Group Policy over WAN not applying.

[mercilon]

I have 70 remote offices and GPO works fine on my local subnets, but will not work at my remote offices. They are connect via VPN of DSL. GPUPDATE /force does not seem to make a difference. Any ideas?

 

[mrdenny]

I had the same problem. Check the minimum transfer rate setting (I can't remember the exact name of the setting). It controls how fast the network connection has to be to transmit the GPO.

Denny
MCSA (2003) / MCDBA (SQL 2000)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

(My very old site)

 

[pmf71]

do all remote offices have their own DC ?

 

[mlichstein]

I belive mrdenny is thinking of slow link detection.

Here is some info about slow link detection on 2000:

http://support.microsoft.com/default.aspx?scid=kb;en-us;227260

I think this info also applies to XP/2003, but I would have to double check.

The first thing to verify is that ICMP is enabled across the WAN. If not, slow-link detection will fail and GP will not be applied.

 

[mercilon]

So if I want to apply my gpo regardless of connection speed, I should do the following?

Disable: "Administrative Templates\System\Group Policy\Group Policy slow link detection" for both the Computer and User configs.

Are there any other settings that I need to change?

 

[mrdenny]

Yep, that's the one I was thinking of. thanks mlichstein

Denny
MCSA (2003) / MCDBA (SQL 2000)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

(My very old site)

 

[mercilon]

I'm still having problems with this. Under both the computer and user sections of the GPO, I have enabled the "Group Policy slow link detection" sections and set them to 0kb. My computers are still not updating - gpupdate does nothing. I know the policies are working fine, because they do apply to some of my centers, just not all of them. I do not have a DC at the locations and am just wondering what I could troubleshoot.

 

[mrdenny]

What does GPResult show?

Denny
MCSA (2003) / MCDBA (SQL 2000)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

(My very old site)

 

[mercilon]

For the trouble centers, only parts of the policy are applying. For example, under the User config, the Administrative templates apply fine, but the Windows Settings do not get pushed at all.