I found that the sysvol folders between domain controllers didn't have the same content and as i mentioned eariler, the GPO on one server didn't update from the main PDe. So, i believe i found the solution to my problem by following these articles: http://support.microsoft.com/kb/555844/en-us http://support.microsoft.com/kb/316790 In the first article what really caught my attention was the part indicating "JOURNAL_Wrap" error messages, which is what i was experiencing on the problematic DC. the sysvol folders "repaired" themselves after the reg change and a service restart and everything seems to good for now. On Thu, Apr 24, 2008 at 2:04 PM, Shane Williford <shane.williford@xxxxxxxxxx> wrote: > Actually, if your replication is fixed, your Sysvol folders are > replicating as they should, which is where your policies are all stored (& > thus your GPOs are replicating, as well). > > > > Shane M. Williford > > Systems Administrator > > MCSE, MCSA Sec, Sec+, Net+, A+ > > Mazuma Credit Union > > 9300 Troost > > Kansas City, MO 64131 > > shane.williford@xxxxxxxxxx > > 816-361-4194 x6012 > > > > *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On > Behalf Of *Harry Singh > *Sent:* Thursday, April 24, 2008 11:14 AM > > *To:* gptalk@xxxxxxxxxxxxx > *Subject:* [gptalk] Re: Default Homepage Mess.. > > > > Thanks Shane. > > I'm all about going back to basics, so please send me whatever you feel > would be helpful. I appreciate it. > > Ok, i fixed the time bug i experienced. Actually, the service did > unregister when i ran a w32tm /unregister. I registered back and verified by > manually changing the time and running a w32tm /config > /syncfromflags:domhier /update, which corrected the time. > > repadmin / showreps shows successful replication but the SYSVOL directories > don't seem to be in sync and i'm pretty sure the GPO policies are not in > sync either -- what can i do to troubleshoot the GPO replication issue i > believe i'm having ? > > On Thu, Apr 24, 2008 at 11:37 AM, Shane Williford < > shane.williford@xxxxxxxxxx> wrote: > > Really, what you'll need to do is some > research/troubleshooting/testing…yeah…tedious stuff. J Here are a couple > links that may help you further. And, don't forget about checking other > Event Logs for this and gaining info from those; they may direct you more > specifically where you need to go to pinpoint the exact problem. > > > > http://support.microsoft.com/kb/816042/ > > > > > http://technet2.microsoft.com/WindowsServer/en/library/71e76587-28f4-4272-a3d7-7f44ca50c0181033.mspx?mfr=true > > > > I know you may know most of this, but I always reference these when I'm > experiencing time issues. Hope this helps. > > > Regards. > > > > Shane M. Williford > > Systems Administrator > > MCSE, MCSA Sec, Sec+, Net+, A+ > > Mazuma Credit Union > > 9300 Troost > > Kansas City, MO 64131 > > shane.williford@xxxxxxxxxx > > 816-361-4194 x6012 > > > > *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On > Behalf Of *Harry Singh > *Sent:* Thursday, April 24, 2008 10:17 AM > > > *To:* gptalk@xxxxxxxxxxxxx > *Subject:* [gptalk] Re: Default Homepage Mess.. > > > > I think i found the problem. When i used GPMC and changed Domain > controllers to PHPRINT1 (DC WITH WRONG TIME) i noticed the homepage setting > was still enabled! I removed it. However, this shines a light on GPO > replication not working correctly, as demonstrated in the dcdiag. > > i want to try and fix the time situtation, but when i run a w32tm > /unregister while logged into the PHPRINT1 ( Member DC) as a Domain Admin, i > get a "access denied" ? > > how else could i troubleshoot ? > > On Thu, Apr 24, 2008 at 10:36 AM, Harry Singh <hboogz@xxxxxxxxx> wrote: > > Thanks Shane, i just noticed the Time issue. And truthfully, that could > very well be the issue. > > But, what's weird is when i execute the following command on PHPRINT1, the > server that has the wrong time, the time doesn't sync with the right DC. i > have the DC manually configured in the registry and when i do a net time > /querysntp, the right time server comes up -- but the time doesn't change to > the correct time ? > > W32tm /config /synchfromflags:DOMHIER /update > > net stop w32time && net start w32time > > when i run on repadmin /showreps -- i get succesfull results as well. > > any ideas? > > > > On Thu, Apr 24, 2008 at 10:08 AM, Shane Williford < > shane.williford@xxxxxxxxxx> wrote: > > Looks like you do have a replication issue on PHDC1. Sometimes a reboot > will fix that, or just restarting the replication service (if a reboot isn't > feasible at this point). If that doesn't work, go into your Event Logs -> > File Replication and begin troubleshooting