Announcement

Collapse
No announcement yet.

GPO's Not Being Applied

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • GPO's Not Being Applied

    I'm having a great deal of trouble getting GPs to pull over the domain. I've beaten my head against the wall and just cannot resolve it.

    So, currently -

    • dcdiag turns up no errors on the pdc.
      ipv6 is turned off.
      domain authentication works perfectly.
      I cannot telnet to port 389 on the DC but I can telnet to 23 (after enabling telnet server). It shows that it is listening on 389 in netstat.
      SYSVOL properties are as they should be.
      DC2 replicates/pulls the GP fine. It's everything outside of those 2 that does not.
      The PDC/DNS server is using its own IP for DNS.
      GPResult reads:
      Group Policy Infrastructure failed due to the error listed below.

      The network is not present or not started.

      Note: Due to the GP Core failure, none of the other Group Policy components processed their policy. Consequently, status information for the other components is not available.



    I've done a number of other things but cannot remember them all off the top of my head. In the last case, it worked (briefly) and when I tried to update again.. it failed.. 30 seconds later.

    I'm starting to believe pretty strongly that it's a network issue but I want to get some concrete evidence before I go yelling at our network engineer for making me waste my time for the last 4 days.

    GPResult from GPUpdate and Group Modeling Report found here - http://cid-acd77f58b67d0b4a.skydrive...e.aspx/.Public

  • #2
    Re: GPO's Not Being Applied

    Have Server Side Extensions been installed on the Workstations?
    1 1 was a racehorse.
    2 2 was 1 2.
    1 1 1 1 race 1 day,
    2 2 1 1 2

    Comment


    • #3
      Re: GPO's Not Being Applied

      No? Nothing extraneous outside of required functionaly depending on thepurpose of the server (i.e. IIS on the Symantec Endpoint Server).

      What are SSIs?

      Comment


      • #4
        Re: GPO's Not Being Applied

        Client Side Server Extension information. http://support.microsoft.com/kb/943729

        What are SSIs?
        1 1 was a racehorse.
        2 2 was 1 2.
        1 1 1 1 race 1 day,
        2 2 1 1 2

        Comment


        • #5
          Re: GPO's Not Being Applied

          I use portqry to test communication between our subnets, it can be found here: http://www.microsoft.com/downloads/d...displaylang=en

          Not sure how firewalls are setup on your side, but in my company they were setup to blocking the RPC ports, (which by default are setup to be dynamic, info here: http://technet.microsoft.com/en-us/l.../bb727063.aspx on locking down the RPC ports), also we had to have ICMP traffic allowed through the firewall due to its use to determine link speed from the clients to the DC.

          Good luck.
          Last edited by georgeeye; 18th January 2010, 16:52. Reason: typos

          Comment


          • #6
            Re: GPO's Not Being Applied

            Hi,

            At this point it would be extremely helpful if you could get a Userenv log from a client that is not properly getting the GPO in question. The following is an article on how to turn this on and if you can also provide the name of the GPO we might be able to see what is happening. Thanks

            http://support.microsoft.com/kb/325850

            reno

            Comment

            Working...
            X