I have two machines who just joined the domain. These two machines will be logging in as the guest account. The guest account was enabled on AD. I moved this user to its own OU and applied a GP that i created for it. However, for some reason, the gp does not apply. I try to do gpupdate /force (non admin mode) and i get a User settings were updated successfully but the computer was not, However the gpo doesnt seem to apply since the changes do not take effect. When i try gpresult (admin mode). The computer settings apply but the user fails saying that there was an error attempting to get the policies.
To verify in non admin mode i ran gpresult /r and i got error: username or password incorrect in admin mode gpresult /r /user guest (or domain\guest) and i get an error that there is no Rsop data for the user guest.
I've spent over 72 hours trying to figure this out, tried many articles found using google but i have had no luck. I have two DCs (one is Server business 2011, one is Windows server 2016, or 19 i can't remember lol).
- I can ping both servers with their name, DNS settings are correct pointing on the DC (dc is the dns server)
- nslookup returns the right resolution.
- Dcdiag doesnt show any problems.
- I can access sysvol without a problem.
- i can access both servers UNC paths.
- GP has the guest account in the users delegation section with read permissions
One thing i noticed is that when i login under a domain user (not the guest), the policy seems to apply, gpresult /r says that the policy has applied.
Any one has any suggestions for a fix?
Edit: I use guest due to.. read comments below.
"User Policy could not be updated successfully. The following errors were encountered: The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. "