GPO Policy ‘Applied’ but not taking effect unless gpupdate /force is run

group-policyinternet explorerwindows 7windows-server-2008-r2

I do not yet have a 2012 DC or a Win 8 machine to manage IE 10 / 11 settings via GPMC. So I have created a policy with a registry setting so that users in a specific OU get specific .PAC settings in IE 11.

This is a user policy – that is linked and enforced at the specific OU level. It is the last processed User Policy. It appears in the top GPRESULT command on the workstations, however the policy is not listed below the policy list when you run with a /v for verbose – is this because it is a registry change? Or part of the issue?

I can see the policy being found, downloaded AND applied in the GP logs on multiple workstations. There no errors from any system for me to track down.

If I open IE after logging on (with an account in the specific OU), I do not see the settings for the PAC file. If I close IE and run GPUPDATE /Force, I can open IE and see the settings and note that they do work.

The policy is only for users in this OU, it is set for Authenticated Users as it applies to all users in the OU – though I have added a few test accounts for my use.

Best Answer

the simple solution in this case would be running the gpupdate /force command throughout the specified OU. although i'm eager to know if you found another solution.