Group Policy Update failed

Question

Hello Team,

i Have Problem :( When I try to update the GPO, I receive these errors. I have checked DFSR, and it is clean. The errors are "RPC server is unavailable" or "Access denied." The GPO is applied on some users' computers, but not on all of them, although I receive these errors for all the users."

Any ideas?
Thanks

Answer 1

Hello

Thank you for posting in Q&A forum.

For "RPC server is unavailable" Error:

1. Ensure the clients have correct network and DNS settings.
2. Ensure that the firewall on the client machines is not blocking the necessary ports. Specifically, check that ports 135 (RPC) and 445 (SMB) are open.
3. Ensure that the following services are running on both the client and server:

• Remote Procedure Call (RPC)

• RPC Endpoint Mapper

• DCOM Server Process Launcher.

For "Access denied" Error:

1. Ensure that the Authenticated Users group has Read permissions on the SYSVOL folder and the GPO itself.
2. Try running gpupdate /force from an elevated command prompt on the client machines to see if the policy updates correctly.
3. Verify that the user or computer accounts have the necessary permissions to apply the GPO. You can do this by checking the Delegation tab in the Group Policy Management Console (GPMC).

Additional Troubleshooting Steps:

1. Run gpresult /r on the client machines to see which policies are being applied and if there are any errors.
2. Look at the Event Viewer on both the client and server for any related errors or warnings that might give more insight into the issue.
3. Ensure that there are no replication issues between domain controllers. You can use the repadmin /showrepl command to check the replication status.

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

Hi @rihon

How many domain controllers you have ?

Did you check if the closest domain controllers is reachable by impacted client ?

are you able to browse the sysvol share from an impacted computer ?

the error RPc are unavailable is caused generally by a network issue

---

Please do't forget to accept helpful answer

---