I wrote some changes to the Defaults and then backed them up and after that I could do GPUpdate /force successfully.

I wish I had the full settings from these Default GPO's. I found the "DCGPOFix.exe" but was too afraid to run it.