July 4, 2008 08:39pm pdt

1. KCTS 91,272
2. Chris-Dent 29,975
3. oBdA 28,707
4. RobWill 27,436
5. leew 22,149
6. toniur 19,625
7. PlaceboC6 17,400
8. Netman66 16,575
9. tigermatt 15,450
10. ebjers 14,800
11. Jay_Jay70 13,961
12. lnkevin 13,300
13. Shift-3 12,800
14. ryansoto 12,350
15. rindi 11,125

1. KCTS 286,513
2. oBdA 88,318
3. Sembee 75,801
4. leew 74,413
5. Jay_Jay70 70,169
6. Chris-Dent 69,070
7. RobWill 57,721
8. toniur 56,312
9. LauraEHu... 43,593
10. Shift-3 35,700
11. MrHusy 31,575
12. Netman66 30,005
13. rindi 29,591
14. sirbounty 29,524
15. andyalder 26,700

03.28.2008 at 06:18AM PDT, ID: 23277044

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

6.6

Domain Clients getting 'Userenv Event 1085' error on login

Zone: Windows 2000 Server

Tags: Microsoft, Windows 2000 Server, SP4

Apparently I have a problem with my clients executing group policy. Most of my clients are logging this event when logging in:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1085
Date: 2008-03-28
Time: 9:03:33 AM
User: NT AUTHORITY\SYSTEM
Computer: HP_MXL6370P14
Description:
The Group Policy client-side extension Scripts failed to execute. Please look for any errors reported earlier by that extension.

Clients are mostly XP and on occasion will have issues where Outlook will go offline. The temporary fix is to right click on the NIC, do a repair, then Outlook will start working again and the userenv errors will stop....for a while. Really have no idea what the connection is between a NIC refresh and group policy.

Any help is appreciated!!

Start your free trial to view this solution

Question Stats

Zone: OS

Question Asked By: mcracco

Solution Provided By: SkiptonBS

Participating Experts: 1

Solution Grade: B

Translate:

Loading Advertisement...

Microsoft

Internet Protocols
Applications

Development
OS

Hardware
Windows Security

Apple

Operating Systems
Hardware

Programming
Networking

Software

Internet

Search Engines
File Sharing
WebTrends / Stats
Spy / Ad Blockers

Web Browsers
New Net Users
Web Development
Chat / IM

Anti Spam
Web Servers
Anti-Virus
Email Clients

Gamers

Tips
Online / MMORPG
Puzzle
Emulators

Action / Adventure
Role Playing
Consoles
Game Programming

Strategy
Sports
Misc
Computer Games

Digital Living

Hardware
New Net Users
New Users

Software
Digital Music
Gaming World

Home Security
Apple
Networking Hardware

Virus & Spyware

Vulnerabilities
IDS
Encryption
Anti-Virus

Operating Systems Security
Software Firewalls
WebApplications
Cell Phones

Operating Systems
Internet
Hardware Firewalls

Hardware

Handhelds / PDAs
Displays / Monitors
Components
Networking Hardware

Peripherals
Laptops/Notebooks
Storage
Servers

Desktops
New Users
Misc
Apple

Software

System Utilities
Industry Specific
Network Management
Photos / Graphics
Page Layout
VMWare
Misc
Web Development

OS
CYGWIN
Voice Recognition
Message Queue
Quality Assurance
Security
Firewalls
MultiMedia Applications

Development
Database
Office / Productivity
Business Management
OS/2 Apps
Server Software
Internet / Email

ITPro

OS
Storage
Encryption
Operating Systems Security
Apple Hardware
Laptops & Notebooks
Servers
Networking Hardware
Peripherals

Devices
Displays / Monitors
WebTrends / Stats
Search Engines
Firewalls
WebApplications
IDS
Vulnerabilities
Email Clients

File Sharing
Spy / Ad Blockers
Web Browsers
Web Servers
Networking
Anti-Virus
Chat / IM
Anti Spam

Developer

Web Servers
Web Browsers
Game Programming
Dev Tools
Industry Specific
Office / Productivity

Database
CYGWIN
Web Development
Search Engines
File Sharing
WebTrends / Stats

Programming
Content Management
Application Servers
Protocols

Storage

Removable Backup Media
Storage Technology
Servers

Grid
Remote Access
Backup / Restore

Misc
Hard Drives

Miscellaneous
Security
Development
Linux
VMWare

MainFrame OS
Unix
Apple
OS / 2
AS / 400

BeOS
Microsoft
VMS / OpenVMS

Database

Oracle
Miscellaneous
MySQL
Software
Sybase
Contact Management
PostgreSQL
Data Manipulation
Clarion
InterSystems Cache

