Home

Windows 10 1903 Group Policy Issues after OSD

%3CLINGO-SUB%20id%3D%22lingo-sub-856855%22%20slang%3D%22en-US%22%3EWindows%2010%201903%20Group%20Policy%20Issues%20after%20OSD%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-856855%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe've%20recently%20started%20deploying%20Windows%2010%201903%20(First%20Win%2010%20version%20too...)%20with%20SCCM%201902%20with%20MDT%20and%20group%20policy%20appears%20to%20apply%2C%20according%20to%20the%20logs%20but%20then%20we%20find%20certain%20settings%20not%20actually%20applied%2C%20even%20though%20a%20gpresult%20shows%20them%20as%20being%20applied.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EChecking%20the%20various%20reg%20keys%20etc.%20for%20our%20policy%20settings%20on%20a%20client%2C%20I%20have%20seen%20that%20all%20of%20our%20GPO%20settings%20get%20applied%20and%20then%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3Esome%20but%20not%20all%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSTRONG%3Eget%20mysteriously%20removed%2C%20for%20example%20the%20Interactive%20Logon%20message%20gets%20applied%20but%20then%20removed%2C%20as%20in%20the%20registry%20value%20is%20removed.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERunning%20a%20gpupdate%20%2Fforce%20after%20this%20has%20happened%2C%20appears%20to%20fix%20the%20issue.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%26nbsp%3Busing%20the%20SMSTSPostAction%20variable%20to%20run%20a%20script%20or%20command%20to%20update%20Group%20Policy%2C%20doesn't%20work%20either%2C%20the%20script%2Fcommand%20runs%20(As%20per%20log%20files)%20but%20the%20above%20does%20still%20occur%20until%20we%20run%20a%20gpupdate%20%2Fforce%20(A%20ordinary%20gpupdate%20does%20nothing%2C%20so%20most%20of%20the%20time%20reboots%20etc.%20do%20nothing).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20have%20no%20Group%20Policy%20related%20Group%20Policy%20settings%20(As%20in%20the%20ones%20that%20control%20whether%20CSEs%20process%20during%20slow%20links%20etc.%20and%20whether%20they%20process%20even%20though%20there%20are%20no%20changes)%20and%20we%20cannot%20find%20any%20other%20reason%20for%20this%20not%20to%20work%20correctly.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20think%20until%20we%20find%20a%20fix%2C%20using%20the%20RunOnce%20reg%20key%2Fvalue%20maybe%20the%20workaround...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWould%20someone%20at%20Microsoft%20be%20able%20to%20confirm%20whether%20this%20is%20a%20confirmed%20issue%20at%20Microsoft%20and%20whether%20there%20is%20a%20fix%20for%20it%20please%3F%20Or%20if%20there%20is%20a%20fix%20incoming%20as%20potentially%20some%20of%20our%20security%20related%20GPOs%20are%20not%20being%20correctly%20applied.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMany%20thanks%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ELuke%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-856855%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3E10%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3E1903%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDeployment%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Egpo%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EGroup%20Policy%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eosd%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESystem%20Center%20Configuration%20Manager%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-879704%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%2010%201903%20Group%20Policy%20Issues%20after%20OSD%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-879704%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F409490%22%20target%3D%22_blank%22%3E%40techyluke%3C%2FA%3EHi%2C%20I%20seem%20to%20be%20having%20a%20similar%20issue..%20did%20you%20get%20any%20solution%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-888305%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%2010%201903%20Group%20Policy%20Issues%20after%20OSD%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-888305%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F416493%22%20target%3D%22_blank%22%3E%40vandammages%3C%2FA%3E%26nbsp%3BUnfortunately%20not%2C%20disappointed%20that%20Microsoft%20are%20not%20acknowledging%20this%20issue%2C%20this%20is%20potentially%20an%20enterprise%20issue%20affecting%20lots%20of%20customers...%20We%20thought%20things%20were%20improved%20after%20installing%20the%20September%20cumulative%20update%2C%20but%20it%20appears%20there%20maybe%20still%20some%20issues%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-922063%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%2010%201903%20Group%20Policy%20Issues%20after%20OSD%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-922063%22%20slang%3D%22en-US%22%3EI%20have%20just%20run%20into%20the%20same%20problem.%20We%20have%20a%20computer%20policy%20to%20automatically%20connect%20clients%20to%20corporate%20WiFi.%20Upon%20inspection%20the%20computer%20looks%20fine%20and%20the%20policy%20looks%20like%20it's%20enabled%2C%20but%20once%20we%20reboot%20an%20logon%20as%20a%20user%20it's%20gone.%20Gpresult%20%2Fr%20says%20it's%20applied%2C%20but%20the%20computers%20sees%20networks%20it's%20not%20allowed%20to%20see%20and%20no%20corporate%20Wifi%20is%20to%20be%20found.%20Manual%20gpupdate%20on%20the%20computer%20will%20solve%20it%2C%20but%20that's%20not%20really%20a%20viable%20fix.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-965651%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%2010%201903%20Group%20Policy%20Issues%20after%20OSD%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-965651%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20having%20the%20exact%20issue.%20Please%20reply%20if%20any%20one%20come%20to%20a%20solution.%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F409490%22%20target%3D%22_blank%22%3E%40techyluke%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-965693%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%2010%201903%20Group%20Policy%20Issues%20after%20OSD%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-965693%22%20slang%3D%22en-US%22%3E%3CH1%20id%3D%22toc-hId-2017673761%22%20id%3D%22toc-hId-2017673761%22%3EHi%3CBR%20%2F%3EAfter%20trying%20many%20things%20to%20fix%20the%20issue.%20I%20have%20turned%20the%26nbsp%3B%3CSTRONG%3E%3CEM%3EContinuous%20Availability%3C%2FEM%3E%3C%2FSTRONG%3E%26nbsp%3Bon%20the%20shared%20servers%2C%20the%20issue%20seems%20to%20be%20fixed%20after%20turning%20it%20off.%3C%2FH1%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F409490%22%20target%3D%22_blank%22%3E%40techyluke%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
techyluke
New Contributor

