Unable to push Group Policy Objects (GPOs) to client computers

Products

• Endpoint Encryption

Issue/Introduction

Symptoms
Group Policy Objects are not taking effect on client computers. The following information is seen in the system's Event Viewer log:

Event Type: Warning Event Source: Application Management
Event Category: None
Event ID: 108
Date: 6/13/2007
Time: 2:36:35 PM
User: NT AUTHORITY\SYSTEM
Computer: 104087A
Description: Failed to apply changes to software installation settings. Software installation policy application has been delayed until the next logon because an administrator has enabled logon optimization for group policy. The error was : The group policy framework should call the extension in the synchronous foreground policy refresh. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning Event Source: Application Management
Event Category: None
Event ID: 101
Date: 6/13/2007
Time: 2:36:35 PM
User: NT AUTHORITY\SYSTEM
Computer: 104087A
Description: The assignment of application SEE Framework Client from policy Deploy Encryption ASC failed. The error was : The group policy framework should call the extension in the synchronous foreground policy refresh. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Resolution

In this situation, a group policy setting for Logon Optimization is causing the GPO settings to fail. To fix this issue, disable Logon Optimization. Information on Logon Optimization, including how to disable it, can be found here: http://technet2.microsoft.com/windowsserver/en/library/7d2fc477-5a3a-42b9-94e3-0f0848df2ab91033.mspx?mfr=true