Sorry for the delayed response Dustin. Frankly neither log below looks
particularly healthy but if I focus on the green one, then 1722 is RPC
server is unavailable. Do you have firewall between your Win2K clients and
your DCs? That would be the most likely explanation there—that firewalls are
blocking authentication of the Win2K boxes to their DCs. Otherwise, the DCs
are somehow non-responsive to those clients.
Darren
*From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On
Behalf Of *Dustin Hand
*Sent:* Tuesday, February 27, 2007 1:32 PM
*To:* gptalk@xxxxxxxxxxxxx
*Subject:* [gptalk] Re: GPO not getting distributed?
Thanks Alan,
I opened up the inf folder, and, what do ya know, the .adm
files were missing, so I downloaded them from MS and GPMC works fine now.
As for my problem, I have enforced policies, such as disabling
the change of password (these are semi-public machines) disabled MSI
installer, set a desktop background that cannot be changed, disabled
regedit, and the changing of the screensaver. It appears as though the
policy is not getting applied to only the Windows 2000 machines in the
network, the XP machines have everything working fine. We have tried doing
a clean reinstall, to ensure that nothing is conflicting and even that
machine is not enforcing the policy. I have tried using the forced gpupdate
(different command in 2000) and that still did not enforce the policy. The
UserENV.log from one of the XP machines (highlighted in pink) is
below. The Windows 2000 (highlighted in green) follows it. I could not get
the download going for the Policy Log Reporter, so I was unable to get it
installed and working. The logs provided are, I am assuming, just of errors
that happen and do not report the full process of the GPO.
Thanks,
Dustin
Capital Area Chapter of the American Red Cross, Tallahassee, FL
XP UserENV.log (note this is part of it, the full length would make this
email go forever, the last error, continues for quite a long ways down the
list) Hope this helps, at least part way:
*USERENV(294.298) 00:08:10:968 CUserProfile::CleanupUserProfile: Ref Count
is not 0**
USERENV(294.298) 00:08:11:000 CUserProfile::CleanupUserProfile: Ref Count
is not 0
USERENV(294.298) 00:08:11:000 CUserProfile::CleanupUserProfile: Ref Count
is not 0
USERENV(294.298) 00:08:11:000 CUserProfile::CleanupUserProfile: Ref Count
is not 0
USERENV(2c0.2c4) 00:08:49:906 UnloadUserProfile: received a NULL hProfile.
USERENV(294.48c) 00:08:54:078 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(294.198) 02:04:20:018 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(294.198) 03:55:19:733 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(294.198) 05:33:43:154 PingComputer: GetBestInterface with 1003
USERENV(294.198) 05:33:43:154 ProcessGPOs: DSGetDCName failed with 10065.
USERENV(294.198 ) 07:13:43:185 PingComputer: GetBestInterface with 1003
USERENV(294.198) 07:13:43:185 ProcessGPOs: DSGetDCName failed with 10065.
USERENV(294.198) 09:08:43:201 PingComputer: GetBestInterface with 1003
USERENV(294.198 ) 09:08:43:201 ProcessGPOs: DSGetDCName failed with 10065.
USERENV(294.198) 10:49:38:788 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(294.198) 12:33:36:551 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(294.198) 14:11:29:105 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(294.198) 16:07:53:997 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
*
Windows 2000UserENV.log (this is only part of the file, the last 4 or 5
lines repeat for quite a while down the list.) Hope this helps:
*USERENV(b8.2c0) 18:25:32:765 MyGetUserName: GetUserNameEx failed with
1722.**
USERENV(b8.2c0) 18:25:37:802 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.2c0) 18:25:42:769 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.2c0) 18:25:47:736 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.2c0) 18:25:47:736 ProcessGPOs: MyGetUserName failed with 1722.
USERENV(b8.a0) 19:38:11:062 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.a0) 19:38:16:990 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.a0) 19:38:19:914 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.a0) 19:38:24:701 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.a0) 19:38:24:701 GetUserGuid: Failed to get user guid with
1722.
USERENV(b8.a0) 19:38:30:930 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.a0) 19:38:35:737 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.a0) 19:38:39:342 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.a0) 19:38:43:268 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.a0) 19:38:43:268 GetUserGuid: Failed to get user guid with
1722.
USERENV(b8.1f8) 19:38:47:484 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.1f8) 19:38:50:308 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.1f8) 19:38:55:165 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.1f8) 19:38:58:019 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.1f8) 19:38:58:019 ProcessGPOs: MyGetUserName failed with 1722.
USERENV(b8.1b8) 20:22:48:111 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.1b8) 20:22:48:782 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.1b8) 20:22:49:453 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.1b8) 20:22:50:124 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.1b8) 20:22:50:124 ProcessGPOs: MyGetUserName failed with 1722.
USERENV(b8.c4) 21:27:58:354 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.c4) 21:27:59:025 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.c4) 21:27:59:696 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.c4) 21:28:00:367 MyGetUserName: GetUserNameEx failed with
1722.
USERENV(b8.c4) 21:28:00:367 ProcessGPOs: MyGetUserName failed with 1722.
*
On 2/27/07, Alan & Margaret <syspro@xxxxxxxxxxxxxxxx > wrote:
Hi Dustin,
Welcome to the world of Group Policy Management! It will both amaze and
frustrate you!
It does sound that you have a dodgy version of wuau.adm. Try opening the
file using Notepad and see if it is a readable text file. Also open another
one and see if it is a similar style.
Having said that, ADM files play no part in applying policies. They are
only used by GPMC when viewing Admin Template settings. Basically GPMC reads
the Registry.Pol file (which contains all of the settings) and uses the
ADM file to display it in a meaningful way.
To fix that problem I think if you replace it with a correct version. You
should be able to go to
http://www.microsoft.com/downloads/details.aspx?familyid=92759D4B-7112-4B6C-AD4A-BBF3802A5C9B&displaylang=ento
get it.
So, what is your real problem? Distribution of the GPO's is usually not a
problem; it is more likely to be the application of the policy. You could
try explaining exactly what is going wrong, or else you could dive in
yourself and try to analyze the UserEnv.log that is written when
processing Group Policy. The former is probably quicker but the latter is
more fun and you will learn more! Unfortunately the log is a bit hard to
read, but I have a free program that you can download and use (see below) .
The first thing you have to do is activate logging (the program gives you a
button to do this) then reboot the machine and view the log via my program.
It shows all of the steps involved in Group Policy processing and may
highlight the problem. You can always post the log up here and we can check
it out for you.
Best of luck
Ps. You can also go to Darren's web site which has a lot of resources on
Group Policies, but you probably know that already since you are in this
News group. www.gpoguy.com
Alan Cuthbertson
Policy Management Software:-
http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml
ADM Template Editor:-
http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml
Policy Log Reporter(Free)
http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml
________________________________
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Dustin Hand
Sent: Wednesday, 28 February 2007 6:51 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] GPO not getting distributed?
Hi everyone,
I am sort of a novice to Windows Server GPO. I have installed the
GPMC because it seems like my GPO settings are not getting distributed, and
the GPMC says that "'C:\WINDOWS\inf\wuau.adm' is not in a valid format, and
it needs to be replaced." The error it says is that "A string is expected at
line 0".
This error appears under both sets of "Administrative Templates" in all
GPOs
Would this cause my GPO to not get distributed and applied?
Regardless of if it is, how do I take care of this problem?
Thanks in advance,
Dustin
--
Dustin Hand
DustinHand@xxxxxxxxx
