Group Policy Isn't Applying To All Users

[BrandonPimm]

Hello everyone. Let me start off by saying that this is my first time posting here and that I am VERY new to Windows Server 2008. I apologize if this topic has already been discussed, but I searched every where for it but was unable to find the thread if it does exit.

 

I wound up as the administrator for Windows Server 2008 Terminal Server at work, and have run into a strange problem that I have been unable to solve. Here is the issue:

 

I need to add a few URL's to the "Trusted Sites" zone of IE across all users. I found a setting in Group Policy called "Site to Zone Assignment List" where I assign certain sites to each zone, which I did. The thing is, it seems to have only worked for some of the users, but not everyone. By enabling the policy, it locks out the possibility of adding sites manually from IE, so I can't even log into those accounts and do it that way for just those people. I created about 40 identical users, all in the Remote Desktop Users group. It also didn't work for the Administrator account.

 

I logged into one of the users that it didn't work for and did a "gpupdate /force" and checked the event viewer to see if it worked or failed. There was no entry regarding group policy.

 

I followed the same procedure while logged into one of the users that the Group Policy was working and got exact same results (nothing in the event viewer after a gpupdate /force).

 

I also did "gpresult /r" for the two users.

 

This is what I got for the user that it was't working with:

 

Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\ats10>gpresult /r
Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001
Created On 7/11/2012 at 3:47:39 PM

RSOP data for EMTSC02\ats10 on EMTSC02 : Logging Mode
------------------------------------------------------
OS Configuration: Standalone Server
OS Version: 6.1.7600
Site Name: N/A
Roaming Profile: N/A
Local Profile: C:\Users\ats10
Connected over a slow link?: No

USER SETTINGS
--------------
Last time Group Policy was applied: 7/11/2012 at 3:25:58 PM
Group Policy was applied from: N/A
Group Policy slow link threshold: 500 kbps
Domain Name: EMTSC02
Domain Type: 
Applied Group Policy Objects
-----------------------------
N/A
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Local Group Policy
Filtering: Not Applied (Empty)
The user is a part of the following security groups
---------------------------------------------------
None
Everyone
Remote Desktop Users
BUILTIN\Users
REMOTE INTERACTIVE LOGON
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
This Organization
LOCAL
NTLM Authentication
Medium Mandatory Level
C:\Users\ats10>

 

And from the user that it was working:

 

Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\bp111y>gpresult /r
Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001
Created On 7/11/2012 at 2:55:09 PM

RSOP data for EMTSC02\bp111y on EMTSC02 : Logging Mode
-------------------------------------------------------
OS Configuration: Standalone Server
OS Version: 6.1.7600
Site Name: N/A
Roaming Profile: N/A
Local Profile: C:\Users\bp111y
Connected over a slow link?: No

USER SETTINGS
--------------
Last time Group Policy was applied: 7/11/2012 at 1:48:13 PM
Group Policy was applied from: N/A
Group Policy slow link threshold: 500 kbps
Domain Name: EMTSC02
Domain Type: 
Applied Group Policy Objects
-----------------------------
N/A
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Local Group Policy
Filtering: Not Applied (Empty)
The user is a part of the following security groups
---------------------------------------------------
None
Everyone
Remote Desktop Users
BUILTIN\Users
REMOTE INTERACTIVE LOGON
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
This Organization
LOCAL
NTLM Authentication
Medium Mandatory Level
C:\Users\bp111y>gpupdate /force
Updating Policy...
User Policy update has completed successfully.
Computer Policy update has completed successfully.

C:\Users\bp111y>

 

Let me know if that made sense and what other info you might need.

[ICTCity]

Ok that's really strange. The two users are on the same OU? We must find the difference between the two...