S
spc_mote
We have a group policy applied to all users. This group policy has several "lock down" settings enabled and/or disabled. When we run the RSoP against a computer with and a user affected by the policy, we see what is expected: Several settings enabled/disabled and the winning GPO listed.
However, when we open the winning GPO to edit some of these settings, we find that most of the settings are unconfigured. We then select this GPO and look at the settings tab and confirm the same.
We have rerun the RSoP from several domain controllers and see the same data. The same policies are applied in RSoP, the same GPO is credited and the same credited GPO when opened or examined does not show the same settings. We fear that there is some corruption that goes beyond just this one GPO.
Is this a common issue? What could cause it? What troubleshooting steps should we follow?
We have checed replication and dcdiag and have found no errors.
Ty
Continue reading...
However, when we open the winning GPO to edit some of these settings, we find that most of the settings are unconfigured. We then select this GPO and look at the settings tab and confirm the same.
We have rerun the RSoP from several domain controllers and see the same data. The same policies are applied in RSoP, the same GPO is credited and the same credited GPO when opened or examined does not show the same settings. We fear that there is some corruption that goes beyond just this one GPO.
Is this a common issue? What could cause it? What troubleshooting steps should we follow?
We have checed replication and dcdiag and have found no errors.
Ty
Continue reading...