[gptalk] Re: Multiple issues with GPMC
- From: "Aaron Rabinowitz" <rabino67@xxxxxxxxx>
- To: gptalk@xxxxxxxxxxxxx
- Date: Thu, 9 Oct 2008 13:32:44 -0400
its not - nslookup works fine - those are simply the tests that failed...
if I do a dsastat -loglevel:verbose it passes... there is a small
chance that the server is not 100% up to date on updates, do you think
this could be contributing?
On Thu, Oct 9, 2008 at 1:27 PM, Darren Mar-Elia <darren@xxxxxxxxxx> wrote:
> It looks to me like DNS is totally non-functional, or at least seriously
> broken.
>
> -----Original Message-----
> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
> Behalf Of Aaron Rabinowitz
> Sent: Thursday, October 09, 2008 8:31 AM
> To: gptalk@xxxxxxxxxxxxx
> Subject: [gptalk] Re: Multiple issues with GPMC
>
> I've performed a dcdiag and posted, can you tell me any info from viewing
> this
>
> these are what failed
>
>
> Starting test: NetLogons
> [FILESRV] An net use or LsaPolicy operation failed with error
> 64, The specified network name is no longer available..
> ......................... FILESRV-failed test NetLogons
>
> Starting test: MachineAccount
> Could not open pipe with [FILESRV-]:failed with 64: The
> specified network name is no longer available.
> Could not get NetBIOSDomainName
> Failed can not test for HOST SPN
> Failed can not test for HOST SPN
> * Missing SPN :(null)
> * Missing SPN :(null)
> ......................... FILESRV-failed test MachineAccount
> Starting test: Services
> Could not open Remote ipc to [FILESRV-]:failed with 64: The
> specified network name is no longer available.
> ......................... FILESRVfailed test Services
> S
> Starting test: frssysvol
> [FILESRV-] An net use or LsaPolicy operation failed with
> error 64, The specified network name is no longer available..
> ......................... FILESRV-failed test frssysvol
> Starting test: frsevent
> ......................... FILESRV-failed test frsevent
> Starting test: kccevent
> Failed to enumerate event log records, error The specified
> network name is no longer available.
> ......................... FILESRV-failed test kccevent
> Starting test: systemlog
> Failed to enumerate event log records, error The specified
> network name is no longer available.
> ......................... FILESRV-failed test systemlog
>
>
>
>
> On Thu, Oct 9, 2008 at 10:57 AM, Darren Mar-Elia <darren@xxxxxxxxxx> wrote:
>> It is possible to reinstall GPMC as many times as you want--it doesn't
>> effect anything to do with the actual GPOs. Its just a tool for
>> viewing/editing them. The delay you're seeing, frankly, sounds to me like
>> network issues. If there are truly no settings defined, that could mean a
>> lot of issues, such as SYSVOL replication problems or just that all of the
>> GP settings data is really gone. Frankly, I think you have more problems
>> than can be easily troubleshot over email. If possible, I would start by
>> ensuring that network things like DNS name resolution and AD replication
> are
>> working correctly across all your DCs.
>>
>> Darren
>>
>> -----Original Message-----
>> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
>> Behalf Of Aaron Rabinowitz
>> Sent: Thursday, October 09, 2008 7:47 AM
>> To: gptalk@xxxxxxxxxxxxx
>> Subject: [gptalk] Re: Multiple issues with GPMC
>>
>> gp time was about 5 seconds (for me) and less than a full second when
>> ran on the server.
>>
>> the dsa.msc happens on both systems albeit, can I uninstall and
>> re-install gpmc while the server is running without effecting users??
>> also as an update, if I try to view settings and wait approx 15
>> minutes it comes up, I ahve viewed all policy links including default
>> DC policy and for each and every single one it says there are no
>> settings define. how can this be the case?
>>
>> On Thu, Oct 9, 2008 at 10:32 AM, Darren Mar-Elia <darren@xxxxxxxxxx>
> wrote:
>>> Aaron-
>>> It sounds like you have a lot going on there. For GPMC, does it freeze on
>>> more than one machine? If not, then try deinstalling/reinstalling on that
>>> one machine.
