[gptalk] Re: Null SID and GPO processing

  • From: Neil Berry <neil@xxxxxxxxxxxxxxxx>
  • To: gptalk@xxxxxxxxxxxxx
  • Date: Thu, 21 Jun 2007 14:39:09 +0100

Ah it worked for a while - now two machines back to NUL SID and all my GPOs denied again.



Neil Berry wrote:
Seems to have been the issue - gave a new SID to the affected machines and they were fine. Looks like build team had ghosted images from machines already on the domain ! Many thanks again Martin

Neil Berry wrote:
That's a thought - thanks Martin !

Martin Hugo wrote:
Are they cloned machines? Try running Newsid from sysinternals on the affected machines.

Martin T. Hugo
Network Administrator
Hilliard City Schools
Tel: 614-921-7102
Martin_Hugo@xxxxxxxx

*gptalk@xxxxxxxxxxxxx writes:
*Hi all,

I was just wondering if anyone had come across this issue before. I was
having some problems with GPO processing - software installation and
noticed that several workstations were members of a Group called NULL
SID instead of expected groups (authenticated users etc)

I seem to get various GPO processing problems with these (obviously
because they are not in authenticated users group and can't read the
policies)  Re-adding the machine to domain solves initially but then it
will end up joining the Null SID group again.  DCs seem fine and
machines can connect to Domain and authenticate etc - ran dcdiag, nltest
etc.

Any thoughts or clues would be be most welcome. At the moment my only
fix is removing and readding to domain which fixes temporarily.

Thanks for your thoughts - I am guessing it must be some sort of
intermittent network problem.   Found a little on web on this issue but
no real fix or cause so far.

Thanks
Neil
***********************
You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at http://www.freelists.org/archives/gptalk/
************************


***********************
You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at http://www.freelists.org/archives/gptalk/
************************



***********************
You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at http://www.freelists.org/archives/gptalk/
************************



***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************

Other related posts: