GPO not applying to Windows 10 Clients

[wongle]

Hi there,

 

I have Windows Server 2019 standard installed and the GPO is not applying to the windows 10 clients clients.

 

I have ran gpresult/r on one of the affected PC's and get the below results;

 

RSOP data for domain\user on OFFICE4-NEW : Logging Mode
------------------------------------------------------------

OS Configuration:            Member Workstation
OS Version:                  10.0.19041
Site Name:                   N/A
Roaming Profile:             N/A
Local Profile:               C:\Users\
Connected over a slow link?: No


USER SETTINGS
--------------
    CN=Name,OU=Staff,OU=NAME,DC=SERVER,DC=local
    Last time Group Policy was applied: 21/06/2020 at 20:19:03
    Group Policy was applied from:      SERVERNAME
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        NAME
    Domain Type:                        Windows 2008 or later

    Applied Group Policy Objects
    -----------------------------
        Default Domain Policy
        Default Domain Policy
        Default Domain Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)

    The user is a part of the following security groups
    ---------------------------------------------------
        Domain Users
        Everyone
        BUILTIN\Users
        BUILTIN\Administrators
        NT AUTHORITY\INTERACTIVE
        CONSOLE LOGON
        NT AUTHORITY\Authenticated Users
        This Organization
        LOCAL
        Authentication authority asserted identity
        Denied RODC Password Replication Group
        High Mandatory Level

 

All the PC's have been added to the Security Filtering.

 

Has anyone got any advise to why this could be happening?

 

Many thanks,

Wongle.

[wongle]

Hi again,

 

I have just ran a report and came back with the following;

 

During last computer policy refresh on 21/06/2020 20:53:05 
  
 No Errors Detected 
 A fast link was detected More information... 
 The following GPOs have special alerts 
  

GPO Name

Alert

Default Domain Policy Enforced 
Default Domain Controllers Policy Enforced 
 
 



  During last user policy refresh on 21/06/2020 19:24:38 
  
 No Errors Detected 
 A fast link was detected More information... 
 

Cheers,

Wongle

[jsterling]

Did you create a custom policy?  Does it contain user or computer settings or both?  Is it linked to the OU or the root of the Domain?

[wongle]

Hi there,

 

I am using the default policy and contains both user and computer settings.

 

The policy is linked to the OU's and the root of the domain.

 

Cheers.

[binaryzero]

Rule 1 - NEVER modify the Default Domain\Default Domain Controller policy, always create new policies.