>>>
>>> In terms of time spent in GP, you can download my gptime.exe utility
>>>
>>
> (http://www.gpoguy.com/FreeTools/FreeToolsLibrary/tabid/67/agentType/View/Pr
>>> opertyID/80/Default.aspx) and use it to query a system that appears slow.
>> It
>>> will tell you how long time is being spent processing policy. If its more
>>> than 10-20 seconds for computer or user, then you could have an issue.
>>>
>>> As for the DSA.MSC issue, if this is happening on only one system, and
>> it's
>>> the same system that is having GPMC problems, it may be time to wipe and
>>> load...
>>>
>>> Darren
>>>
>>> -----Original Message-----
>>> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
>>> Behalf Of Aaron Rabinowitz
>>> Sent: Thursday, October 09, 2008 5:42 AM
>>> To: gptalk@xxxxxxxxxxxxx
>>> Subject: [gptalk] Multiple issues with GPMC
>>>
>>> First off my knowledge is limited with GP so any help is greatly
>>> appreciated as I'm already reading up on as much as possible.
>>>
>>> there are several problems-
>>> 1: the GPMC freezes if I try to view a GPO in teh GPMC, although I am
>>> able to view the links. but even in the link section I am unable to
>>> view the settings it simply hangs and never comes up with anything -
>>> it does not freeze here though I am able to move away and continue
>>> functionality.
>>>
>>> If I do a gpresult on client machines it shows GP being applied but I
>>> think it is not working correctly - users have reported it taking a
>>> much longer amount of time to sign in then usual.
>>>
>>> When I try to open it with dsa.msc properties it states "catastrophic
>>> failure"
>>> but then still opens it up. (weird I know but obviously there is
>>> soemthing wrong if its reporting this - I can email pictures if anyone
>>> would like to see exactly what this error looks like)
>>>
>>> Some things that may be relavant
>>> ---Roaming profiles are implemented
>>> ---I am new to this organization and was left with nothing to go by ,
>>> the previous IT guys left me a few IP address with passwords
>>> ---While looking through the GPMC ybder the "Domain Controllers" OU
>>> there is a blue (!) and when looking at the properties it has "block
>>> Inheritance" checked off
>>>
>>> --- On one server it has Hash values (SID's) instead of users and user
>> names
>>>
>>>
>>>
>>>
>>>
>>>
>>> all ive got now, I'm still palying detective, if you ahve any thoughts
>>> concerns or ideas as well as things I should look for please let me
>>> know. I believe there is a very serious problem and I'm quite worried
>>> ***********************
>>> You can unsubscribe from gptalk by sending email to
>>> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
> by
>>> logging into the freelists.org Web interface. Archives for the list are
>>> available at //www.freelists.org/archives/gptalk/
>>> ************************
>>>
>>> ***********************
>>> You can unsubscribe from gptalk by sending email to
>> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
>> logging into the freelists.org Web interface. Archives for the list are
>> available at //www.freelists.org/archives/gptalk/
>>
>>> ************************
>>>
>> ***********************
>> You can unsubscribe from gptalk by sending email to
>> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
>> logging into the freelists.org Web interface. Archives for the list are
>> available at //www.freelists.org/archives/gptalk/
>> ************************
>>
>> ***********************
>> You can unsubscribe from gptalk by sending email to
> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
> logging into the freelists.org Web interface. Archives for the list are
> available at //www.freelists.org/archives/gptalk/
>
>> ************************
>>
> ***********************
> You can unsubscribe from gptalk by sending email to
> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
> logging into the freelists.org Web interface. Archives for the list are
> available at //www.freelists.org/archives/gptalk/
> ************************
>
> ***********************
> You can unsubscribe from gptalk by sending email to
> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
> logging into the freelists.org Web interface. Archives for the list are
> available at //www.freelists.org/archives/gptalk/
> ************************
>
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************
Other related posts:
