Windows 10: Group policy only works after "gpupdate /force"

Discus and support Group policy only works after "gpupdate /force" in AntiVirus, Firewalls and System Security to solve the problem; Hello, I want to enforce the Windows Defender Real-time Protection by group policy, but it isn't working as intended. I set the group policy setting... Discussion in 'AntiVirus, Firewalls and System Security' started by Paul_PROM, Mar 6, 2020.

  1. Paul_PROM Win User

    Group policy only works after "gpupdate /force"


    Hello,

    I want to enforce the Windows Defender Real-time Protection by group policy, but it isn't working as intended.

    I set the group policy setting "Turn off real-time protection" to "disabled".

    I can now check if the group policy loads for me, by using "gpresult /V /SCOPE COMPUTER". This shows the group policy being correctly applied.

    Unfortunately, I am still able to deactivate the real-time protection at this point, by simply going into Windows security and turning it off.

    If I reload the group policies on my PC after that with "gpupdate /force", the output of "gpresult /V /SCOPE COMPUTER" stays the same, but I am no longer able to disable real-time protection, because this setting is handled by an administrator. After the computer is rebooted, the real-time protection can be disabled again.

    Some things I already tried:

    -wait for the DC to actually apply the settings,

    -enforce the group policy

    -disable fast boot on the pc

    -loopback processing, both in merge mode, aswell as replace

    -checking possible conflicts with "microsoft policy analyzer"

    -giving the policy a high priority

    Is there anything else I could try to make sure the group policy works correctly?

    Any help is much appreciated.

    :)
     
    Paul_PROM, Mar 6, 2020
    #1
  2. Nikhar_K Win User

    Updating Group Policy Objects

    Hi,



    Thank you for writing to Microsoft Community Forums.



    I understand that you are unable to find few Group policy settings in Group Policy editor.



    I would suggest you to have a look at the article on
    gpupdate
    and try updating the Group Policy settings.



    However, we do have a dedicated forum for issues concerning to Group Policy, let me point you in the right direction. I would suggest you to post your query in

    TechNet forums
    , where we have support professionals who are well equipped with the knowledge on Group Policy editor to assist you accordingly.



    Regards,

    Nikhar Khare

    Microsoft Community - Moderator
     
    Nikhar_K, Mar 6, 2020
    #2
  3. Error on gpupdate /force

    Hello -KELLY-,

    I am Matt, an Independent Advisor and a specialist technician. I would like to assist you with this and hopefully I can help you to resolve this issue promptly.

    Firstly I would be seeing what group policies are applied for that user and device. Login as the user in question and then;

    1. Open Run Dialog (Windows Key + R)

    2. Type "RSOP.MSC" and press enter.

    3. Run the rsop scan this will give you a nice gui of all the GPO's applied to both user and computer.

    Using this information you can then match up with the group policies on the domain controller. You may find the issues you are getting are simply permission based issues. eg. computer in wrong OU or user has wrong security group permissions.

    I would also try logging into the device as another user and run the gpupdate /force and see if you get the same issues. This will also allow you to see if it is a user issue, device issue or server issue.

    Please let me know how you go with this so I can provide more solutions for you to try.

    Kind Regards,
     
    TechServices33, Mar 6, 2020
    #3
  4. -KELLY- Win User

    Group policy only works after "gpupdate /force"

    Error on gpupdate /force

    I got Windows 10 Enterprise version 1803, and it is client machine of our internal domain controller in our network.

    I just found out it showed up the error as below when I executed gpupdate /force from command prompt with Administrator permission.

    -------------------------

    Updating policy...

    Computer Policy update has completed successfully.

    The following warnings were encountered during computer policy processing:

    Windows failed to apply the {F312195E-3D9D-447A-A3F5-08DFFA24735E} settings. {F312195E-3D9D-447A-A3F5-08DFFA24735E} settings might have its own log file. Please click on the "More information" link.

    User Policy update has completed successfully.

    For more detailed information, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.

    -------------------------

    When I execute gpresult /h gpresult.html, and confirm the result, there are 3 errors listed as below.


