Troubleshooting Group Policy

Troubleshooting Group Policy can be a pain. I agree. When I try out new awesome Group Policy Preferences, or I experiment with the GP cmdlets, I am sometimes stumped. Here’s what we do when we are troubleshooting our own test environments on the Group Policy team: Read it like this: I have a problem. Did…

0

Group Policy Preferences Not Applying on Some Clients: Client-Side Extension, XMLLite

Group Policy Preferences quick tip: To ensure that preferences are applied to clients, make sure that clients have the CSEs and XMLLite installed If you’re like us, you’re seriously excited about Group Policy Preferences. You’re excited because you can’t wait to save yourself scripting time, and to use the rich administration UI and item-level targeting…

5

Group Policy Troubleshooting – helpful Event log categories

As many of you know Group Policy troubleshooting can be a bit of a challenge. If you have not made use of the Group Policy operational logs that were introduced in Windows Vista, you are missing out on an extremely handy troubleshooting tool. On any Vista or newer system, open the event viewer (eventvwr from…

2

Do I need to update my server to support new policies? When do I need to separate policies?

I just blogged about this very question over on my blog. Essentially the question we hear a lot is do I need to update Schema/Active Directory/Servers/functional modes etc to support a new client OS version. I wont revisit that Sometimes theres a need to separate policies for specific OS functions but not to “update” them….

4

Troubleshooting: Quick Fixes

  Everyone has their own troubleshooting quick checks; here are some that you may know well, and others you haven’t tried yet.   Logon/Logoff    Some policies applied only after the second logon, not after the first logon. What’s the deal?  Anything that is set to run synchronously won’t run until after the second logon….

4

Restoring Default Domain Policies and SYSVOL to their defaults

We have stated a number of times through a number of forums that its not a great practice to muck around with the Default Domain Policy and the Default Domain Controllers Policy. In fact its actually a really bad practice…same goes with the SYSVOL. Just dont screw around with it. We recommend if you want…

1