So been working with MDT for a while now at work and every time I deploy a new Windows installation (both 7/10) some of the GPOs gets applied after the computer joins my domain, but not all of them. Applocker for example and the software deployment program we use gets left out.
To get all of them to install a manual reboot is required, which is kinda annoying. I have tried adding FINISHACTION=RESTART to the default section to customsettings.ini but this doesn't help as a manual reboot still seems to be required. I've also tried adding two restart steps to the end of the TS, but that breaks it as it can't log in again after being restarted.
I have the latest ADK and the latest MDT version.
Anyone encountered this before and have any suggestions?