[gptalk] Re: Null SID and GPO processing
- From: Neil Berry <neil@xxxxxxxxxxxxxxxx>
- To: gptalk@xxxxxxxxxxxxx
- Date: Thu, 21 Jun 2007 14:39:09 +0100
Ah it worked for a while - now two machines back to NUL SID and all my
GPOs denied again.
Neil Berry wrote:
Seems to have been the issue - gave a new SID to the affected machines
and they were fine. Looks like build team had ghosted images from
machines already on the domain ! Many thanks again Martin
Neil Berry wrote:
That's a thought - thanks Martin !
Martin Hugo wrote:
Are they cloned machines? Try running Newsid from sysinternals on
the affected machines.
Martin T. Hugo
Network Administrator
Hilliard City Schools
Tel: 614-921-7102
Martin_Hugo@xxxxxxxx
*gptalk@xxxxxxxxxxxxx writes:
*Hi all,
I was just wondering if anyone had come across this issue before. I
was
having some problems with GPO processing - software installation and
noticed that several workstations were members of a Group called NULL
SID instead of expected groups (authenticated users etc)
I seem to get various GPO processing problems with these (obviously
because they are not in authenticated users group and can't read the
policies) Re-adding the machine to domain solves initially but then it
will end up joining the Null SID group again. DCs seem fine and
machines can connect to Domain and authenticate etc - ran dcdiag,
nltest
etc.
Any thoughts or clues would be be most welcome. At the moment my
only
fix is removing and readding to domain which fixes temporarily.
Thanks for your thoughts - I am guessing it must be some sort of
intermittent network problem. Found a little on web on this issue but
no real fix or cause so far.
Thanks
Neil
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field
OR by logging into the freelists.org Web interface. Archives for the
list are available at http://www.freelists.org/archives/gptalk/
************************
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field
OR by logging into the freelists.org Web interface. Archives for the
list are available at http://www.freelists.org/archives/gptalk/
************************
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field
OR by logging into the freelists.org Web interface. Archives for the
list are available at http://www.freelists.org/archives/gptalk/
************************
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at http://www.freelists.org/archives/gptalk/
************************
- References:
- [gptalk] Null SID and GPO processing
- From: Neil Berry
- [gptalk] Re: Null SID and GPO processing
- From: Martin Hugo
- [gptalk] Re: Null SID and GPO processing
- From: Neil Berry
- [gptalk] Re: Null SID and GPO processing
- From: Neil Berry
Other related posts:
- » [gptalk] Null SID and GPO processing
- » [gptalk] Re: Null SID and GPO processing
- » [gptalk] Re: Null SID and GPO processing
- » [gptalk] Re: Null SID and GPO processing
- » [gptalk] Re: Null SID and GPO processing
Neil Berry wrote:
That's a thought - thanks Martin ! Martin Hugo wrote:Are they cloned machines? Try running Newsid from sysinternals on the affected machines.Martin T. Hugo Network Administrator Hilliard City Schools Tel: 614-921-7102 Martin_Hugo@xxxxxxxx *gptalk@xxxxxxxxxxxxx writes: *Hi all,I was just wondering if anyone had come across this issue before. I washaving some problems with GPO processing - software installation and noticed that several workstations were members of a Group called NULL SID instead of expected groups (authenticated users etc) I seem to get various GPO processing problems with these (obviously because they are not in authenticated users group and can't read the policies) Re-adding the machine to domain solves initially but then it will end up joining the Null SID group again. DCs seem fine andmachines can connect to Domain and authenticate etc - ran dcdiag, nltestetc.Any thoughts or clues would be be most welcome. At the moment my onlyfix is removing and readding to domain which fixes temporarily. Thanks for your thoughts - I am guessing it must be some sort of intermittent network problem. Found a little on web on this issue but no real fix or cause so far. Thanks Neil ***********************You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at http://www.freelists.org/archives/gptalk/***********************************************You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at http://www.freelists.org/archives/gptalk/************************
***********************You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at http://www.freelists.org/archives/gptalk/
************************
- [gptalk] Null SID and GPO processing
- From: Neil Berry
- [gptalk] Re: Null SID and GPO processing
- From: Martin Hugo
- [gptalk] Re: Null SID and GPO processing
- From: Neil Berry
- [gptalk] Re: Null SID and GPO processing
- From: Neil Berry