Siebel
MUMPS
OLAP
SQLBase
SAS
GIS & GPS
4GL
Berkeley DB
DB2
Informix

Interbase / Firebird
FoxPro
Reporting
LDAP
Filemaker Pro
MS SQL Server
dBase
MS Access

Security

Misc
Web Browsers
Software Firewalls
Operating Systems Security
File Sharing

Spy / Ad Blockers
Vulnerabilities
WebApplications
IDS
Anti-Virus

Encryption
Anti Spam
Email Clients
VPN
Chat / IM

Programming

Editors IDEs
Installation
Handhelds / PDAs
Multimedia Programming
System / Kernel

Algorithms
Game
Signal Processing
Project Management
Open Source

Database
Misc
Languages
Processor Platforms
Theory

Web Development

Scripting
Blogs
Web Servers
Software
Search Engines
Web Graphics
Images

Internet Marketing
Images and Photos
Components
Document Imaging
Web Languages/Standards
Illustration
WebApplications

Fonts
WebTrends / Stats
Authoring
Digital Camera Software
Miscellaneous

Networking

Protocols
Apple Networking
Network Management
Message Queue
Application Servers
Content Management
File Servers
Email Servers
Misc
Java Editors & IDEs

Wireless
Networking Hardware
Backup / Restore
System Utilities
ISPs & Hosting
Web Servers
Storage Technology
Removable Backup Media
Servers
Broadband

Grid
OS / 2
Novell Netware
Unix Networking
Windows Networking
Security
Telecommunications
Operating Systems
Linux Networking

Other

Community Advisor
Lounge
Community Support
New Net Users

Philosophy / Religion
Math / Science
Miscellaneous
URLs

Expert Lounge
Politics
Puzzles / Riddles

Community Support

Suggestions
New to EE
New Topics
Community Advisor

CleanUp
Announcements
General

Feedback
Input
EE Bugs

03.28.2008 at 06:26AM PDT, ID: 21230148

SkiptonBS:

Try enabling Group Policy Debug logging on one of your clients and see whether the logs give you anything specific.

http://technet2.microsoft.com/windowsserver/en/library/0907105e-7856-4c93-b97f-a9a306623af51033.mspx?mfr=true

03.28.2008 at 09:37AM PDT, ID: 21231905

mcracco:

Below is what I am seeing in userenv.log after a login. Nothing is jumping out at me as being broken. Not sure what the 'Failed to impersonate user' lines are at the end.

