Hello, I have a really weird problem that i've been fighting with for a few days now. In our company we have 2 DCs, all was well and all the policies i set on the main DC synchronised to correct computers/users. However, starting this week, whenever i try to gpupdate /force on my PC, i get an error:
"Computer Policy could not be updated successfully. The following errors were encountered:
The processing of Group Policy failed. Windows could not determine the computer account to enforce Group Policy Settings. This may be transient. Group Policy Settings, including computer configuration, will not be enforced for this computer."
And right below that "User Policy update has completed successfully". Which means, only the computer GPOs don't apply.
What i tried:
- Reconnecting the pc to the domain
- Checked DNS – everything is good
- Checked Event Viewer – only interesting thing there was an Error in Windows Logs -> System with the same message i got in the cmd. No error logs in Windows -> GroupPolicy -> Operational
- klist matches the DC and the allowed encryption on the PC object in the domain
- Test-ComputerSecureChannel returns true, nltest is also successful
- Connection to DC on all the important ports is fine
- Uninstalling all the recent KB Patches
Im kinda running out of ideas, and the bigger problem is that other computers in the company started getting similiar symptoms. Any ideas or even a direction? Am i missing something obvious?
Source: r/sysadmin · by /u/hetter12x