Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have Microsoft Small Business Server 2011 and when creating a GPO for my SBSComputers the settings do not apply.

For instance I have enabled Verbose vs normal status messages in the Group Policy Management Editor in the Windows SBS Client Policy.

However, when logging onto one of my client computers and looking at the local group policy this setting is not enabled.

Why would that be?

EDIT:

Ah it looks like I just had the basic concept wrong, running gpresult /H did indeed show that the policy's are in effect on these machines.

Thanks!

share|improve this question
add comment

4 Answers

up vote 3 down vote accepted

Group Policy may not have refreshed yet. It is not an instantaneous process, the clients have to actually check for new policies, which happens at an interval that is defined in the Default Domain Policy.

Even if the interval period has passed, some settings are not applied until the computer starts up, or a user logs in. You can check the policies that are applied to a machine by running gpresult /H. This should give you some hints about whether or not the policy is applied and the machine just needs a reboot, or if it isn't applying and you need to either run gpupdate /force or look at the event logs for errors.

share|improve this answer
    
I'll mark your answer cause it's what eventually led me to solve the problem. Thanks! –  Mike Hagstrom Nov 21 '11 at 19:58
add comment

We've had situations where policies weren't "taking" properly; usually running (as administrator at the prompt on the client) "gpupdate /force" would refresh the policy.

It can also depend on how long your refresh period is as to when the client got the updated policy off the server.

share|improve this answer
add comment

You can use the gpresult command to output the policies that are being applied to a user/computer. One of the sections lists the policies that were either successfully or unsuccessfully applied. Generally it will have a brief error message (i.e. Permission Denied) next to the policies not applied. Try that and see if it sheds any light. It's also useful because it drills down and tells you every rule that is currently in place, so it's easy to see what's working and what's not. Good luck!

share|improve this answer
add comment

I had the same issue at first. It was because DNS was not properly set up. Config your DNS Server, point the client DNS to the DNS Server's Static IP Address... Make sure the client pc's have the internal DNS server, NOT an internet DNS service or ISP. Once you've done that, do a "gpupdate /force" to update the local policy.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.