"Offer Remote Assistance Helpers" local group NOT being created

hello,

i'm trying deploy offer remote assistance object in group policy.

computer settings/administrative policies/system/remote assistance -- offer remote assistance
set object enabled , "allow helpers remotely control computer" appropriate name/group listed.

i started off 2 (2) pc's in ou: win7 professional (pre-install lenovo) , win7 enterprise (ms 90-day trial). both patched.

both added ou @ same time, both rebooted accordingly apply policy.

however, win7 professional pc applied computer objects except "offer remote assistance". win7 enterprise system applied object no problem, creating local group appropriate user/group added within. confirmed adding group in object. win7 enterprise added group after reboot.

i have moved win7 professional system computers container , in (after appropriate restarts) , object still not apply.

with remote assistance not being 'big' deal, moved on deployment, adding 4 (4) more win7 professional (lenovo's) gpo.

two (2) applied offer remote assistance, 2 (2) did not.

moving ahead, added 4 (4) win7 professional (lenovo's) gpo.

one (1) applied object, 3 (3) did not yet on 3 (3) did not apply, able "gpupdate /force"...and applied!

added 4 (4) win7 professional (lenovo's) , none applied object. ran "gpupdate /force" , fine.

i went original 3 (3) win7 professional machines did not apply, ran "gpupdate /force"...did not apply object , not apply object.

 

so in total have 3 (3) machines refuse apply object , machines not apply object until run "gpupdate /force" cmd.

each machine has followed same rollout procedure:
boot, remove bloatware, update windows, add domain, add gpo, reboot, reboot - exception of win7 ent.

i have tried initial boot, add domain - in case bloatware had stepped on something. not apply until forced.

 

once again, object not applying. can change other computer object , update accordingly.

 

hi,

thanks posting.

for clients need run command “gpupdate /force”, may occur when network still not ready when clients rebooted. if ensure group policy applied when rebooting, may consider disabling fast logon feature. can change default setting using group policy mmc snap-in. feature enabled default, can disable using following policy: administrative templates\system\logon\always wait network @ computer startup , logon.

for more information, please refer to: http://technet.microsoft.com/en-us/library/cc780527(ws.10).aspx

did receive errors on 3 problematic pcs? if so, please let know.
 
issue can caused due firewall settings. please turn off firewall programs including windows firewall test. please ping problematic pcs pc offers assistance.

what result? if issue persists, please gather following files research.

a. gpsvclog.log
-------------------------
1. create key in following path log group policy function:
path: [hklm\software\microsoft\windows nt\currentversion\diagnostics\]
key name: gpsvcdebuglevel
vaule: 0x30002 (reg_dword)
 
2. enable printer preference item in gpo , restart problematic windows 7 pc , try log on computer.
 
3. copy gpsvclog.log file "%windir%\debug\usermode\"

b. resulting gpreport.html file
----------------------------------------------
please logon problematic computer , run following command:
 
gpresult /h gpreport.html

please send resulting gpresult.html us.

c. mpsreport
--------------------------
please generate mps directory service report on client reporting error. mps report utilized gather detailed information regarding system's current configuration. data collected assist me problem isolation. this:
 
a. download microsoft product support reports tool following link, according system architecture.
http://www.microsoft.com/downloads/details.aspx?familyid=cebf3c7c-7ca5-408f-88b7-f9c79b7306c0&displaylang=en
b. right click on downloaded mpsreports_x86.exe or mpsreports_x64.exe, , choose run administrator.
c. agree license agreement, , choose computer.
d. select general, internet , networking, business networks, server components, , click next.
e. after finishing collecting logs, please choose save result save .cab file, , send cab file workspace.
 
note: cab file may fail generated on machine. caused interference third-party application such antivirus program. if still cannot generated after attempt, please manually zip output files in following folder , send .zip file workspace.
"%systemroot%\mpsreports\dirsvc\logs

upload these file following workspace.
------------------------------------------------------------
can upload information files following link. (please choose "send files microsoft")

workspace url: (https://sftus.one.microsoft.com/choosetransfer.aspx?key=7d8dd56d-b1be-4a61-b86e-f2498f9e9255)    
password: 9zct3id0a9]enw

note: due differences in text formatting various email clients, workspace link above may appear broken.  please sure include text between '(' , ')' when typing or copying workspace link browser. meanwhile, please note files uploaded more 72 hours deleted automatically. please ensure notify me timely after have uploaded files. thank understanding.

thanks.
nina

 

---

this posting provided "as is" no warranties, , confers no rights.

Windows Server  >  Group Policy