In an Active Directory Domain Services (AD DS) environment, you cannot use a Group Policy Object (GPO) to deploy applications for installation on client computers that are running Windows 7 or Windows Server 2008 R2. When you try to apply the GPO, you receive an error message that resembles the following:Additionally, the following event is logged in the Operational log under Applications and Services Logs:
Note This issue occurs when the client computer cannot communicate with any writable domain controllers (RWDC), and only a read-only domain controller (RODC) is available.
There is another symptom in which the GPO that has software installation settings is applied very slowly (for example, over ten minutes). The delay occurs when the RODC is the local domain controller and when many RWDCs are available for access through DNS. In this situation, the DC locator probes each RWDC that is returned from the DNS to determine whether it is a better candidate than the local RODC. When this delay occurs, the following event is logged:
Windows failed to apply the Software Installation settings
Log Name: Microsoft-Windows-GroupPolicy/Operational
Source: Microsoft-Windows-GroupPolicy
Event ID: 7016
Level: Error
User: SYSTEM
Computer: <hostname>
Description:
Completed Software Installation Extension Processing in <#> milliseconds. Event XML: <Event xmlns=""> http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-GroupPolicy" Guid="{<GUID>}" /> <EventID>7016</EventID> <Keywords>0x4000000000000000</Keywords> <Channel>Microsoft-Windows-GroupPolicy/Operational</Channel> </System> <EventData> <Data Name="CSEElaspedTimeInMilliSeconds">%time%</Data> <Data Name="ErrorCode">2147943755</Data> <Data Name="CSEExtensionName">Software Installation</Data> <Data Name="CSEExtensionId">{C6DC5466-785A-11D2-84D0-00C04FB169F7}</Data> </EventData> </Event>
There is another symptom in which the GPO that has software installation settings is applied very slowly (for example, over ten minutes). The delay occurs when the RODC is the local domain controller and when many RWDCs are available for access through DNS. In this situation, the DC locator probes each RWDC that is returned from the DNS to determine whether it is a better candidate than the local RODC. When this delay occurs, the following event is logged:
Log Name: Microsoft-Windows-GroupPolicy/Operational
Source: Microsoft-Windows-GroupPolicy
Event ID: 5016
Task Category: None
Level: Information
Keywords:
User: SYSTEM
Description:
Completed Software Installation Extension Processing in 688323 milliseconds.