Forum Discussion
Unable to process group policy objects—gpsvc log shows many "deferring search" entries
A few weeks ago, we recently undertook the following operations (in a single day): Commission two new Win2019 DCs in existing domain containing three Win2012R2 DCs Decommission old Win2012R2 DCs ...
did you find anything from the event logs on the member servers and workstations?
- No, most of the messages were informational in nature and didn't mention any errors.
- https://www.dell.com/support/kbdoc/en-in/000135060/troubleshooting-group-policy-processing-errors-in-an-active-directory-domain , This could help you. Also I would suggest you to upgrade your SYSVOL replication from FRS to DFSR … I think 2016/2019 DCs no longer support FRS replication.
Thanks for your quick response!
I confirmed they're using DFSR during the AD works, so it's definitely not that.
As for the Dell article, the bit on secure channel looks somewhat promising as this point—In some cases, it may be necessary to remove the affected machine from the domain, reset its AD computer account, and rejoin it to the domain in order to reset its secure channel—was done to resolve it on a test domain member.
