[gptalk] Re: Group Policy Error
- From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
- To: <gptalk@xxxxxxxxxxxxx>
- Date: Tue, 12 Feb 2008 07:51:50 -0800
James-
Quick question-is this impacting both per-computer and per-user policy or
just per-computer? There's a bunch of reasons for those errors. All of them
come down to the workstation being unable to read the contents of AD or
SYSVOL related to the GPO. Since you say you've eliminated DNS as the
problem, here are a couple of other reasons.
-- Disabled TCP/IP Netbios helper service (required for GP)
-- Failed SYSVOL replication on the DC where the client is grabbing policy
(run GPOTool.exe to see if this is an issue)
-- Permissions are tweaked on SYSVOL part of GPO such that computer or user
does not have perms. To read them.
Those are starting points. Let us know if none of those show up and we can
go from there.
Darren
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Camacho, James
Sent: Tuesday, February 12, 2008 6:27 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Group Policy Error
Good mourning,
I am new to this mailing list and would like to ask
your help on a problem I have been having with Group Policies, I have
searched the internet but none of the results have helped. First I have two
domain controllers running 2003 R2 and all XP2 workstation on a single
domain with dell workstations 650&670 (this is a classified network so there
is no outside connectivity). All of the workstation are logging the same
error (userenv 1030 Windows cannot query for the list of Group Policy
objects. A message that describes the reason for this was previously logged
by the policy engine.) It makes no difference if I log on as a user or an
administrator the error is still generated. I have run netdiag, dcdiag with
no errors. I have also enabled the userenv log and have found the following
errors (USERENV(2d8.150) 08:05:38:720 ProcessGPOs: GetGPOInfo failed). I
have run Group Policy results wizard and these are the results (see
attached). I have tried updating the Ethernet drivers to no avail.
It seems like a problem with permissions or maybe DNS, but the permissions
seem to me to be correct and there are no errors within DNS which is AD
integrated, can any see anything that I am missing or have not looked for.
Thank You
Jim
Other related posts:
