Click here to get back home

GPO policies - some get used, some don't

 HomeNewsGroups | Search
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
GPO policies - some get used, some don't Nondisclosure007 11-24-2008
Posted by Nondisclosure007 on November 24, 2008, 4:05 pm
Please log in for more thread options
Workstation: Vista SP1 x64 bit
Server: Windows Server 2008 SBS

Problem: not all settings in group policy object for domain get
transferred. I've got a logon text and caching of domain logons.
After looking at the local policy on on the vista workstation, I see
the cached logon value got transferred down but the logon text is
still blank.

Any ideas?

Thanks.

Posted by Meinolf Weber on November 24, 2008, 4:09 pm
Please log in for more thread options
Hello Nondisclosure007,

Did you run gpupdate /force on the client? Are both settings in the same
policy and where are they linked to?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Workstation: Vista SP1 x64 bit
> Server: Windows Server 2008 SBS
> Problem: not all settings in group policy object for domain get
> transferred. I've got a logon text and caching of domain logons.
> After looking at the local policy on on the vista workstation, I see
> the cached logon value got transferred down but the logon text is
> still blank.
>
> Any ideas?
>
> Thanks.
>



Posted by Nondisclosure007 on November 24, 2008, 5:07 pm
Please log in for more thread options
> Hello Nondisclosure007,
>
> Did you run gpupdate /force on the client? Are both settings in the same
> policy and where are they linked to?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and conf=
ers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
>
> > Workstation: Vista SP1 x64 bit
> > Server: Windows Server 2008 SBS
> > Problem: not all settings in group policy object for domain get
> > transferred. =A0I've got a logon text and caching of domain logons.
> > After looking at the local policy on on the vista workstation, I see
> > the cached logon value got transferred down but the logon text is
> > still blank.
>
> > Any ideas?
>
> > Thanks.- Hide quoted text -
>
> - Show quoted text -

Thanks for the really quick reply.

All the options are in the same policy (and this policy is the only
one enforced).

I ran the gpupdate /force on the client. I got back the following
error:
{begin copy-
C:\>gpupdate /force
Updating Policy...

User Policy update has completed successfully.
Computer policy could not be updated successfully. The following
errors were enc
ountered:

The processing of Group Policy failed. Windows attempted to read the
file \mydomain.
local\SysVol\mydomian.local\Policies\{5FB3EDF8-
F427-4DEA-98A5-608CF018A75A}\gpt.ini f
rom a domain controller and was not successful. Group Policy settings
may not be
applied until this event is resolved. This issue may be transient and
could be
caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain
controller.
b) File Replication Service Latency (a file created on another domain
controller
has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.

To diagnose the failure, review the event log or invoke gpmc.msc to
access infor
mation about Group Policy results.

C:\>
-end copy}
Now, if I go look in the \MyDC\SysVol\Policies\{5FB3EDF8-
F427-4DEA-98A5-608CF018A75A}\gpt.ini, it's there. So, I'm not sure
what's going on.

Thanks for helping!

Posted by Danny Sanders on November 24, 2008, 5:33 pm
Please log in for more thread options
What happens when you go to start - run and put in
\mydomain.local\SysVol\mydomian.local\Policies\{5FB3EDF8-
F427-4DEA-98A5-608CF018A75A}\gpt.ini ??

Do you get an error message or can you view the file?


hth
DDS

> Hello Nondisclosure007,
>
> Did you run gpupdate /force on the client? Are both settings in the same
> policy and where are they linked to?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
>
> > Workstation: Vista SP1 x64 bit
> > Server: Windows Server 2008 SBS
> > Problem: not all settings in group policy object for domain get
> > transferred. I've got a logon text and caching of domain logons.
> > After looking at the local policy on on the vista workstation, I see
> > the cached logon value got transferred down but the logon text is
> > still blank.
>
> > Any ideas?
>
> > Thanks.- Hide quoted text -
>
> - Show quoted text -

Thanks for the really quick reply.

All the options are in the same policy (and this policy is the only
one enforced).

I ran the gpupdate /force on the client. I got back the following
error:
{begin copy-
C:\>gpupdate /force
Updating Policy...

