[gptalk] Re: GP not applied

  • From: "Gray Troutman" <jgraytroutman@xxxxxxxxx>
  • To: gptalk@xxxxxxxxxxxxx
  • Date: Thu, 24 Aug 2006 15:25:17 -0500

I ran GPOTool and received no errors.

On 8/24/06, Gray Troutman <jgraytroutman@xxxxxxxxx> wrote:

I only have the one DC, could the error be caused by the rename?




On 8/24/06, Darren Mar-Elia <darren@xxxxxxxxxx > wrote: > > Ok. One thing I see in the userenv log is a lot of inconsistency in > GPOs between AD & SYSVOL. Version number mismatches and inability to read > the sysvol portion of a GPO. I am guessing that whatever DCs your user's are > hitting are not replicating correctly. How many DCs do you have? I would run > gpotool.exe (from SUpport Tools ) against your domain's GPOs and see > what errors show up. > > Darren > > ------------------------------ > *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] > *On Behalf Of *Gray Troutman > *Sent:* Thursday, August 24, 2006 12:50 PM > > *To: * gptalk@xxxxxxxxxxxxx > *Subject:* [gptalk] Re: GP not applied > > Okay, here are userenv.log and gpedit.log. I'm looking at them as well, > but please let me know what you see. As I've said before, I'm new to all > this GPO stuff. I was really happy when it was working over here, I'd just > like to know why it's not working now that I've moved the server. > > > > On 8/24/06, Darren Mar-Elia <darren@xxxxxxxxxx> wrote: > > > > You might try enabling verbose userenv logging on one of those > > problem users, and then post the results here. > > > > > > > > ------------------------------ > > *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] > > *On Behalf Of *Gray Troutman > > *Sent:* Thursday, August 24, 2006 12:17 PM > > *To:* gptalk@xxxxxxxxxxxxx > > *Subject:* [gptalk] Re: GP not applied > > > > I had other test users (1-5) and they worked in the lab and are not > > now. Here's a strange one, if I log in as someone who is just a domain > > admin, the GPOs apply correctly. If I log in as a newly created user, > > nothing works. If I make that user a domain admin, nothing works. > > > > On 8/24/06, Darren Mar-Elia <darren@xxxxxxxxxx> wrote: > > > > > > So, are you saying that you had a DC on an isolated subnet and now > > > its on your production network, and a client on that network that is part of > > > that DC's domain is not getting user policy as expected? If so, then make > > > sure that the GPOs you're trying to deliver are linked in such a way that > > > the user test6 will process them. The fact that a domain admin account gets > > > the policies tells me that the policies may not be linked to a place in your > > > AD tree that test6 will get them. > > > > > > Darren > > > > > > ------------------------------ > > > *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] > > > *On Behalf Of *Gray Troutman > > > *Sent:* Thursday, August 24, 2006 11:41 AM > > > *To:* gptalk@xxxxxxxxxxxxx > > > *Subject: *[gptalk] GP not applied > > > > > > > > > Hey folks, > > > Well, I just moved the DC from the lab to the network and it no > > > longer applies the GPOs. I can join the domain and log in with no problem, > > > but the policies are not applied. If I run gpresult, I get "INFO: The user > > > "CMHWM\test6" does not have RSOP data." > > > > > > Two things: One, I changed the domain server name. Two, I get the > > > policies if I log in as a domain admin, but not as a user. > > > > > > Any ideas what I screwed up here? > > > > > > Thanks, > > > Gray > > > > > > > > > > >

Other related posts: