Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have the GPOs setup correctly for WSUS and even just adding a favorite in IE but none of these are working. Is there another setting somewhere I'm missing to get these things to force? Windows Server 2008 and all clients are Windows 7.

share|improve this question
How have you configured the GPOs? Linked to an applicable OU containing the users? Or the computers? Security filtering? WMI filtering? What's the resultant set of policy tool say? – Shane Madden Apr 10 '12 at 17:40
I have configured the GPO's. Linked them to my OU that all of my domain users are in. Security filtering just has authenticated users. – Intelwalk Apr 10 '12 at 17:51
The IE Favorite one was applied but the WSUS settings were not – Intelwalk Apr 10 '12 at 20:16
up vote 3 down vote accepted

Your WSUS policy is not being applied because WSUS policies are computer configuration. The GPO that contains those settings must be linked to an OU which contains the relevant computer objects.

share|improve this answer
GEEZ I have no idea why the computers are not in GPO – Intelwalk Apr 10 '12 at 21:13
@Intelwalk Your comment makes no sense. As Shane has explained, your COMPUTER objects need to be in the same OU that has the GPO applied, if you want the computer settings to be applied. You stated in your comment to your question that you applied the policy to your USER OU. Computer settings apply to computer accounts. User settings apply to user accounts. See also loopback processing. – Chris McKeown Apr 10 '12 at 21:43

On the clients run:

gpupdate /force /sync /boot

Then on the client run

gpresult > c:\gpresult.txt

Review the result and confirm if the newly created GPO is correctly being applied. As Shane mentioned, you can also run the resultant set of policy tool from the DC.

share|improve this answer
The IE Favorite one was applied but the WSUS settings were not. – Intelwalk Apr 10 '12 at 19:43
+1 for resultant set of policy from group policy management. This is always my first port of call when diagnosing group policy issues. – Bryan Apr 10 '12 at 21:39

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.