, but that yielded no result either.
I suppose I could setup this using local group policies, but before I go this route, I'd like to make it possible to setup this through domain group policies.
Anyone an idea why this isn't working, and how to fix it?
I found out what my problem was. The policy was not placed at the highest level and therefor was still skipped, even though I added the group. After creating a new link at the highest level, set it enforced, then removing the old one, a gpupdate /force now updates.
The gpresults /v now actually shows me the policies I have set.