Click here to get back home

GPO policies - some get used, some don't

 HomeNewsGroups | Search

microsoft.public.windows.server.security - Supporting MS Windows network? Read here before it's too late! 

get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
GPO policies - some get used, some don't Nondisclosure007 11-24-2008
Posted by Darren Mar-Elia on November 24, 2008, 5:33 pm
Please log in for more thread options
The fact that you get that during a background refresh tells me that
something is amiss in getting to the SYSVOL portion of that GPO. You say the
file is there but what are the permissions on that GPT.INI file? Also, are
you sure that DFS Client is running on that client? Also, is the TCP/IP
NetBIOS helper service running on the client?

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy

*******************************
Spot GPO differences and inconsistencies with the powerful GPO Compare 1.0.
Download the trial at www.sdmsoftware.com/group_policy_compare
*******************************


show/hide quoted text

Thanks for the really quick reply.

All the options are in the same policy (and this policy is the only
one enforced).

I ran the gpupdate /force on the client. I got back the following
error:
{begin copy-
show/hide quoted text
Updating Policy...

User Policy update has completed successfully.
Computer policy could not be updated successfully. The following
errors were enc
ountered:

The processing of Group Policy failed. Windows attempted to read the
file \mydomain.
local\SysVol\mydomian.local\Policies\{5FB3EDF8-
F427-4DEA-98A5-608CF018A75A}\gpt.ini f
rom a domain controller and was not successful. Group Policy settings
may not be
applied until this event is resolved. This issue may be transient and
could be
caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain
controller.
b) File Replication Service Latency (a file created on another domain
controller
has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.

To diagnose the failure, review the event log or invoke gpmc.msc to
access infor
mation about Group Policy results.

show/hide quoted text
-end copy}
Now, if I go look in the \MyDC\SysVol\Policies\{5FB3EDF8-
F427-4DEA-98A5-608CF018A75A}\gpt.ini, it's there. So, I'm not sure
what's going on.

Thanks for helping!


Posted by Nondisclosure007 on November 24, 2008, 6:15 pm
Please log in for more thread options
wrote:
show/hide quoted text
the
show/hide quoted text
e
show/hide quoted text
0.
show/hide quoted text
e
show/hide quoted text

gpt.ini rights:
authenticated users, enterprise domain controllers: read&execute, read
system,domain admins, enterprise admins, administrators:full

I don't have DFS client on this Vista x64 (ultimate) pc (nor can I
find where to get it installed from); I do have DFS replication
running. Ditto on the netbios helper service.

I have my windows server 2008 DHCP server options set:
045 NetBios over TCP/IP NBDD set to my server IP
046 WINS/NBT Node Type set to 0x0 (which seems pointless since I can't
seem to find a wins service for windows 2008).

Posted by Darren Mar-Elia on November 24, 2008, 4:53 pm
Please log in for more thread options
Looking at the local GPO, while sometimes useful, is not definitive on what
policies were actually processed--especially around security policy. Have
you confirmed by re-logging on, that the logon text did not get delivered?

Darren
--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy

*******************************
Spot GPO differences and inconsistencies with the powerful GPO Compare 1.0.
Download the trial at www.sdmsoftware.com/group_policy_compare
*******************************



show/hide quoted text


Posted by Nondisclosure007 on November 24, 2008, 5:09 pm
Please log in for more thread options
wrote:
show/hide quoted text
at
show/hide quoted text
?
show/hide quoted text
0.
show/hide quoted text

Tried logoff, no go; re-start, no go; shut off - turn on, no go.

thx.

Posted by Nondisclosure007 on November 24, 2008, 11:29 pm
Please log in for more thread options
wrote:
show/hide quoted text

SOLVED!!!!
http://support.microsoft.com/kb/934907

Hard to believe, but this solved it!

Thanks everyone for your help!

Similar ThreadsPosted
policies September 12, 2005, 9:16 am
RAS and VPN policies - help March 15, 2007, 10:10 am
Account Policies - NT January 19, 2006, 3:14 pm
Group Policies September 13, 2006, 8:31 am
How Policies Work November 17, 2006, 2:43 pm
IAS EAP - TLS Policies question January 19, 2007, 3:20 pm
security policies May 19, 2009, 8:49 am
Multiple Password Policies? June 22, 2005, 12:15 pm
How to have 2 security policies on one server August 30, 2005, 8:11 am
2003 Group Policies?? April 19, 2006, 3:34 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Driving a better car - Fuelzilla.com

Cabling site for homeowners and pros alike - Cabling-Design.com

Friends:

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap
Privacy Policy