[gptalk] Re: Accounts Policy Seting Missing in RSoP and GPMC Reports
- From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
- To: <gptalk@xxxxxxxxxxxxx>
- Date: Mon, 19 Jan 2009 08:57:51 -0800
Jerry-
I've seen these sections missing from GP Editor in the past, but not from
RSOP. In the case of GP Editor, usually it meant re-registering the MMC
snap-in to fix the issue. From a CSE perspective, there is only one CSE-the
security CSE, that does the work and records the RSOP data. I suppose its
possible that there are issues with the CSE but short of trying to
re-registering scecli.dll, I'm not sure what would help here. It might be
worthwhile to see if its just a reporting issue or really a RSOP issue. They
can go into WMI directly to find out if the data is being recorded. It's a
fairly complex set of steps so if you want to do it, let me know and I can
send some instructions on how to get into that.
Darren
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Cruz, Jerome L
Sent: Monday, January 19, 2009 8:47 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Accounts Policy Seting Missing in RSoP and GPMC Reports
Howdy folks,
I could've sworn I'd heard of this behavior before, but can't put my fingers
on a resolution. Hmmm..
Well , here goes, I have a report from a fellow Admin (separate forest) that
his RSoP and GPMC based reports on "only one DC" in a domain are missing the
Account Policy settings sections (Account and Lockout settings are
missing.apparently Kerberos is there). [Auditors go crazy on things like
this..] Anyway, the other DCs in the domain report the data just fine.
Before contacting me, he had DCPromo'd that DC back down to a member server
and then back up to a DC to try and fix the problem (with no luck). It
sounds as if a piece of a client extension is miss-registered or something.
Does anyone remember this being reported before and have a resolution?
Jerry Cruz | Group Policies Product Manager | Windows Infrastructure
Architecture | CNO | Boeing IT
Other related posts:
