[gptalk] Re: Multiple issues with GPMC

  • From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Thu, 9 Oct 2008 10:27:55 -0700

It looks to me like DNS is totally non-functional, or at least seriously
broken.

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Aaron Rabinowitz
Sent: Thursday, October 09, 2008 8:31 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Multiple issues with GPMC

I've performed a dcdiag and posted, can you tell me any info from viewing
this

these are what failed


      Starting test: NetLogons
         [FILESRV] An net use or LsaPolicy operation failed with error
64, The specified network name is no longer available..
         ......................... FILESRV-failed test NetLogons

      Starting test: MachineAccount
         Could not open pipe with [FILESRV-]:failed with 64: The
specified network name is no longer available.
         Could not get NetBIOSDomainName
         Failed can not test for HOST SPN
         Failed can not test for HOST SPN
         * Missing SPN :(null)
         * Missing SPN :(null)
         ......................... FILESRV-failed test MachineAccount
      Starting test: Services
         Could not open Remote ipc to [FILESRV-]:failed with 64: The
specified network name is no longer available.
         ......................... FILESRVfailed test Services
      S
      Starting test: frssysvol
         [FILESRV-] An net use or LsaPolicy operation failed with
error 64, The specified network name is no longer available..
         ......................... FILESRV-failed test frssysvol
      Starting test: frsevent
         ......................... FILESRV-failed test frsevent
      Starting test: kccevent
         Failed to enumerate event log records, error The specified
network name is no longer available.
         ......................... FILESRV-failed test kccevent
      Starting test: systemlog
         Failed to enumerate event log records, error The specified
network name is no longer available.
         ......................... FILESRV-failed test systemlog




On Thu, Oct 9, 2008 at 10:57 AM, Darren Mar-Elia <darren@xxxxxxxxxx> wrote:
> It is possible to reinstall GPMC as many times as you want--it doesn't
> effect anything to do with the actual GPOs. Its just a tool for
> viewing/editing them. The delay you're seeing, frankly, sounds to me like
> network issues. If there are truly no settings defined, that could mean a
> lot of issues, such as SYSVOL replication problems or just that all of the
> GP settings data is really gone. Frankly, I think you have more problems
> than can be easily troubleshot over email. If possible, I would start by
> ensuring that network things like DNS name resolution and AD replication
are
> working correctly across all your DCs.
>
> Darren
>
> -----Original Message-----
> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
> Behalf Of Aaron Rabinowitz
> Sent: Thursday, October 09, 2008 7:47 AM
> To: gptalk@xxxxxxxxxxxxx
> Subject: [gptalk] Re: Multiple issues with GPMC
>
> gp time was about 5 seconds (for me) and less than a full second when
> ran on the server.
>
> the dsa.msc happens on both systems albeit, can I uninstall and
> re-install gpmc while the server is running without effecting users??
> also as an update, if I try to view settings and wait approx 15
> minutes it comes up, I ahve viewed all policy links including default
> DC policy and for each and every single one it says there are no
> settings define.  how can this be the case?
>
> On Thu, Oct 9, 2008 at 10:32 AM, Darren Mar-Elia <darren@xxxxxxxxxx>
wrote:
>> Aaron-
>> It sounds like you have a lot going on there. For GPMC, does it freeze on
>> more than one machine? If not, then try deinstalling/reinstalling on that
>> one machine.
>>
>> In terms of time spent in GP, you can download my gptime.exe utility
>>
>
(http://www.gpoguy.com/FreeTools/FreeToolsLibrary/tabid/67/agentType/View/Pr
>> opertyID/80/Default.aspx) and use it to query a system that appears slow.
> It
>> will tell you how long time is being spent processing policy. If its more
>> than 10-20 seconds for computer or user, then you could have an issue.
>>
>> As for the DSA.MSC issue, if this is happening on only one system, and
> it's
>> the same system that is having GPMC problems, it may be time to wipe and
>> load...
>>
>> Darren
>>
>> -----Original Message-----
>> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
>> Behalf Of Aaron Rabinowitz
>> Sent: Thursday, October 09, 2008 5:42 AM
>> To: gptalk@xxxxxxxxxxxxx
>> Subject: [gptalk] Multiple issues with GPMC
>>
>> First off my knowledge is limited with GP so any help is greatly
>> appreciated as I'm already reading up on as much as possible.
>>
>> there are several problems-
>> 1: the GPMC freezes if I try to view a GPO in teh GPMC, although I am
>> able to view the links.  but even in the link section I am unable to
>> view the settings it simply hangs and never comes up with anything -
>> it does not freeze here though I am able to move away and continue
>> functionality.
>>
>> If I do a gpresult on client machines it shows GP being applied but I
>> think it is not working correctly - users have reported it taking a
>> much longer amount of time to sign in then usual.
>>
>> When I try to open it with dsa.msc properties it states "catastrophic
>> failure"
>> but then still opens it up. (weird I know but obviously there is
>> soemthing wrong if its reporting this - I can email pictures if anyone
>> would like to see exactly what this error looks like)
>>
>> Some things that may be relavant
>> ---Roaming profiles are implemented
>> ---I am new to this organization and was left with nothing to go by ,
>> the previous IT guys left me a few IP address with passwords
>> ---While looking through the GPMC ybder the "Domain Controllers" OU
>> there is a blue (!) and when looking at the properties it has "block
>> Inheritance" checked off
>>
>> --- On one server it has Hash values (SID's) instead of users and user
> names
>>
>>
>>
>>
>>
>>
>> all ive got now, I'm still palying detective, if you ahve any thoughts
>> concerns or ideas as well as things I should look for please let me
>> know.  I believe there is a very serious problem and I'm quite worried
>> ***********************
>> You can unsubscribe from gptalk by sending email to
>> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
by
>> logging into the freelists.org Web interface. Archives for the list are
>> available at http://www.freelists.org/archives/gptalk/
>> ************************
>>
>> ***********************
>> You can unsubscribe from gptalk by sending email to
> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
> logging into the freelists.org Web interface. Archives for the list are
> available at http://www.freelists.org/archives/gptalk/
>
>> ************************
>>
> ***********************
> You can unsubscribe from gptalk by sending email to
> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
> logging into the freelists.org Web interface. Archives for the list are
> available at http://www.freelists.org/archives/gptalk/
> ************************
>
> ***********************
> You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at http://www.freelists.org/archives/gptalk/

> ************************
>
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at http://www.freelists.org/archives/gptalk/
************************

***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************

Other related posts: