Announcement

Collapse
No announcement yet.

Group Policy not applying to 2003 Server R1

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Group Policy not applying to 2003 Server R1

    I've got a problem that I've been searching for answers to for the last couple days regarding a member server GP as well as a DC GP.

    My OU setup is like this.
    (servers - *)

    --------------------------------------
    Domain Controllers
    *ALFS
    *GISFSPP
    *GISFSBB
    *GISFSGN
    *GISFSKK

    ALTS
    >Desktops
    >Servers
    *ALSQL
    *ALTM
    *ALWBTS

    GIS
    >GISPP
    >>Desktops
    >>Servers
    *GISSQL
    --------------------------------------

    That being said, I also have a member servers security group, containing all of the member servers. And a DC security group which of course contains all the DCs. The member servers GP is applied to each of the Servers OUs and group. And the DC GP is applied to the Domain Controller OU and group.

    I don't believe it should make a difference one way or the other, but GISPP and ALTS are both separate sites as well.

    Now I for all DCs except ALFS, the policy applied perfectly. I've tried a gpupdate /force and the update times out. After a gpresult it showed that it had not been applied, there was no reference to the policy in the slightest, not even filtered out.

    Now also, we have the exact same problem with ALSQL, ALTM, ALWBTS, GISSQL.

    We have even tried restarting ALTM and to no avail.

    Replication seems to be working great, and all domain PCs have no problems picking up their policies from what I've seen.

    Any ideas?

  • #2
    Re: Group Policy not applying to 2003 Server R1

    What does the event log show?
    Regards,
    Jeremy

    Network Consultant/Engineer
    Baltimore - Washington area and beyond
    www.gma-cpa.com

    Comment


    • #3
      Re: Group Policy not applying to 2003 Server R1

      Nothing out of the ordinary. No errors pertaining to it anyway. I've got an error pertaining to the time service that I've just not bothered fixing on it yet. But nothing other than that.

      Comment


      • #4
        Re: Group Policy not applying to 2003 Server R1

        Are you using the GPMC? If not, I suggest you download it and give it a try. It lays everything out very logically and makes it easy to see your configuration.

        Are you using any filtering on the GPOs?
        Regards,
        Jeremy

        Network Consultant/Engineer
        Baltimore - Washington area and beyond
        www.gma-cpa.com

        Comment


        • #5
          Re: Group Policy not applying to 2003 Server R1

          Yes I'm using the GPMC, wouldn't do GP's any other way

          And no filtering.

          Comment


          • #6
            Re: Group Policy not applying to 2003 Server R1

            Could you run the RSoP wizard in logging mode and planning mode? See if you get the same results. If planning mode shows that it should apply then there's got to be errors somewhere.
            Regards,
            Jeremy

            Network Consultant/Engineer
            Baltimore - Washington area and beyond
            www.gma-cpa.com

            Comment


            • #7
              Re: Group Policy not applying to 2003 Server R1

              Ok, it does seem as though I have an error when I run it in logging mode on the member servers as well as one on the DC.

              Member Servers Error:

              Group Policy Infrastructure failed due to the error listed below.
              The specified server cannot perform the requested operation.

              Note: Due to the GP Core failure, none of the other Group Policy components processed their policy. Consequently, status information for the other components is not available.

              DC Error:

              Group Policy Infrastructure failed due to the error listed below.
              The network path was not found.

              Note: Due to the GP Core failure, none of the other Group Policy components processed their policy. Consequently, status information for the other components is not available.

              Comment


              • #8
                Re: Group Policy not applying to 2003 Server R1

                BTW is the server you have time errors on have a different time than other computers by more than 5 minutes?

                Run the gpotool.exe and see what that says... it's part of the 2003 resource kit
                Regards,
                Jeremy

                Network Consultant/Engineer
                Baltimore - Washington area and beyond
                www.gma-cpa.com

                Comment


                • #9
                  Re: Group Policy not applying to 2003 Server R1

                  The time is still identical on the server with the time error as with other PC's on the network.

                  After I ran the gpotool neither of the DC or Server Policies showed any errors. However I did an error on a separate GP that is used to set up some PC's as Kiosks. It was a Sysvol Mismatch error.

                  Comment


                  • #10
                    Re: Group Policy not applying to 2003 Server R1

                    Well I can't find any relevant information on the errors you got when you ran RSoP in logging mode. I don't know what the issue is.

                    Here's a link that goes through the steps to troubleshooting Group Policy.
                    http://technet2.microsoft.com/Window...f09231033.mspx

                    HTH
                    Regards,
                    Jeremy

                    Network Consultant/Engineer
                    Baltimore - Washington area and beyond
                    www.gma-cpa.com

                    Comment


                    • #11
                      Re: Group Policy not applying to 2003 Server R1

                      I finally did find something. I wasn't looking in the correct log obviously...

                      It looks as though there have been policy problems on this server since well before I became involved with this project recently.

                      I've got both the 1030 and 1058 Event ID's logged.

                      Windows cannot query for the list of Group Policy objects. A message that describes the reason for this was previously logged by the policy engine.

                      and

                      Windows cannot access the file gpt.ini for GPO CN={1BFB84E8-B396-4999-8D70-171958354851},CN=Policies,CN=System,DC=air-land,DC=com. The file must be present at the location <\\air-land.com\SysVol\air-land.com\Policies\{1BFB84E8-B396-4999-8D70-171958354851}\gpt.ini>. (The network path was not found. ). Group Policy processing aborted.

                      Although nothing's been reported at all since 8/10/2006...

                      Comment


                      • #12
                        Re: Group Policy not applying to 2003 Server R1

                        Ahhh!, now we're getting somewhere.
                        1030 and 1058 are common events...
                        http://www.google.com/search?hl=en&l....com+1030+1058

                        Maybe this:
                        http://support.microsoft.com/kb/842804
                        or
                        http://support.microsoft.com/kb/888943
                        Regards,
                        Jeremy

                        Network Consultant/Engineer
                        Baltimore - Washington area and beyond
                        www.gma-cpa.com

                        Comment


                        • #13
                          Re: Group Policy not applying to 2003 Server R1

                          Absolutely! Now a lot more is making sense that I've found those events. I'll be working from here tomorrow. I'll post the end findings or if there are any questions I may have, but I think I've got it from here.

                          Thanks for your help!

                          Comment


                          • #14
                            Re: Group Policy not applying to 2003 Server R1

                            It actually turned out to be rather simple. Our DC hadn't been restarted with some of the recommended updates. That cured all problems there.


                            On side project, I do have another problem with GPs and XP clients.

                            No real errors that give me anything worth while to work with. Policies say they're applied ok. And the policy where this PC is doesn't even show up. It's like it doesn't even know the policy is linked to it or linked to that user.

                            The error that gives me any light is Event ID 1096.

                            Edit:
                            Eh... scratch that 2nd part... I'm just an idiot.

                            Thanks again for your help!
                            Last edited by jking; 17th November 2006, 15:38.

                            Comment


                            • #15
                              Re: Group Policy not applying to 2003 Server R1

                              Excellent. Glad you got it sorted.
                              Regards,
                              Jeremy

                              Network Consultant/Engineer
                              Baltimore - Washington area and beyond
                              www.gma-cpa.com

                              Comment

                              Working...
                              X