|
Posted by Steven L Umbach on January 3, 2006, 2:20 pm
Please log in for more thread options Hmm. Try adding a new Group Policy to the domain controller container and
put it at the top of the list above the default DC GPO. Configure just a few
non disruptive settings in that new Group Policy [do not use logon locally
or deny logon locally at this time] . Run gpupdate and see if those settings
take affect. That will help determine if there is just a problem with the
default DC GPO or something more going on. If you have not done so lately
reboot the server if at all possible. I would also run the support tools
netdiag, dcdiag, and gpotool on the domain controller to see if the results
show any problems that may help find a solution.
If it appears that there is only a problem with the default DC GPO such as
corruption you could consider using dcgpofix as a last resort option after
reading about what it does in the KB article at the link below. If you try
dcgpofix I would be sure to print out/save your current security settings
for the default DC GPO if possible so that you could restore them
afterwards. If you have a recent backup of the System State for your DC you
could also consider doing an authoritative restore of AD if you think that
the backup of the System State does not have the problem.--- Steve
http://support.microsoft.com/?id=833783 --- info on dcgpofix.
> The changes i make are not warning.
>
> Cannot find any errors in my application/system logs
>
> But If i right click in my ad on my server, and choose an resultant set
> of
> policy, I see red marks on every setting in the policy
>
> The error message is "The policy engine did not attempt to configure
> the setting. For more information, see
> %windir%\security\logs\winlogon.log on the target machine."
>
> Here is the screendumps
> http://www.damp.no/web/dev/result.gif
> http://www.damp.no/web/dev/result2.gif
>
> And my winlogon log
> http://www.damp.no/web/dev/winlogon.txt
>
> The group policy modelling
> http://www.damp.no/web/dev/gpm.htm
>
> The group policy results
> http://www.damp.no/web/dev/gpr.htm
>
| 
XML Sitemap