NEW Active Clients at risk

[ruipedro]

I have a list of computers in Active Clients at risk that has been growing. I already remotely executed the following procedures with powershell:

cmd /c mpcmdrun.exe -removedefinitions -all
cmd /c mpcmdrun.exe -getfiles
rm C:\Windows\System32\GroupPolicy\Machine\registry.pol
rm C:\Windows\System32\GroupPolicy\user\registry.pol
Stop-Service -Name "CcmExec"
Start-Service -Name "CcmExec"
gpupdate /force

Sometimes I reduce the number of computers, but after a few days the same computers appear in the list again.

What else can I do?

 

[Garth]

What troubleshooting have you done? What make you think this is a GPO issue? Have you reviewed your GPO?

 

[ruipedro]

I haven't made any changes to my GPO. In my OU I have more than 300 computers, only 60 have this problem, otherwise it would be more than 300 computers...

 

[Garth]

I haven't made any changes to my GPO. In my OU I have more than 300 computers, only 60 have this problem, otherwise it would be more than 300 computers...

View attachment 4222

Your script clearly clean out the GPO setting. So EXACTLY why do you think it is a GPO problem? What troubleshooting have you done? Have you reviewed your GPO? What do the log say?

 

[ruipedro]

Your script clearly clean out the GPO setting. So EXACTLY why do you think it is a GPO problem? What troubleshooting have you done? Have you reviewed your GPO? What do the log say?

which client log should i analyze or from SCCM server

 

[Garth]

which client log should i analyze or from SCCM server

Since you have not answered by questions, Here is the list of log files. https://docs.microsoft.com/en-us/mem/configmgr/core/plan-design/hierarchy/log-files

 

[ruipedro]

Since you have not answered by questions, Here is the list of log files. https://docs.microsoft.com/en-us/mem/configmgr/core/plan-design/hierarchy/log-files

I apologize, but I still don't know which logs to analyze and where???? Client or server computer

 

[Garth]

I apologize, but I still don't know which logs to analyze and where???? Client or server computer

Start by telling us what troubleshooting you have done. aka Why did you run that script?

 

[ruipedro]

Start by telling us what troubleshooting you have done. aka Why did you run that script?

 

[ruipedro]

was the only help I could find on google, it suggested deleting registry.pol on the client computer. At first it worked, then after 3 or 4 days the computer reappeared in the Active Clients at Risk collection