question

OctoBen-4354 avatar image
0 Votes"
OctoBen-4354 asked OctoBen-4354 answered

Duplicate Group Policies reporting on a multitude of machines

Hi,

We've run into a problem where a number of Group Policies are applying more than once when running gpresult on a multitude of machines.
Group policies that shouldn't be applying (due to blocked inheritance) are also applying to an account in a test OU.

We were basically trying to test a copy of the Default Domain Policy with a different settings applied to a test account in a test OU, however noticed that the original Default Domain policy, and other GPOs, are still applying to the account even though they're not enforced. I've checked and loopback processing is not enabled.

This isn't the case for all machines, some are reporting applied GPOs correctly, but some have this issue.

I've attempted to clear GPO cache off the machine, tried reprofiling the user and even re-joined the machine to the domain, but the issue still persists.
We've checked for sysvol replication errors, but everything looks good.

Does anyone have any ideas what I could do to troubleshoot this further?



124268-2021-07-23-10-43-34-sample1.png124294-2021-07-23-12-00-22-test-account-in-ou-with-blocke.png


windows-group-policy
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

OctoBen-4354 avatar image
0 Votes"
OctoBen-4354 answered

The issue was resolved with Microsoft support.

Loopback processing on Domain Computers was the culprit - apparently, if even one GPO in a particular OU has loopback processing enabled, all other GPOs in the OU will be affected as well. This also affects inherited group policies.

We solved this by getting rid of loopback processing as it's made our domain level GPOs such as Default Domain Policy duplicate and apply to users on OUs that shouldn't.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.