client workstations are putting themselves in the wrong site

[Antony17]

Hi,

We have a setup here where we have 16 sites around the world.
I have recently set up a group policy at the site level which
sets a user's internet proxy settings depending on which office
they are in to prevent internet traffic travelling needlessly
over our internal WAN links.

For some reason, some workstations in our India offices are
picking up the group policy which is set on our main HQ office
in the UK so are getting the wrong internet proxy settings. I've
looked into this and can't figure it out. AD Sites and Services
is correctly configured with all 16 sites in it and all relevant
subnets attached to these sites. Site links have been set up
reflecting the actual WAN links and the cost set to reflect the
speed of these links.

The clients all have the correct IP address and subnet (set through
DHCP) for the India site, but they are not picking up the Indian
proxy settings. DNS looks okay, DCDiag shows no errors on the 2
Indian domain controllers and both of the Indian domain controllers
are GCs. I can only think that the Indian DCs are not responding
fast enough, but this is hard to believe considering they are powerful
machines, there are only 500 users at the site and the link between
the Indian site and the UK site is only a 1Mbit connection.

Has anyone any ideas why this would happen or something that should
be set but isn't?

Many thanks for any help you can give,

Antony

 

[Sasha]

Hi Antony

Just an idea: Did someone apply another GP on OU level? It can be this
because wrong proxy affects only some WS's and GP on OU level is applied
after your GP on Site level.



Regards

Sasha

 

[Charles McMillan]

Are the workstations in the proper OU or are they in the
Default Computer OU? I am guessing you have an OU
structure that mirrors you sites, if so ensure that the
workstations are in the correct OU. This often happens if
the workstations are joined to the Domain without pre-
staging the workstation names in their proper OU.

Mack.

 

[Antony17]

Hi thanks for the replies,

Sasha, no it is definitely applying the group policy from the
UK site. I have a tool called Active Administrator which lets
you show the Resultant Set of Policies for a user and computer
and this shows it to be applying the UK site policy instead of
the Indian site policy.

Mack - I'm not sure what you mean. The workstation is in the
correct OU for our Indian workstations, though the OU
structure doesn't mirror our site structure. I'm applying
the policy to the whole Indian site in AD Sites and Services.

Thanks

Antony