Windows 10 Windows Primary domain controller is not being used as primary

jharmon

New Member
I am trying to update GPOs on the client end. I keep running into an error.
C:\Users\jharmon>gpupdate
Updating policy...

Computer policy could not be updated successfully. The following errors were encountered:

The processing of Group Policy failed. Windows attempted to read the file \\Corp.Shearer.com\SysVol\Corp.Shearer.com\Policies\{5284F996-7C50-432F-B9F5-BE5936A853C2}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
User Policy update has completed successfully.

To diagnose the failure, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.



GPRESULT /R yields:

OS Configuration: Member Workstation
OS Version: 10.0.19045
Site Name: N/A
Roaming Profile: N/A
Local Profile: C:\Users\jharmon
Connected over a slow link?: Yes


USER SETTINGS
--------------
CN=*********,OU=HQ Users,OU=Headquarters,OU=Shearer,DC=Corp,DC=Shearer,DC=com
Last time Group Policy was applied: 12/14/2022 at 2:05:08 PM
Group Policy was applied from: ************
Group Policy slow link threshold: 500 kbps
Domain Name: ******
Domain Type: Windows 2008 or later

Applied Group Policy Objects
-----------------------------
N/A

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Start Menu & Personalization
Filtering: Denied (Security)

Local Group Policy
Filtering: Not Applied (Empty)

Basic Security
Filtering: Denied (Security)

The user is a part of the following security groups
---------------------------------------------------

What we have found so far is that our end devices are trying to reach our backup Domain Controller even when they are being forced to contact the Primary.

Does anyone have any insight?
 
Back
Top