[gptalk] Re: Windows Settings under Computer Settings not being included...
- From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
- To: <gptalk@xxxxxxxxxxxxx>
- Date: Tue, 7 Nov 2006 07:57:57 -0800
You've got a lot going on there Zach. A lot of problems. Did you set a bunch
of service permissions using security policy? IF so, you might have
inadvertantly locked things down too much. For example--did you stop the
TCP/IP NetBIOS helper service on the clients? If so, that service is
required for proper GP Processing. Without it, things just fail.
Darren
-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Baiel, Zach
Sent: Tuesday, November 07, 2006 7:39 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] RE: [gptalk] Re: Windows Settings under Computer Settings
not being included...
Darren and everyone,
Sorry. I was under the assumption that information was stored in the
reg.pol file. I will look over your paper to learn more about the storage
of GPO information. I am seeing one SceCli error, but it looks like it is
related to service. The errors I see are these:
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1085
Date: 11/7/2006
Time: 10:22:11 AM
User: NT AUTHORITY\SYSTEM
Description:
The Group Policy client-side extension Security failed to execute. Please
look for any errors reported earlier by that extension.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 11/7/2006
Time: 10:22:11 AM
User: N/A
Description:
Security policies were propagated with warning. 0x5 : Access is denied.
Please review the detailed log security\logs\winlogon.log under Windows root
to troubleshoot the application of security policy.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
The only error in the winlogon.log is this:
Configure TlntSvr.
Warning 5: Access is denied.
Error opening TlntSvr.
Warning 5: Access is denied.
Error opening TlntSvr.
Where is that information stored? I assume that is telnet?
We are also seeing this error from time to time:
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 11/7/2006
Time: 10:01:11 AM
User: domain\user
Description:
Windows cannot access the file gpt.ini for GPO
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domain.
The file must be present at the location
<\\domain_deleted\sysvol\domain_deleted\Policies\{31B2F340-016D-11D2-945F-00
C04FB984F9}\gpt.ini>. (The format of the specified network name is invalid.
). Group Policy processing aborted.
I don't know if this is related, but I thought I would include it:
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: EventSystem
Event Category: (52)
Event ID: 4356
Date: 11/7/2006
Time: 10:00:32 AM
User: N/A
Description:
The COM+ Event System failed to create an instance of the subscriber
partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:{6295DF2D-35EE-11D1-870
7-00C04FD93327}. CoGetObject returned HRESULT 8000401A.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Zach
-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]On
Behalf Of Darren Mar-Elia
Sent: Monday, November 06, 2006 4:41 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Windows Settings under Computer Settings not being
included...
Well, stuff under Windows Settings by and large don't store their settings
in the registry.pol file, which would explain why you aren't seeing them
there (check out my whitepaper on GP Storage at
www.gpoguy.com/faqs/gpstorage.htm).
The Do not display last logon setting is a security policy and so stores
itself in gpttmpl.inf in the GPT in SYSVOL. In any case, you're saying that
those security policies aren't applying. Have you run RSOP on the client
computers to verify that the client thinks its processing those security
policies? Also, check the application event log for errors related to the
Source: SCECLI (the Security CSE).
Darren
-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Baiel, Zach
Sent: Monday, November 06, 2006 11:25 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] RE: [gptalk] Re: Windows Settings under Computer Settings
not being included...
Darren,
No. The options are showing, however, no matter what I edit, nothing
reflects inside the reg.pol file, or the actual settings being applied the
machine. No errors occur when I change a settings, lets say, Do not Display
the Last User Logon. I have that enabled, but the setting does not apply to
the machine, even though other settings from the same GPO do apply. In
fact, anything from the Computer Config|Windows Settings area of the GPO do
not apply.
Zach
-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]On
Behalf Of Darren Mar-Elia
Sent: Monday, November 06, 2006 2:20 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Windows Settings under Computer Settings not being
included...
Zach-
Do you mean that stuff under Computer Config|Windows Settings is not being
show in GP Editor? If so then check out KB # 555218. If not, let us know.
Darren
-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Baiel, Zach
Sent: Monday, November 06, 2006 5:34 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Windows Settings under Computer Settings not being
included...
Hello everyone. I have quite a problem. For some reason, none of my
settings under Computer Configuration->Windows Settings is being added to
any of my Group Policies. Does anyone know why this might be happening?
We're running Windows Server 2003, if that helps.
I check the reg.pol file to see if changes are made, but the settings do not
show. Also, when I have the reg.pol open, I can apply settings from this
folder, however, if you do any other settings, GPO Editor will complain and
say that the file is in use.
Very strange. This problem, just started happening a week or so ago without
any reason that I know of. Any help would be great appreciated.
Thank you for your time,
Zach
"*** This message is from the West Lafayette Community School Corporation
and may contain confidential or privileged information.
If you are not the addressee of this e-mail or it was addressed to you in
error, you are not authorized to copy or distribute this e-mail or
attachments.
Any error in addressing or delivery of this e-mail does not waive
confidentiality or privilege. If you received this e-mail in error, please
notify the sender by return e-mail and delete it. This e-mail message may
not be copied, distributed, or forwarded without this statement and the
permission of the sender.***"
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************
Other related posts:
