AD2003 - New GPOs Not Being Seen

active directory 2003 environment, single domain controller.  small environment (3 server 2003, 1 server 2012 r2).

i'm trying make new gpo, replace settings in gpo, plus add couple extras.  however, none of systems in domain see new gpo, no matter do.  i've triple-checked gpo linked entire domain, enabled, , enforced.  security filtering authenticated users, no wmi filtering.

i've run "gpupdate /force" multiple times, , rebooted each system, yet none of them see changes.  un-enabled gpo i'll replacing settings on, servers still see settings.  ended deleting old gpo, , yet servers still see settings in rsop.

gpresult shows new gpo's name, still has old gpo's settings, "n/a" name.  new settings in new gpo aren't listed.

any assistance appreciated.

you new gpo listed when run gpresult, i'm assuming mean it's listed under "applied group policy objects" rather list of filtered out?

in group policy management, select domain select "linked group policy objects" tab. should see both old , new policies listed here. have ensured new policy listed above old one, eg has lower numbered link order old one?

the order policies processed when they're @ same level handled link order, lowest (numerically speaking) policy being handled last. if new policy 2 , old 1 one they'll both applied, after first 1 (new one) processed move on process next (old one), overwrite settings conflict.

also, in terms of machines still seeing policies after you've disabled / removed them, keep in mind group policy changes take time picked up, they're not instant. running gpupdate won't magically them show up. depending on type. find if gpo isn't showing or doing expect when i'm sure i've done correctly best option leave it, check several hours later or next day. on desktop i'd reboot since that's easy way force update properly, since on server that's not option find patience next best option.

Windows Server  >  Windows Server General Forum