I am having a spot of trouble with my policies and applying them on my Windows 10 machine.
I have several GPOs applied at the top of domain level, some contain only computer settings, some contain only user settings, and some contain both.
If I do a GPresult /r, I can see a GPO applied under user settings, that contains both user and computer settings. I can see a GPO applied under user settings, even though that policy contains NO user settings. Finally, I can see a GPO applied under user settings that DOES contain user settings.
What's then even more odd on top of that, is under user settings, I have 2 GPOs show as no applied (Unknown Reason), one of which is the default domain policy, but neither of them contain any user settings!
As far as I can tell, all computer policies are applying correctly, the issue lies in just user settings.
I need to figure out why GPOs show as applied even though they contain no user settings, and also why it shows an unknown reason for applying GPOs that also contain no user settings.
EDIT: Current delegation settings
Our default domain policy currently has these settings:
Creator owner - special
Authenticated users - read, apply
System - everything except full control and apply
Domain admins - read, write, create child objects
Domain computers - read, apply
Enterprise admins - read, write, create child objects
Enterprise domain controllers - read
So after recreating the "DOM-IE-CompatView" GPO with exactly the same settings as before, it no longer appears as "Not applied (unknown reason)"
Should I use dcgpofix to restore the default domain policy back to its default settings as well?