error events there. You also seem > to be having an issue with your time server which will cause problems on > your network. > > > > Shane M. Williford > > Systems Administrator > > MCSE, MCSA Sec, Sec+, Net+, A+ > > Mazuma Credit Union > > 9300 Troost > > Kansas City, MO 64131 > > shane.williford@xxxxxxxxxx > > 816-361-4194 x6012 > > > > *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On > Behalf Of *Odiorne, Derek > *Sent:* Thursday, April 24, 2008 9:04 AM > > > *To:* gptalk@xxxxxxxxxxxxx > *Subject:* [gptalk] Re: Default Homepage Mess.. > > > > My dcdiag looks very similar. > > > > Also, can you not disable the item in question within the default domain > policy? You don't need to disable the whole policy, just the object inside > the policy. I haven't actually looked at this object but in most cases the > state of the object is either enabled, disabled or not configured. > > > > ---------------------------- > > Thanks, > > > > Derek A. Odiorne > > > > > ------------------------------ > > *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On > Behalf Of *Harry Singh > *Sent:* 04/24/2008 9:52 AM > *To:* gptalk@xxxxxxxxxxxxx > *Subject:* [gptalk] Re: Default Homepage Mess.. > > > > Derek, the unfortunate consequence to that is i, rather ignorantly, put the > setting in place on the default domain policy..=\ > > here is my dcdiag /e -- see something maybe you guys have a quicker answer > to one of the errors shown. It's beena long time i've debugged dcdiag > errors. > > C:\>dcdiag /e > > Domain Controller Diagnosis > > Performing initial setup: > Done gathering initial info. > > Doing initial required tests > > Testing server: MainOffice\PHPRINT1 > Starting test: Connectivity > The clock difference between the home server PHDC1 and target > server > PHPRINT1 is greater than one minute. This may cause Kerberos > authentication failures. Please check that the time service is > working > properly. You may need to resynchonize the time between these > servers. > ......................... PHPRINT1 passed test Connectivity > > Testing server: jacwf\PHJACDC1 > Starting test: Connectivity > ......................... PHJACDC1 passed test Connectivity > > Testing server: NetcongDR\PHNJDC > Starting test: Connectivity > ......................... PHNJDC passed test Connectivity > > Testing server: MainOffice\PHDC1 > Starting test: Connectivity > ......................... PHDC1 passed test Connectivity > > Doing primary tests > > Testing server: MainOffice\PHPRINT1 > Starting test: Replications > ......................... PHPRINT1 passed test Replications > Starting test: NCSecDesc > ......................... PHPRINT1 passed test NCSecDesc > Starting test: NetLogons > ......................... PHPRINT1 passed test NetLogons > Starting test: Advertising > Warning: PHPRINT1 is not advertising as a time server. > ......................... PHPRINT1 failed test Advertising > Starting test: KnowsOfRoleHolders > ......................... PHPRINT1 passed test KnowsOfRoleHolders > Starting test: RidManager > ......................... PHPRINT1 passed test RidManager > Starting test: MachineAccount > ......................... PHPRINT1 passed test MachineAccount > Starting test: Services > ......................... PHPRINT1 passed test Services > Starting test: ObjectsReplicated > ......................... PHPRINT1 passed test ObjectsReplicated > Starting test: frssysvol > ......................... PHPRINT1 passed test frssysvol > Starting test: frsevent > ......................... PHPRINT1 passed test frsevent > Starting test: kccevent > ......................... PHPRINT1 passed test kccevent > Starting test: systemlog > An Error Event occured. EventID: 0xC0009006 > Time Generated: 04/24/2008 09:26:54 > Event String: A fatal error occurred when attempting to access > ......................... PHPRINT1 failed test systemlog > Starting test: VerifyReferences > ......................... PHPRINT1 passed test VerifyReferences > > Testing server: jacwf\PHJACDC1 > Starting test: Replications > ......................... PHJACDC1 passed test Replications > Starting test: NCSecDesc > ......................... PHJACDC1 passed test NCSecDesc > Starting test: NetLogons > ......................... PHJACDC1 passed test NetLogons > Starting test: Advertising > ......................... PHJACDC1 passed test Advertising > Starting test: KnowsOfRoleHolders > ......................... PHJACDC1 passed test KnowsOfRoleHolders > Starting test: RidManager > ......................... PHJACDC1 passed test RidManager > Starting test: MachineAccount > ......................... PHJACDC1 passed test MachineAccount > Starting test: Services > ......................... PHJACDC1 passed test Services > Starting test: ObjectsReplicated > ......................... PHJACDC1 passed test ObjectsReplicated > Starting test: frssysvol > ......................... PHJACDC1 passed test frssysvol > Starting test: frsevent > ......................... PHJACDC1 passed test frsevent > Starting test: kccevent > ......................... PHJACDC1 passed test kccevent > Starting test: systemlog > ......................... PHJACDC1 passed test systemlog > Starting test: VerifyReferences > ......................... PHJACDC1 passed test VerifyReferences > > Testing server: NetcongDR\PHNJDC > Starting test: Replications > ......................... PHNJDC passed test Replications > Starting test: NCSecDesc > ......................... PHNJDC passed test NCSecDesc > Starting test: NetLogons > ......................... PHNJDC passed test NetLogons > Starting test: Advertising > ......................... PHNJDC passed test Advertising > Starting test: KnowsOfRoleHolders > ......................... PHNJDC passed test KnowsOfRoleHolders > Starting test: RidManager > ......................... PHNJDC passed test RidManager > Starting test: MachineAccount > ......................... PHNJDC passed test MachineAccount > Starting test: Services > ......................... PHNJDC passed test Services > Starting test: ObjectsReplicated > ......................... PHNJDC passed test ObjectsReplicated > Starting test: frssysvol > ......................... PHNJDC passed test frssysvol > Starting test: frsevent > ......................... PHNJDC passed test frsevent > Starting test: kccevent > ......................... PHNJDC passed test kccevent > Starting test: systemlog > ......................... PHNJDC passed test systemlog > Starting test: VerifyReferences > ......................... PHNJDC passed test VerifyReferences > > Testing server: MainOffice\PHDC1 > Starting test: Replications > ......................... PHDC1 passed test Replications > Starting test: NCSecDesc > ......................... PHDC1 passed test NCSecDesc > Starting test: NetLogons > ......................... PHDC1 passed test NetLogons > Starting test: Advertising > ......................... PHDC1 passed test Advertising > Starting test: KnowsOfRoleHolders > ......................... PHDC1 passed test KnowsOfRoleHolders > Starting test: RidManager > ......................... PHDC1 passed test RidManager > Starting test: MachineAccount > ......................... PHDC1 passed test MachineAccount > Starting test: Services > ......................... PHDC1 passed test Services > Starting test: ObjectsReplicated > ......................... PHDC1 passed test ObjectsReplicated > Starting test: frssysvol > ......................... PHDC1 passed test frssysvol > Starting test: frsevent > There are warning or error events within the last 24 hours after > the > SYSVOL has been shared. Failing SYSVOL replication problems may > cause > Group Policy problems. > ......................... PHDC1 failed test frsevent > Starting test: kccevent > ......................... PHDC1 passed test kccevent > Starting test: systemlog > An Error Event occured. EventID: 0x0000165B > Time Generated: 04/24/2008 09:41:20 > Event String: The session setup from computer 'MELROSELAB-18' > An Error Event occured. EventID: 0x000016AD > Time Generated: 04/24/2008 09:48:02 > Event String: The session setup from the computer MELROSELAB-18 > ......................... PHDC1 failed test systemlog > Starting test: VerifyReferences > ......................... PHDC1 passed test VerifyReferences > > Running partition tests on : ForestDnsZones > Starting test: CrossRefValidation > ......................... ForestDnsZones passed test > CrossRefValidation > > Starting test: CheckSDRefDom > ......................... ForestDnsZones passed test CheckSDRefDom > > Running partition tests on : DomainDnsZones > Starting test: CrossRefValidation > ......................... DomainDnsZones passed test > CrossRefValidation > > Starting test: CheckSDRefDom > ......................... DomainDnsZones passed test CheckSDRefDom > > Running partition tests on : Schema > Starting test: CrossRefValidation > ......................... Schema passed test CrossRefValidation > Starting test: CheckSDRefDom > ......................... Schema passed test CheckSDRefDom > > Running partition tests on : Configuration > Starting test: CrossRefValidation > ......................... Configuration passed test > CrossRefValidation > Starting test: CheckSDRefDom > ......................... Configuration passed test CheckSDRefDom > > Running partition tests on : phippsny > Starting test: CrossRefValidation > ......................... phippsny passed test CrossRefValidation > Starting test: CheckSDRefDom > ......................... phippsny passed test CheckSDRefDom > > Running partition tests on : DomainDnsZones > Starting test: CrossRefValidation > ......................... DomainDnsZones passed test > CrossRefValidation > > Starting test: CheckSDRefDom > ......................... DomainDnsZones passed test CheckSDRefDom > > Running partition tests on : jacwf > Starting test: CrossRefValidation > ......................... jacwf passed test CrossRefValidation > Starting test: CheckSDRefDom > ......................... jacwf passed test CheckSDRefDom > > Running enterprise tests on : phippsny.org > Starting test: Intersite > Doing intersite inbound replication test on site jacwf: > Doing intersite inbound replication test on site MainOffice: > Doing intersite inbound replication test on site NetcongDR: > ......................... phippsny.org passed test Intersite > Starting test: FsmoCheck > ......................... phippsny.org passed test FsmoCheck > > C:\> > > On Thu, Apr 24, 2008 at 9:40 AM, Odiorne, Derek <derek.odiorne@xxxxxxxxxx> > wrote: > > Harry, > > > > I have seen this before where the the gpo gets enabled on the local pc and > then when you simply "uncheck" the gpo, the local pc keeps the setting. Try > setting the gpo to disabled and see if that doesn't fix the issue for you. > > > > ---------------------------- > > Thanks, > > > > Derek A. Odiorne > > > > > ------------------------------ > > *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On > Behalf Of *Harry Singh > *Sent:* 04/24/2008 9:32 AM > *To:* gptalk@xxxxxxxxxxxxx > *Subject:* [gptalk] Re: Default Homepage Mess.. > > > > Hey Derek, Here goes a more detailed summary of steps i took: > > 1: management wanted me to set a default homepage > 2: set it using IE Mainetnance\URLS\Default Home Page > 3: MGNMT then said to remove that setting so people can configure and keep > what they please > 4: i simply deleted that homepage entry and unchecked that option in the ie > maintenance. > 5: users with IE keep having their default homepage changed even after they > manually set it. i.e. user opens IE with default of google.com. they > manually > change page to msn.com and about 10 minutes later the default page is > google. > com instead of msn.com. This is happening across the board sporadically. > > i RSOP'd the machines that this is occurring on, including mine, and don't > see an entry for default homepage. none of the gpo's in my domain have the > default homepage option configured. > > > You can follow a post i started at thsi site, but the resolution corrected > didn't work or maybe i didn't apply it correctly. > > http://tinyurl.com/69z7sc > > On Thu, Apr 24, 2008 at 9:27 AM, Odiorne, Derek <derek.odiorne@xxxxxxxxxx> > wrote: > > How did you "get rid" of the setting? > > > > ---------------------------- > > Thanks, > > > > Derek A. Odiorne > > > > > ------------------------------ > > *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On > Behalf Of *Harry Singh > *Sent:* 04/24/2008 9:24 AM > *To:* gptalk@xxxxxxxxxxxxx > *Subject:* [gptalk] Default Homepage Mess.. > > > > This is driving me and everyone nuts! > > I am running win2k3 standard at the highest functional level. I adjusted > the > default domain policy ( User Conf\Windows Settings\Inet Exp Main\URLS) to > set the default home page. Management, then informed > me to get ride of this setting, so i removed/uncheckec the URL setting it > but now the default homepage > for most, if not all, clients keeps changing. If the client manually > changes the webpage to their personal preference, it changes back!! > > I'll manually set the homepage, after 30 minutes or even less, it will > change > back to the computers default. > > any ideas ? > > > > > > Notice: The information transmitted in this e-mail may contain confidential > and/or legally privileged information intended only for the use of the > individual(s) named above. Review, use, disclosure, distribution, or > forwarding of this information by persons or entities other than the > intended recipient(s) is prohibited by law and may subject them to criminal > or civil liabilities. Statements and opinion expressed in this e-mail may > not represent those of Mazuma Credit Union. All e-mail communications > through Mazuma's corporate email system are subject to archiving and review > by someone other than the recipient. If you have received this communication > in error, please notify the sender immediately and delete/destroy any and > all copies of the original message from any computer or network system. > > > > > > >