Group policy settings not apply to windows 10

two possible simple solutions: - 'hook' the policy to each tree where you want to apply it - Exclude the deep freeze machines by only applying the root gpo to machines in a particular security group

gpupdate not doing anything may have something to do with the link speed detection - does windows detect it as being slow - ie. WAN? You can see this in gpresult. Gpresult should also tell you which gpos are being applied or not applied.

Ian

Why don't you use the IE administrative templates to set zone security as you want it?

1. Create a new GPO and link it at a level/OU where users will get it.
2. Browse the User Configuration\Policies\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page within GPO.
3. Choose each zone (such as entry "internet zone template") and reset security for the zone to desired level ("e.g. medium"). This will configure all sub entries in GPO for the zone (e.g. if doing this for internet zone, at "User Configuration\Policies\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone"

The key thing to remember here is GPO processing order. I have no idea if you have done a gpresult at client side or using GPMC's "group policy results" viewed the RSOP data for an affected user on a computer. This would have shown the combined net result of all group policies effective for the user and show if any GPOs are currently responsible for disabling javascript.

If you link your policy to process before any other existing GPO disables javascript the above will not help. You need to ensure this GPO is processed last. Depending on whether you use loopbacked policies (and their mode) this may mean linking to a path where the user is located or where the computer is located.