Group Policy settings are not applied when a client computer that is running Windows Server 2003 tries to apply Group Policy settings together with WMI filters from an RODC

When a client computer that is running Microsoft Windows Server 2003 tries to apply Group Policy settings together with Windows Management Instrumentation (WMI) filters from a read-only domain controller (RODC), Group Policy settings are not applied.

This problem occurs when Windows Server 2003-based client computers coexist with Windows Vista-based client computers in a domain environment.

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section. Microsoft regularly releases software updates to address specific problems. If Microsoft releases a software update to resolve this problem, this article will be updated with more information.

You can use Group Policy to manage client computers in a domain environment. Many policy changes that affect IPsec require that you apply WMI filters when you deploy the changes. In segmented networks, domain clients that have limited access to a domain controller that has full permissions do not apply Group Policy files. Managing these clients increases total cost of ownership (TCO) and management costs. To reduce the cost and risk involved in managing these clients, you can implement Group Policy settings with WMI filters through an RODC. This method reduces the number of Group Policy object files.