0

I am applying a logon GPO to a Computer OU (with only computer objects within), when I edit the policy using User Configuration the GPO shows up when doing gpresult -r but when I edit the policy using Computer Configuration it doesn't show up when doing gpresult -r (previously doing gpupdate/force). Any idea why is this happening and how to fix it?

1

I'm not 100% sure, but this might help you:

  1. In the Group Policy Microsoft Management Console (MMC), click Computer Configuration.

  2. Locate Administrative Templates, click System, click Group Policy, and then enable the Loopback Policy option.

Try Merge Mode

https://support.microsoft.com/en-ca/help/231287/loopback-processing-of-group-policy

| improve this answer | |
1

For the group policy object (GPO) in question, I suspect that the "GPO Status" might be set to "Computer Configuration settings disabled" currently, and hence the computer configuration (despite editing) is not coming into picture after group policy update!

Please confirm that for the said GPO, the "GPO Status" is set to Enabled (as shown in the below screenshot), for allowing both User Configuration and Computer Configuration to come into effect. Please try after doing a fresh group policy update.

GPO Status - Enabled

| improve this answer | |
  • Thanks for your comment. The GPO has been always Enabled as shown on your screen capture. It is really an odd behaviour – Tato Sep 19 '19 at 5:44
  • Hi @Tato. Do you suspect that any other GPO is overwriting this GPO (either based on inheritance or enforcement)? How are you checking the logon script's policy name on the client system? – Am_I_Helpful Sep 19 '19 at 7:11

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.