    Group policy only works after "gpupdate /force" 42a68422-bdef-4019-9a5c-fd0f732505d7?upload=true.jpg


    First 2 errors link to the following Microsoft article after clicking more information links.

    Understand the Effect of Fast Logon Optimization and Fast Startup on Group Policy

    The error at the bottom give these 3 event IDs after clicking view log links.

    ---------------------------------------------

    (Event ID) 4016

    Starting {F312195E-3D9D-447A-A3F5-08DFFA24735E} Extension Processing. List of applicable Group Policy objects: (Changes were detected.)



    (Event ID) 1085

    Windows failed to apply the {F312195E-3D9D-447A-A3F5-08DFFA24735E} settings. {F312195E-3D9D-447A-A3F5-08DFFA24735E} settings might have its own log file. Please click on the "More information" link.



    (Event ID) 7016

    Completed {F312195E-3D9D-447A-A3F5-08DFFA24735E} Extension Processing in 15 milliseconds.

    ---------------------------------------------



    First of all I would like to identify what kind of group pollicy the "F312195E-3D9D-447A-A3F5-08DFFA24735E" is. I believe it is under the computer configuration, but there are a lot. How can I search it?

    Also if there is any action I should take next for these links, any advice will be appreciated..
     
    -KELLY-, Mar 6, 2020
    #4
Thema:

Group policy only works after "gpupdate /force"

Loading...
  1. Group policy only works after "gpupdate /force" - Similar Threads - Group policy works

  2. group policy

    in Windows 10 Gaming
    group policy: Not run edit group policy.msc https://answers.microsoft.com/en-us/windows/forum/all/group-policy/ebcb26df-8243-4a75-ba90-bf27ce8c3b90
  3. How to force compliance with Local group Policy settings ?

    in Windows 10 Support
    How to force compliance with Local group Policy settings ?: IN VAIN have I done the suggested registry change and also set Local Group Policy to ENABLED for "Turn off display of recent search entries in the File Explorer search box" - but search history still shows. 182838
  4. How to force compliance with Local group Policy settings

    in Cortana
    How to force compliance with Local group Policy settings: IN VAIN have I done the suggested registry change and also set Local Group Policy to ENABLED for "Turn off display of recent search entries in the File Explorer search box" - but search history still shows....
  5. Group Policy not working

    in Windows 10 Customization
    Group Policy not working: I have assigned the Group Policy to block the storage devices like USBs on windows Server 2019 and after that i have done the command: gpupdate /force but when i login on windows 10 with the Active Directory User on the same machine it is not working....
  6. Denied group policy for a group, but not working

    in AntiVirus, Firewalls and System Security
    Denied group policy for a group, but not working: I have a group policy , and need to deny that for a group of people. I created a universal security group and added to delegation- advanced - and allowed read and denied apply group policy. But it not working and the the group policy is still applied to that group of people....
  7. How to force Group Policy Update in Windows 10

    in Windows 10 News
    How to force Group Policy Update in Windows 10: [ATTACH]If you want to force a Group Policy Update in Windows 10, you will […] This article How to force Group Policy Update in Windows 10 first appeared on TheWindowsClub.com. read more...
  8. Error on gpupdate /force

    in Windows 10 Customization
    Error on gpupdate /force: I got Windows 10 Enterprise version 1803, and it is client machine of our internal domain controller in our network. I just found out it showed up the error as below when I executed gpupdate /force from command prompt with Administrator permission....
  9. Group Policy Editor not working

    in AntiVirus, Firewalls and System Security
    Group Policy Editor not working: I installed Group Policy Editor on my windows 10 home computer and it installed fine. But when I try to enable Windows Defender AV Signature Updates (specify the day of the week on which to check for definition updates) and select (every day) it will not enable. When I hit...
  10. Group Policy

    in Windows 10 Support
    Group Policy: Hello. I have just had a virus that disabled My Firewall through Group edit. Problem is, I don't have group edit. With the store being broken, its bad. Any suggestions. 43965