Y
Y
Yuri Yerusalimsky2020-01-03 07:49:44
System administration
Yuri Yerusalimsky, 2020-01-03 07:49:44

Why are group policies not being applied (WIndows Server 2019)?

Group politicians in the domain somehow work strangely. The domain itself is very simple, one domain controller on Windows Server 2019, several dozen machines within the same subnet that access the Internet. Policies are set up on the domain controller, without any WMI filters, policy inheritance prohibitions. All policies have the "Authenticated" user group specified in the security filter, but for all of them, the delegation rules look exactly the same in the delegation rules, the authenticated ones have the rights to read policies. BUT! The joke is that only a few policies actually apply to machines, the rest of the machines, in principle, are not seen as such. Checked through "gpupdate / force" and "gpresult / r" on final machines, the system on the destination computer reports that the policies for the computer and the user were successfully updated, but does not see most of the policies (it does not display them, it does not even show that they are filtered, as if they do not exist at all). Any ideas how to overcome this?
I have already looked at the general instructions, at the beginning of the subject I wrote that everything is normal with the rights, the policies do not work, even though I enter them in the root of the domain, even for a specific OU, they are not visible in both cases. By the way, those policies that are visible to computers are located at the root of the domain with the same policy settings that are not visible to end computers.

Answer the question

In order to leave comments, you need to log in

1 answer(s)
E
ettaluni, 2020-01-03
@ettaluni

Maybe you need to apply policies for the computer, but you configured them for the user? And gpresult shows policies for the computer, gpresult / USER like to show for the user. And in general, you need to reboot when you suffer with politicians.
Also, other policies on which the closure is configured may interfere with you, your network may interfere with you when the policies do not have time to apply them, and the dog knows what else. I advise you to work out any new policies on a test machine.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question