question

WRaspe-5601 avatar image
0 Votes"
WRaspe-5601 asked ·

GPO policies

Hi there,

I have an Windows server with ADDS ,DNS and GPO services.
An workstation is member of the Domain.

I configured 3 GPO's : 1 dont acces pc settings, 2, deployment google chrome and 3 lockscreen and desktop wallpaper.
GPO 1 works fine on the workstation but 2 and 3 not. On the workstation I only see on the desktop an black background and lockscreen image the standard from microsoft.

On the windows server I configure GPO 2 and 3 but only GPO 3 works..

Hopefully its enough info, please need some help

windows-active-directorywindows-server-2019windows-group-policy
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

WRaspe-5601 avatar image
0 Votes"
WRaspe-5601 answered ·

Hi Hannah,

I have and Windows 10 pro client/workstation with version 1703.
18816-capture1.jpg


above User configuration works the same like what you said. That's great.

18931-capture2.jpg
above with Computer configuration doesn't work and that makes me confused..

18835-capture3.jpg
above two gpupdate /force is when I applied the GPO on Computer Configuration.

the last gpupdate is when I change it to User configuration.
Then it works fine.



capture1.jpg (38.5 KiB)
capture2.jpg (37.5 KiB)
capture3.jpg (83.9 KiB)
· 1 · Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,

Thank you so much for your feedback.

As for the computer configuration, this GPO is linked to OU ICT, right? Within this OU, is there this computer account? Besides, only administrator could check the computer configuration, and the domain users could not see the computer configuration. So to check whether the computer configuration is applied or not, we could run the CMD as administrator.

19001-11.png

Besides, as for the 2 GPOs desktop wallpaper and lock screen image, According to this official document:

"By default, lock screen can not be changed by GPO in Windows 10 Professional, with this script you can change it to comply with corporate image."

For more information, we could refer to:
https://gallery.technet.microsoft.com/scriptcenter/Change-Lock-Screen-and-245b63a0


Best regards,
Hannah Xiong



0 Votes 0 ·
11.png (13.1 KiB)
HannahXiong-MSFT avatar image
0 Votes"
HannahXiong-MSFT answered ·

Hello,

Thank you so much for posting here.

To troubleshoot the issue, we could check the following points:

1, As per the three GPOs, there are computer configuration and user configuration. For User Configuration section, our Group Policy object must be linked to an OU with users objects. Then the users in this OU will apply the user setting within this GPO object. While for Computer Configuration, the GPO must be linked to an OU with computer objects.

We could kindly have a check whether they are correctly configured.

2, After the configuration, if we want GPO settings to refresh, we can run gpupdate /force command.

For several special GPO settings, such as folder redirection, drive map, Software Installation, Disk Quota, we must restart the machines or sign out and sign in the user account to refresh these GPO settings.

3, To check if the specific settings get applied or not, we could run “gpresult /h” to get a detailed group policy result report.

If it is computer configuration,

  1. Logon one client with the Administrator account.

  2. Open CMD, run as administrator.

  3. Type gpresult /h C:\report.html and click Enter.

  4. Open report file to check the policies under Computer Details.

If it is user configuration,

  1. Logon one client with domain user account who is within the OU linked by the GPO.

  2. Create a new folder in C drive named Folder.

  3. Open CMD, type gpresult /h C:\Folder\report.html and click Enter.

  4. Open report file to check the policies under User Details.

For any question, please feel free to contact us.


Best regards,
Hannah Xiong



· Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

WRaspe-5601 avatar image
0 Votes"
WRaspe-5601 answered ·

Hi Hannah and thanks for the detailed explain.

GPOs for Computer configuration are not listed in the reports but User Configuration does.
The thing is when I switch GPO for google chrome from Computer to User configuration then it works, but users have to install it by hand.
I want it installed automatically.

It is weird because the GPO's for wallpaper, lock screen image and deploy google chrome only works on my DC server..
I have applied more GPOS based on computer and user config on my workstations and they working fine..

For me right know I just want only the 3 GPO desktop wallpaper, lock screen image and deploy google chrome to work..

· Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thameur-BOURBITA avatar image
0 Votes"
Thameur-BOURBITA answered ·

Hi,

GPOs for Computer configuration are not listed in the reports but User Configuration does.

To display the GPO settings for computer configuration , you have to launch gpresult command with a local administrator account on member machine.

Please don't forget to mark this reply as answer if it help you to fix your issue

· Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

HannahXiong-MSFT avatar image
0 Votes"
HannahXiong-MSFT answered ·

Hi,

You are welcome. Thank you so much for your feedback.

To check the computer configuration on the servers, we have to run as administrator to open CMD. Hope we could have a recheck.

As for the deployment of google chrome, there will be computer configuration and user configuration. If it is computer configuration, the GPO will be linked to the OU with computer accounts. And the deployment method is assigned.

17931-11.png

If it is user configuration, the GPO will be linked to the OU with user accounts. The deployment method could be published or assigned. If it is published, it will not install automatically when the user logs on to the computer. If we want it installed automatically, we could choose assigned deployment method. Besides, under the Deployment tab, choose "Install this application at logon".

17912-1.png

17913-2.png

According to our description, the GPOs work fine on our DC server, but not working on our workstation. May I know what the workstation is, member server or client? If it is client, what the version is?

Since the GPOs work on the DC server, there will be no problem with the configurations. Then to check whether it is applied or not on the workstation, we could run gpresult /h to check the result report as mentioned before.

For any question, please feel free to contact us.


Best regards,
Hannah Xiong



11.png (12.6 KiB)
1.png (22.5 KiB)
2.png (27.8 KiB)
· Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

WRaspe-5601 avatar image
0 Votes"
WRaspe-5601 answered ·

Hi Hannah,

Within OU ICT there is only few users. I have linked the google gpo with user configuration.

Within OU HRMComputers there is few windows client account. Here I have the google gpo with computer configuration. Only this configuration doesn’t work.

The GPO for wallpaper is working..
thank you so much for the assistance!

· 2 · Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,

You are welcome. Thank you so much for your feedback.

After the computer configuration, we could log on to the clients. Then run the CMD as administrator to run the command gpupdate /force. To check whether the setting is applied or not, we could run gpresult /h C:\report.html to check the Computer details.

Hope we could follow the steps to have a recheck. The report is helpful to check whether it is applied and why it is not applied.

Besides, we could kindly have a check of the install package. As we know, the install package has system requirements, such as Windows 10/8.1/8/7 64-bit. We could have a check whether the client computer could meet the system requirements.

19294-11.png


For any question, please feel free to contact us.

Best regards,
Hannah Xiong


0 Votes 0 ·
11.png (41.4 KiB)

Hello,

Does this question have any update or has this issue been solved? Also, for the question, is there any other assistance we could provide?

Thank you so much for your time and support.

Best regards,
Hannah Xiong

0 Votes 0 ·
WRaspe-5601 avatar image
0 Votes"
WRaspe-5601 answered ·

Hi Hannah,

No it’s okay, since it’s just a small question.
Thank you for the assist!

· 1 · Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,

You are welcome. Thank you so much for your feedback.

Thank you for sharing your experience here. If there is anything else I can do for you, please do not hesitate to let me know. Thanks.

Best regards,
Hannah Xiong

0 Votes 0 ·