Multiple "Working copy" gpo's appear in GPMC (4209389)

A number of working copies appear when viewing Group Policy objects in the Microsoft Group Policy Management Console (GPMC).

An error may have occurred during a deploy or check in, as a result GPO Admin could not clean up the working copy.

The first thing to do is to verify that all of the working copies are indeed orphaned by counting the number of working copies seen in GPMC to and comparing that number to the number of checked out GPOs using the Checked out search folder logged in to GPOADmin as an Administrator.

A working copy can be orphaned for a few reasons. If an error occurred during the check-in process, then it is possible that the working copy could be orphaned. This is most likely the cause.

Service Account Permissions, check that the service account has the required permissions to delete the working copy. You would only need to check this if the service account is a minimum permissions account. It might be possible that the user did not select "This object and all child objects/This object and all descendant objects" when configuring the permissions for the service account.

Workaround:

1. In GPMC check the name of the GPO working copy:
   Example: [GPOADmin Working Copy] - {3df0ee05-793e-4728-85d2-fd60055c6587}
2. You need to match this up to find if the GPO exists and if it exists, if it is "checked out" or "edit" state in GPO Admin.
3. Using powershell cmdlet you can find the details, open powershell on the GPMC server, and using the unique ID without the "{","}".
4. Type the following:
   Import-Module GroupPolicy
5. Type the following, but change the GUID to match your GPO:
   Get-GPO -guid 3df0ee05-793e-4728-85d2-fd60055c6587
6. This will either return no results, in which case all the working copies for this name can be removed.
7. If this returns a result, using the name provided, open GPO Admin and check if the GPO is in a "Checked out" or "Edit" state.
8. If this GPO is in this state then leave the Working Copy
9. If the GPO is in "Checked in" or "Available" state, then all working copies for this GPO can be removed

*Note

GPOADmin 5.10 and later provides a PowerShell cmdlet that will list all orphaned working copies, Get-OrphanedWorkingCopies. The syntax is: