Error on gpupdate /force

Question

I got Windows 10 Enterprise version 1803, and it is client machine of our internal domain controller in our network.

I just found out it showed up the error as below when I executed gpupdate /force from command prompt with Administrator permission.

---

Updating policy...

Computer Policy update has completed successfully.

The following warnings were encountered during computer policy processing:

Windows failed to apply the {F312195E-3D9D-447A-A3F5-08DFFA24735E} settings. {F312195E-3D9D-447A-A3F5-08DFFA24735E} settings might have its own log file. Please click on the "More information" link.

User Policy update has completed successfully.

For more detailed information, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.

---

When I execute gpresult /h gpresult.html, and confirm the result, there are 3 errors listed as below.

First 2 errors link to the following Microsoft article after clicking more information links.

Understand the Effect of Fast Logon Optimization and Fast Startup on Group Policy

The error at the bottom give these 3 event IDs after clicking view log links.

---

(Event ID) 4016 

Starting {F312195E-3D9D-447A-A3F5-08DFFA24735E} Extension Processing. List of applicable Group Policy objects: (Changes were detected.) 

(Event ID) 1085 

Windows failed to apply the {F312195E-3D9D-447A-A3F5-08DFFA24735E} settings. {F312195E-3D9D-447A-A3F5-08DFFA24735E} settings might have its own log file. Please click on the "More information" link.

(Event ID) 7016

Completed {F312195E-3D9D-447A-A3F5-08DFFA24735E} Extension Processing in 15 milliseconds.

---

First of all I would like to identify what kind of group pollicy the "F312195E-3D9D-447A-A3F5-08DFFA24735E" is.  I believe it is under the computer configuration, but there are a lot. How can I search it?

Also if there is any action I should take next for these links, any advice will be appreciated..

Answer 1

Hello -KELLY-,

I am Matt, an Independent Advisor and a specialist technician. I would like to assist you with this and hopefully I can help you to resolve this issue promptly.

Firstly I would be seeing what group policies are applied for that user and device. Login as the user in question and then;

1. Open Run Dialog (Windows Key + R)
2. Type "RSOP.MSC" and press enter.
3. Run the rsop scan this will give you a nice gui of all the GPO's applied to both user and computer.

Using this information you can then match up with the group policies on the domain controller. You may find the issues you are getting are simply permission based issues. eg. computer in wrong OU or user has wrong security group permissions.

I would also try logging into the device as another user and run the gpupdate /force and see if you get the same issues. This will also allow you to see if it is a user issue, device issue or server issue.

Please let me know how you go with this so I can provide more solutions for you to try.

Kind Regards,

Answer 2

Hi, Matt. Thank you for the quick response.

Wow, I didn't know about the RSOP.MSC command at all. Is it like gpedit.msc with error information? This is very useful. I really apprecaite it!