Policies Not Applying to some PCs Intermittently

Hello,

We have a very odd problem with about ten PCs out of a total of about
1500 that we manage. We have policies linked to OUs containing
computers and a few computers are intermittently not receiving them or
applying them. The PCs are in the correct OUs and security groups.

When we go to the computer and run gpupdate /force all of the policies
apply. Then a day or two later, the same PCs will experience the
problem again. Each time, we run gpupdate /force and the PCs are fine
again for a few days or even a week. Also, the problem computers
experience the trouble at random times. The ten PCs don't all have
the same problem at the same time. And the ten PCs are different Dell
models.

We noticed this because we couldn't RDP to them or remotely manage
them. So we went and checked to see if they were powered on. They
were. When we logged on, we saw that the PCs were not applying our
Firewall policy, which allows us to RDP and remote desktop.

On a couple of the computers, I setup a scheduled task to run every 20
minutes that runs gpupdate /force which has been working well. But
with more computers experiencing this, I need to find a solution
instead of applying band aids.

I'd appreciate any suggestions. Thanks in advance.

Greg

Greg,

Greg H wrote:
> We noticed this because we couldn't RDP to them or remotely manage
> them. So we went and checked to see if they were powered on. They
> were. When we logged on, we saw that the PCs were not applying our
> Firewall policy, which allows us to RDP and remote desktop.
>
> On a couple of the computers, I setup a scheduled task to run every 20
> minutes that runs gpupdate /force which has been working well. But
> with more computers experiencing this, I need to find a solution
> instead of applying band aids.

Is there anything logged in the event log? Once the clients experience
the problem - can you confirm that the policies you put into place are
"reverted" to default behavior? What's rsop.msc saying about that? Are
those 24x7 on machines?

cheers,

Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste