You've got a lot going on there Zach. A lot of problems. Did you set a bunch of service permissions using security policy? IF so, you might have inadvertantly locked things down too much. For example--did you stop the TCP/IP NetBIOS helper service on the clients? If so, that service is required for proper GP Processing. Without it, things just fail. Darren -----Original Message----- From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Baiel, Zach Sent: Tuesday, November 07, 2006 7:39 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] RE: [gptalk] Re: Windows Settings under Computer Settings not being included... Darren and everyone, Sorry. I was under the assumption that information was stored in the reg.pol file. I will look over your paper to learn more about the storage of GPO information. I am seeing one SceCli error, but it looks like it is related to service. The errors I see are these: Event Type: Error Event Source: Userenv Event Category: None Event ID: 1085 Date: 11/7/2006 Time: 10:22:11 AM User: NT AUTHORITY\SYSTEM Description: The Group Policy client-side extension Security failed to execute. Please look for any errors reported earlier by that extension. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: SceCli Event Category: None Event ID: 1202 Date: 11/7/2006 Time: 10:22:11 AM User: N/A Description: Security policies were propagated with warning. 0x5 : Access is denied. Please review the detailed log security\logs\winlogon.log under Windows root to troubleshoot the application of security policy. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. The only error in the winlogon.log is this: Configure TlntSvr. Warning 5: Access is denied. Error opening TlntSvr. Warning 5: Access is denied. Error opening TlntSvr. Where is that information stored? I assume that is telnet? We are also seeing this error from time to time: Event Type: Error Event Source: Userenv Event Category: None Event ID: 1058 Date: 11/7/2006 Time: 10:01:11 AM User: domain\user Description: Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domain. The file must be present at the location <\\domain_deleted\sysvol\domain_deleted\Policies\{31B2F340-016D-11D2-945F-00 C04FB984F9}\gpt.ini>. (The format of the specified network name is invalid. ). Group Policy processing aborted. I don't know if this is related, but I thought I would include it: For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: EventSystem Event Category: (52) Event ID: 4356 Date: 11/7/2006 Time: 10:00:32 AM User: N/A Description: The COM+ Event System failed to create an instance of the subscriber partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:{6295DF2D-35EE-11D1-870 7-00C04FD93327}. CoGetObject returned HRESULT 8000401A. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Zach -----Original Message----- From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]On Behalf Of Darren Mar-Elia Sent: Monday, November 06, 2006 4:41 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Windows Settings under Computer Settings not being included... Well, stuff under Windows Settings by and large don't store their settings in the registry.pol file, which would explain why you aren't seeing them there (check out my whitepaper on GP Storage at www.gpoguy.com/faqs/gpstorage.htm). The Do not display last logon setting is a security policy and so stores itself in gpttmpl.inf in the GPT in SYSVOL. In any case, you're saying that those security policies aren't applying. Have you run RSOP on the client computers to verify that the client thinks its processing those security policies? Also, check the application event log for errors related to the Source: SCECLI (the Security CSE). Darren -----Original Message----- From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Baiel, Zach Sent: Monday, November 06, 2006 11:25 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] RE: [gptalk] Re: Windows Settings under Computer Settings not being included... Darren, No. The options are showing, however, no matter what I edit, nothing reflects inside the reg.pol file, or the actual settings being applied the machine. No errors occur when I change a settings, lets say, Do not Display the Last User Logon. I have that enabled, but the setting does not apply to the machine, even though other settings from the same GPO do apply. In fact, anything from the Computer Config|Windows Settings area of the GPO do not apply. Zach -----Original Message----- From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]On Behalf Of Darren Mar-Elia Sent: Monday, November 06, 2006 2:20 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Windows Settings under Computer Settings not being included... Zach- Do you mean that stuff under Computer Config|Windows Settings is not being show in GP Editor? If so then check out KB # 555218. If not, let us know. Darren -----Original Message----- From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Baiel, Zach Sent: Monday, November 06, 2006 5:34 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Windows Settings under Computer Settings not being included... Hello everyone. I have quite a problem. For some reason, none of my settings under Computer Configuration->Windows Settings is being added to any of my Group Policies. Does anyone know why this might be happening? We're running Windows Server 2003, if that helps. I check the reg.pol file to see if changes are made, but the settings do not show. Also, when I have the reg.pol open, I can apply settings from this folder, however, if you do any other settings, GPO Editor will complain and say that the file is in use. Very strange. This problem, just started happening a week or so ago without any reason that I know of. Any help would be great appreciated. Thank you for your time, Zach "*** This message is from the West Lafayette Community School Corporation and may contain confidential or privileged information. If you are not the addressee of this e-mail or it was addressed to you in error, you are not authorized to copy or distribute this e-mail or attachments. Any error in addressing or delivery of this e-mail does not waive confidentiality or privilege. If you received this e-mail in error, please notify the sender by return e-mail and delete it. This e-mail message may not be copied, distributed, or forwarded without this statement and the permission of the sender.***" *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************ *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************