In our domain we have a situation that keeps us confused:
We have created a GPO on our 2012 R2 AD and applied it to our windows 10 workstations.
When we examine the workstations with the "gpresult /v" commandline tool, we get settings that are the reverse of the GPO setting.
When we examine the workstations with the "rsop.msc" tool, we get the same settings that are in the GPO.
Below is a screenshot of the two tools executing on the same workstations, notice the "Allow Cortana above search bar" as an example of the reverse settings.
Hope someone can help us.