Hi,

 

We've recently started deploying Windows 10 1903 (First Win 10 version too...) with SCCM 1902 with MDT and group policy appears to apply, according to the logs but then we find certain settings not actually applied, even though a gpresult shows them as being applied.

 

Checking the various reg keys etc. for our policy settings on a client, I have seen that all of our GPO settings get applied and then some but not all get mysteriously removed, for example the Interactive Logon message gets applied but then removed, as in the registry value is removed.

 

Running a gpupdate /force after this has happened, appears to fix the issue.

 

However using the SMSTSPostAction variable to run a script or command to update Group Policy, doesn't work either, the script/command runs (As per log files) but the above does still occur until we run a gpupdate /force (A ordinary gpupdate does nothing, so most of the time reboots etc. do nothing).

 

We have no Group Policy related Group Policy settings (As in the ones that control whether CSEs process during slow links etc. and whether they process even though there are no changes) and we cannot find any other reason for this not to work correctly.

 

I think until we find a fix, using the RunOnce reg key/value maybe the workaround...

 

Would someone at Microsoft be able to confirm whether this is a confirmed issue at Microsoft and whether there is a fix for it please? Or if there is a fix incoming as potentially some of our security related GPOs are not being correctly applied.

 

Many thanks,

 

Luke

8 Replies

@techylukeHi, I seem to be having a similar issue.. did you get any solution?

@vandammages Unfortunately not, disappointed that Microsoft are not acknowledging this issue, this is potentially an enterprise issue affecting lots of customers... We thought things were improved after installing the September cumulative update, but it appears there maybe still some issues

I have just run into the same problem. We have a computer policy to automatically connect clients to corporate WiFi. Upon inspection the computer looks fine and the policy looks like it's enabled, but once we reboot an logon as a user it's gone. Gpresult /r says it's applied, but the computers sees networks it's not allowed to see and no corporate Wifi is to be found. Manual gpupdate on the computer will solve it, but that's not really a viable fix.

Hi 

 

I'm having the exact issue. Please reply if any one come to a solution.@techyluke 

Hi
After trying many things to fix the issue. I have turned the Continuous Availability on the shared servers, the issue seems to be fixed after turning it off.

@techyluke 

We have this issue on 1909 some security settings not applied or removed later. I'm not sure what to configure for our server shares.


@techyluke wrote:

@vandammages Unfortunately not, disappointed that Microsoft are not acknowledging this issue, this is potentially an enterprise issue affecting lots of customers...


Did you report this to Microsoft Support?

 

The community forum is not exactly the best place for such expectations ;)

Yes we'are opened a support ticket for this.
Related Conversations
Extentions Synchronization
Deleted in Discussions on
3 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
36 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
29 Replies