group policy does not refresh

Hello,
we have a 2003 environment and all our pc's are win xp sp3.
we have various of GPO's that are applied to various OU's. the problem that
i have is that, if a computer related GPO gets changed (a value added or the
pc gets removed from that GPO) it still shows it when i run Gpresult and that
causes the various computers to have wrong gpo's.
how can i ensure that all pc's get the GPO that is assign under their OU and
to refresh the information?
thank you

Howdie!

George wrote:
> we have a 2003 environment and all our pc's are win xp sp3.
> we have various of GPO's that are applied to various OU's. the problem that
> i have is that, if a computer related GPO gets changed (a value added or the
> pc gets removed from that GPO) it still shows it when i run Gpresult and that
> causes the various computers to have wrong gpo's.
> how can i ensure that all pc's get the GPO that is assign under their OU and
> to refresh the information?

The Group Policy architecture is that, once a GPO is changed, the
clients would notice that there's a change and re-load and re-apply the
Group Policy themselves. It is surprising that you experience a behavior
like this.

Do clients apply Group Policies if you're using gpupdate (note: don't
use the /force switch, first!)? Have you checked whether Windows XP's
fast boot behaviors causes this (you can enable the "always wait for the
network"-Group Policy found in "Administrative Templates\System\ for that).

Cheers,
Florian

Hello George,

Automatic refresh of GPOs is 90 up to 120 minutes. Without manual refresh
with gpupdate /force as mentioned already from Florian you have to wait this
time and check again.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
> we have a 2003 environment and all our pc's are win xp sp3.
> we have various of GPO's that are applied to various OU's. the problem
> that
> i have is that, if a computer related GPO gets changed (a value added
> or the
> pc gets removed from that GPO) it still shows it when i run Gpresult
> and that
> causes the various computers to have wrong gpo's.
> how can i ensure that all pc's get the GPO that is assign under their
> OU and
> to refresh the information?
> thank you

Thank you for your replies Meinolf and Florian.
the GPO's are there for the last month and more and still not updated.
gpupdate /force has been run as well but nothing. there is something that it
does not remove the old information. if i remove the computer from the
domain, change the name and rejoin it gets all the accurate information under
gpresult.
to try and explain a bit further:
there are two GPo's a) autorun b)proxy settings.
pc name host is under the autorun GPO and everything works fine, when i
remove the gpo from the host OU and i add the proxy settings GPO, then on
host pc when i run gpresult i will get both autorun and proxy settings and
that stays forever.
thank you

Hello George,

Some GPOs are doing a kind of tattooing, you have to revert the policy(enabled
to disable to not configured or vice versa) before it is complete changed.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Thank you for your replies Meinolf and Florian.
> the GPO's are there for the last month and more and still not updated.
> gpupdate /force has been run as well but nothing. there is something
> that it
> does not remove the old information. if i remove the computer from the
> domain, change the name and rejoin it gets all the accurate
> information under
> gpresult.
> to try and explain a bit further:
> there are two GPo's a) autorun b)proxy settings.
> pc name host is under the autorun GPO and everything works fine, when
> i
> remove the gpo from the host OU and i add the proxy settings GPO, then
> on
> host pc when i run gpresult i will get both autorun and proxy settings
> and
> that stays forever.
> thank you

ok, but the issue is taht the specific GPO's might not apply to the specific
computer but do apply to others, so i cant really disable it, wait and the
re-enable them just to remove it from some pc's/OU's.
thank you


"Meinolf Weber [MVP-DS]" wrote:

> Hello George,
>
> Some GPOs are doing a kind of tattooing, you have to revert the policy(enabled
> to disable to not configured or vice versa) before it is complete changed.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Thank you for your replies Meinolf and Florian.
> > the GPO's are there for the last month and more and still not updated.
> > gpupdate /force has been run as well but nothing. there is something
> > that it
> > does not remove the old information. if i remove the computer from the
> > domain, change the name and rejoin it gets all the accurate
> > information under
> > gpresult.
> > to try and explain a bit further:
> > there are two GPo's a) autorun b)proxy settings.
> > pc name host is under the autorun GPO and everything works fine, when
> > i
> > remove the gpo from the host OU and i add the proxy settings GPO, then
> > on
> > host pc when i run gpresult i will get both autorun and proxy settings
> > and
> > that stays forever.
> > thank you
>
>
>

Hello George,

You should enable logging to see if this give some detailed information what's
going on, according to:
http://technet.microsoft.com/en-us/l...23(WS.10).aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> ok, but the issue is taht the specific GPO's might not apply to the
> specific
> computer but do apply to others, so i cant really disable it, wait and
> the
> re-enable them just to remove it from some pc's/OU's.
> thank you
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello George,
>>
>> Some GPOs are doing a kind of tattooing, you have to revert the
>> policy(enabled to disable to not configured or vice versa) before it
>> is complete changed.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Thank you for your replies Meinolf and Florian.
>>> the GPO's are there for the last month and more and still not
>>> updated.
>>> gpupdate /force has been run as well but nothing. there is something
>>> that it
>>> does not remove the old information. if i remove the computer from
>>> the
>>> domain, change the name and rejoin it gets all the accurate
>>> information under
>>> gpresult.
>>> to try and explain a bit further:
>>> there are two GPo's a) autorun b)proxy settings.
>>> pc name host is under the autorun GPO and everything works fine,
>>> when
>>> i
>>> remove the gpo from the host OU and i add the proxy settings GPO,
>>> then
>>> on
>>> host pc when i run gpresult i will get both autorun and proxy
>>> settings
>>> and
>>> that stays forever.
>>> thank you

Thanks Meinolf,
i dont believe i will be getting anywere with the logs.
thank you for your help.

"Meinolf Weber [MVP-DS]" wrote:

> Hello George,
>
> You should enable logging to see if this give some detailed information what's
> going on, according to:
> http://technet.microsoft.com/en-us/l...23(WS.10).aspx
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > ok, but the issue is taht the specific GPO's might not apply to the
> > specific
> > computer but do apply to others, so i cant really disable it, wait and
> > the
> > re-enable them just to remove it from some pc's/OU's.
> > thank you
> > "Meinolf Weber [MVP-DS]" wrote:
> >
> >> Hello George,
> >>
> >> Some GPOs are doing a kind of tattooing, you have to revert the
> >> policy(enabled to disable to not configured or vice versa) before it
> >> is complete changed.
> >>
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>> Thank you for your replies Meinolf and Florian.
> >>> the GPO's are there for the last month and more and still not
> >>> updated.
> >>> gpupdate /force has been run as well but nothing. there is something
> >>> that it
> >>> does not remove the old information. if i remove the computer from
> >>> the
> >>> domain, change the name and rejoin it gets all the accurate
> >>> information under
> >>> gpresult.
> >>> to try and explain a bit further:
> >>> there are two GPo's a) autorun b)proxy settings.
> >>> pc name host is under the autorun GPO and everything works fine,
> >>> when
> >>> i
> >>> remove the gpo from the host OU and i add the proxy settings GPO,
> >>> then
> >>> on
> >>> host pc when i run gpresult i will get both autorun and proxy
> >>> settings
> >>> and
> >>> that stays forever.
> >>> thank you
>
>
>