Incorrect Group Membership in GPResults

hello,

i have user not receiving user config portion of gpo.  occurred after user account removed specific group.  group denied read , apply permissions gpo.

even though user account has been removed group , aduc along adsi edit confirms this, gp still recognizes user being in group.

 

how clear in group policy manager?

 

hi allenr74,

 

so isolate issue, please answer following questions:

1.       how many domain controllers in location?

if there multimaster in location, don’t suggest infrastructure master located on global catalog server, if placed on global catalog server, never update anything.

2.       are users not receiving user configuration portion of gpo?

3.       does group policy object link ou contain user account?

 

meanwhile, please collect output of gpresult, group policy related events , paste forum further research.

 

the following information reference:

please assured infrastructure master responsible updating group-to-user references whenever members of groups renamed or changed. when rename or move member of group (and member resides in different domain group), group may temporarily appear not contain member. infrastructure master of group's domain responsible updating group knows new name or location of member. prevents loss of group memberships associated user account when user account renamed or moved. infrastructure master distributes update via multimaster replication.

 

for more information operations master roles, please refer to:

http://technet.microsoft.com/en-us/library/cc773108(ws.10).aspx

 

fsmo placement , optimization on active directory domain controllers

http://support.microsoft.com/kb/223346

 

troubleshooting active directory replication problems

http://technet.microsoft.com/en-us/library/cc738415(ws.10).aspx

Windows Server  >  Group Policy