UPM policies not getting applied

[John Francis1709160537]

I have the following 3 profiles configured as per the documentation from Carl.

 

 

But it looks like all the other GPOs are getting applied to the desktops (VDI) but just only these three don't get applied. Any thoughts Carl or others?

 

https://www.carlstalhood.com/group-policy-objects-vda-computer-settings/

 

 

[CarlStalhood]

Are the machines in the correct OU? The Group Policy Results wizard might give you enough info to find the problem.

[John Francis1709160537]

44 minutes ago, Carl Stalhood1709151912 said:

Are the machines in the correct OU? The Group Policy Results wizard might give you enough info to find the problem.

Yes Carl they are in the same OU where the desktops reside. 

 

It was all in XenDesktop 7 OU. I had all the desktops under Win10 persistent OU. This Win10 Persistent OU is below the XenDesktop 7 OU. I now moved all the three policies to WIN10 Persistent OU to make sure that it is in the same location where the VDI objects are. But, still nothing. I do not see these three getting applied at all. Unless there is something in the permissions I am saying do not apply group policy. I know some of the settings in your said, that for administrators do not apply the group policy. Which was set correctly. 

 

I am attaching the log file also which I see it written to my D drive.

 

 

UPM Log1.txt

[CarlStalhood]

What do you see when you run "Group Policy Results"?

[John Francis1709160537]

15 minutes ago, Carl Stalhood1709151912 said:

What do you see when you run "Group Policy Results"?

All the policies get applied except these three policies.

[Aseem Shaikh]

I believe this needs troubleshooting from GPO side as these policies are not even hitting the VDA's

There are few things you can check:

- Check in permission of GPO if there is deny set to authenticated users or domain computers or any other group? (Compare with a working GPO)

- Closely check the security and WMI filtering for any mis-configuration

- If you run GP modelling wizard under gpmc in context to the VDA and user account ,it shows these policy should apply? If no then we are talking about a policy config issue.

- For testing in the GPO details tab --> GPO status --> select enable, once done check if it helps

- If none of these work, enable gpsvc logging on a VDA, and share the log file along with GUID of one of these GPO's
https://blogs.technet.microsoft.com/mempson/2010/01/10/userenvlog-for-windows-vista2008win7/ 

Cheers,

Aseem