User Policy update has completed successfully.
Computer policy could not be updated successfully. The following
errors were enc
ountered:

The processing of Group Policy failed. Windows attempted to read the
file \mydomain.
local\SysVol\mydomian.local\Policies\{5FB3EDF8-
F427-4DEA-98A5-608CF018A75A}\gpt.ini f
rom a domain controller and was not successful. Group Policy settings
may not be
applied until this event is resolved. This issue may be transient and
could be
caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain
controller.
b) File Replication Service Latency (a file created on another domain
controller
has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.

To diagnose the failure, review the event log or invoke gpmc.msc to
access infor
mation about Group Policy results.

C:\>
-end copy}
Now, if I go look in the \MyDC\SysVol\Policies\{5FB3EDF8-
F427-4DEA-98A5-608CF018A75A}\gpt.ini, it's there. So, I'm not sure
what's going on.

Thanks for helping!



Posted by Nondisclosure007 on November 24, 2008, 6:05 pm
Please log in for more thread options
> What happens when you go to start - run and put in
> \mydomain.local\SysVol\mydomian.local\Policies\{5FB3EDF8-
> F427-4DEA-98A5-608CF018A75A}\gpt.ini ??
>
> Do you get an error message or can you view the file?
>
> hth
> DDS
>
>
>
>
>
>
>
> > Hello Nondisclosure007,
>
> > Did you run gpupdate /force on the client? Are both settings in the sam=
e
> > policy and where are they linked to?
>
> > Best regards
>
> > Meinolf Weber
> > Disclaimer: This posting is provided "AS IS" with no warranties, and
> > confers
> > no rights.
> > ** Please do NOT email, only reply to Newsgroups
> > ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > > Workstation: Vista SP1 x64 bit
> > > Server: Windows Server 2008 SBS
> > > Problem: not all settings in group policy object for domain get
> > > transferred. I've got a logon text and caching of domain logons.
> > > After looking at the local policy on on the vista workstation, I see
> > > the cached logon value got transferred down but the logon text is
> > > still blank.
>
> > > Any ideas?
>
> > > Thanks.- Hide quoted text -
>
> > - Show quoted text -
>
> Thanks for the really quick reply.
>
> All the options are in the same policy (and this policy is the only
> one enforced).
>
> I ran the gpupdate /force on the client. =A0I got back the following
> error:
> {begin copy-
> C:\>gpupdate /force
> Updating Policy...
>
> User Policy update has completed successfully.
> Computer policy could not be updated successfully. The following
> errors were enc
> ountered:
>
> The processing of Group Policy failed. Windows attempted to read the
> file \mydomain.
> local\SysVol\mydomian.local\Policies\{5FB3EDF8-
> F427-4DEA-98A5-608CF018A75A}\gpt.ini f
> rom a domain controller and was not successful. Group Policy settings
> may not be
> =A0applied until this event is resolved. This issue may be transient and
> could be
> caused by one or more of the following:
> a) Name Resolution/Network Connectivity to the current domain
> controller.
> b) File Replication Service Latency (a file created on another domain
> controller
> =A0has not replicated to the current domain controller).
> c) The Distributed File System (DFS) client has been disabled.
>
> To diagnose the failure, review the event log or invoke gpmc.msc to
> access infor
> mation about Group Policy results.
>
> C:\>
> -end copy}
> Now, if I go look in the \MyDC\SysVol\Policies\{5FB3EDF8-
> F427-4DEA-98A5-608CF018A75A}\gpt.ini, it's there. =A0So, I'm not sure
> what's going on.
>
> Thanks for helping!- Hide quoted text -
>
> - Show quoted text -

yep, I can read it. I don't get any error.

Similar ThreadsPosted
policies September 12, 2005, 9:16 am
RAS and VPN policies - help March 15, 2007, 10:10 am
Account Policies - NT January 19, 2006, 3:14 pm
Group Policies September 13, 2006, 8:31 am
How Policies Work November 17, 2006, 2:43 pm
IAS EAP - TLS Policies question January 19, 2007, 3:20 pm
security policies May 19, 2009, 8:49 am
Multiple Password Policies? June 22, 2005, 12:15 pm
How to have 2 security policies on one server August 30, 2005, 8:11 am
2003 Group Policies?? April 19, 2006, 3:34 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Driving a better car - Fuelzilla.com

Cabling site for homeowners and pros alike - Cabling-Design.com

Friends:

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap