GPO(s) not being applied, Current Bandwidth >= Bandwidth Threshold?

-

we've had rash of group policies "stop" applying. today spent of day troubleshooting , here's i'm at.

rsop.msc, when @ "display gpos , filtering status"

cn={8f0af15b-ca97-4630-b0cf-17be7017d128},cn=policies,cn=system,dc=unitedcamera,dc=local
not applied (unknown reason)

found information on how turn on gpsvc.log try , more information. find around particular gpo this:

...
gpsvc(31c.f30) 15:15:29:298 getbandwidthestimate returned bandwidth = 640584.
gpsvc(31c.f30) 15:15:29:298 getbandwidthestimate returned latency = 0.
gpsvc(31c.f30) 15:15:29:298 getbandwidthestimate returned cost = 0.
gpsvc(31c.f30) 15:15:29:298 getbandwidthestimate returned connection type = 6.
gpsvc(31c.f30) 15:15:29:298 getbandwidthestimate returned direct access = 0.
gpsvc(31c.f30) 15:15:29:298 isslowlink: bandwidth threshold (winlogon) = 500.
gpsvc(31c.f30) 15:15:29:299 isslowlink: wwan policy (system) = 0.
gpsvc(31c.f30) 15:15:29:299 isslowlink: current bandwidth >= bandwidth threshold.
gpsvc(31c.f30) 15:15:29:299 evallist: object <cn={8f0af15b-ca97-4630-b0cf-17be7017d128},cn=policies,cn=system,dc=unitedcamera,dc=local> cannot accessed
...

in case both client , dc virtual machines on same physical hardware. watching through vm console not see excessively high virtual network utilization on either machine. same problem has been seen between physical clients , our physical dc, don't think it's vm related.

problem started 3 weeks ago, unfortunately our change tracking isn't sufficient tell if did patching or updates clients or servers may causing this.

i've read couple technet posts on group policy slow link detection treatise on group policy troubleshooting–now gpsvc log analysis!

both informational, neither helped me understand may root cause of problem or can reach resolution.

hi,

thanks post.

in opinion, problem may caused installing update ms16-072.

i suggest try fix problem following actions.

  1. add authenticated users group read permissions on group policy object (gpo).
  2. if using security filtering, add domain computers group read permission.

for more information, refer articles below.

ms16-072: security update group policy: june 14, 2016

https://support.microsoft.com/en-us/kb/3163622

ms16-072 – known issue – use powershell check gpos

https://blogs.technet.microsoft.com/poshchap/2016/06/16/ms16-072-known-issue-use-powershell-to-check-gpos/

best regards,

jay

please remember mark replies answers if , un-mark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com.



Windows Server  >  Group Policy



Comments

  1. Randy TurnerOctober 9, 2024 at 2:23 AM

    What a fantastic perspective! I appreciate the positivity and motivation you bring to your writing. Looking forward to more!

    ReplyDelete
  2. Kevin SaenzOctober 10, 2024 at 2:33 AM

    Check if the network connection Domain esia slow or unstable, as high bandwidth usage can delay or prevent GPO(s) from being applied properly.






    ReplyDelete

Post a Comment

Popular posts from this blog

WMI Repository 4GB limit - Win 2003 Ent Question

-
Image
hi there, i've question size limit on wmi repository (being 4gb). if isn't correct place post this, apologies , can let me know wheere post this? i've come across few servers running citrix have reached limit on wmi repository size , need install ibm director agent hw monitoring. during install getting 'out of disk space' errors entered in mofcomp.log: "(mon apr 02 04:10:36 2012.172843) : error occurred while processing item 4: (mon apr 02 04:10:36 2012.172843) : error number: 0x8004103b, facility: wmi description: out of disk space" when error number http://msdn.microsoft.com/en-us/library/windows/desktop/aa394559%28v=vs.85%29.aspx i see this: wbem_e_out_of_disk_space 2147749947 (0x8004103b) disk out of space or 4 gb limit on wmi repository (cim repository) size reached. windows xp , windows 2000/nt:   disk out of space. i'm wondering if there reason why limit set 4gb or can increase needs be? can't seem find reas...
Read more

Change home folder default permission?

-
i have searched on , can't seem find similar trying do. using windows server 2003 active directory. when create new user account on domain, use profile tab specify home directory user. when user logs in first time, active directory creates folder in specified path. working correctly. problem gives user full control on folder. has caused lot of problems because "clever" users have discovered thay can change permission on folder or subfolders beneath it. because don't want staff looking @ "sensitive" files. of course doesn't work since can take ownership of file , give myself permissions. causes trouble failed backups, inability scan these folders viruses, migration new storage etc. on occasion 1 of these users call me , ask file or folder restored, , @ point discover not have backup of files , cannot restore them. give them lecture, have on 2500 users, , can't talk them all. right have create account , login teh folder created, go take away full contr...
Read more