USERENV(4bc.1128) 12:30:12:406 ProcessGPOs: Calling GetGPOInfo for normal policy mode
USERENV(4bc.1128) 12:30:12:406 GetGPOInfo: ********************************
USERENV(4bc.1128) 12:30:12:406 GetGPOInfo: Entering...
USERENV(4bc.1128) 12:30:12:422 GetGPOInfo: Server connection established.
USERENV(4bc.1128) 12:30:12:500 GetGPOInfo: Bound successfully.
USERENV(4bc.1128) 12:30:12:531 SearchDSObject: Searching <OU=Branch 01 Waterbury,DC=torringtonsupply,DC=com>
USERENV(4bc.1128) 12:30:12:531 SearchDSObject: Found GPO(s): < >
USERENV(4bc.1128) 12:30:12:531 SearchDSObject: Searching <DC=torringtonsupply,DC=com>
USERENV(4bc.1128) 12:30:12:531 SearchDSObject: Found GPO(s): <[LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=torringtonsupply,DC=com;2]>
USERENV(4bc.1128) 12:30:12:547 ProcessGPO: ==============================
USERENV(4bc.1128) 12:30:12:547 ProcessGPO: Deferring search for <LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=torringtonsupply,DC=com>
USERENV(4bc.1128) 12:30:12:562 SearchDSObject: Searching <CN=Branch1,CN=Sites,CN=Configuration,DC=torringtonsupply,DC=com>
USERENV(4bc.1128) 12:30:12:562 SearchDSObject: No GPO(s) for this object.
USERENV(4bc.1128) 12:30:12:562 EvaluateDeferredGPOs: Searching for GPOs in cn=policies,cn=system,DC=torringtonsupply,DC=com
USERENV(4bc.1128) 12:30:12:578 ProcessGPO: ==============================
USERENV(4bc.1128) 12:30:12:578 ProcessGPO: Searching <CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=torringtonsupply,DC=com>
USERENV(4bc.1128) 12:30:12:578 ProcessGPO: User has access to this GPO.
USERENV(4bc.1128) 12:30:12:578 ProcessGPO: GPO passes the filter check.
USERENV(4bc.1128) 12:30:12:578 ProcessGPO: Found functionality version of: 2
USERENV(4bc.1128) 12:30:12:594 ProcessGPO: Found file system path of: <\\torringtonsupply.com\sysvol\torringtonsupply.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(4bc.1128) 12:30:12:656 ProcessGPO: Found common name of: <{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(4bc.1128) 12:30:12:656 ProcessGPO: Found display name of: <Default Domain Policy>
USERENV(4bc.1128) 12:30:12:656 ProcessGPO: Found user version of: GPC is 17, GPT is 11
USERENV(4bc.1128) 12:30:12:656 ProcessGPO: Found flags of: 0
USERENV(4bc.1128) 12:30:12:672 ProcessGPO: Found extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}][{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}][{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B66650-4972-11D1-A7CA-0000F87571E3}][{A2E30F80-D7DE-11D2-BBDE-00C04F86AE3B}{FC715823-C5FB-11D1-9EEF-00A0C90347FF}]
USERENV(4bc.1128) 12:30:12:672 ProcessGPO: ==============================
USERENV(4bc.1128) 12:30:12:687 GetGPOInfo: GPO Local Group Policy doesn't contain any data since the version number is 0. It will be skipped.
USERENV(4bc.1128) 12:30:12:687 GetGPOInfo: Leaving with 1
USERENV(4bc.1128) 12:30:12:703 GetGPOInfo: ********************************
USERENV(4bc.1128) 12:30:12:703 ProcessGPOs: Logging Data for Target <mcracco>.
USERENV(4bc.1128) 12:30:12:703 ProcessGPOs: OpenThreadToken failed with error 1008, assuming thread is not impersonating
USERENV(4bc.1128) 12:30:12:719 ProcessGPOs: -----------------------
USERENV(4bc.1128) 12:30:12:734 ProcessGPOs: Processing extension Registry
USERENV(4bc.1128) 12:30:12:734 ReadStatus: Read Extension's Previous status successfully.
USERENV(4bc.1128) 12:30:12:734 CompareGPOLists: The lists are the same.
USERENV(4bc.1128) 12:30:12:734 CheckGPOs: No GPO changes and no security group membership change and extension Registry has NoGPOChanges set.
USERENV(4bc.1128) 12:30:12:734 ProcessGPOs: -----------------------
USERENV(4bc.1128) 12:30:12:750 ProcessGPOs: -----------------------
USERENV(4bc.1128) 12:30:12:750 ProcessGPOs: Processing extension Wireless
USERENV(4bc.1128) 12:30:12:750 CompareGPOLists: The lists are the same.
USERENV(4bc.1128) 12:30:12:750 CheckGPOs: No GPO changes but couldn't read extension Wireless's status or policy time.
USERENV(4bc.1128) 12:30:12:750 ProcessGPOs: Extension Wireless skipped with flags 0x6.
USERENV(4bc.1128) 12:30:12:750 ProcessGPOs: -----------------------
USERENV(4bc.1128) 12:30:12:766 ProcessGPOs: Processing extension Folder Redirection
USERENV(4bc.1128) 12:30:12:766 CompareGPOLists: The lists are the same.
USERENV(4bc.1128) 12:30:12:766 CompareGPOLists: The lists are the same.
USERENV(4bc.1128) 12:30:12:766 CheckGPOs: No GPO changes but couldn't read extension Folder Redirection's status or policy time.
USERENV(4bc.1128) 12:30:12:766 ProcessGPOs: Extension Folder Redirection skipped because both deleted and changed GPO lists are empty.
USERENV(4bc.1128) 12:30:12:781 ProcessGPOs: -----------------------
USERENV(4bc.1128) 12:30:12:781 ProcessGPOs: Processing extension Microsoft Disk Quota
USERENV(4bc.1128) 12:30:12:781 CompareGPOLists: The lists are the same.
USERENV(4bc.1128) 12:30:12:781 CheckGPOs: No GPO changes but couldn't read extension Microsoft Disk Quota's status or policy time.
USERENV(4bc.1128) 12:30:12:781 ProcessGPOs: Extension Microsoft Disk Quota skipped with flags 0x6.
USERENV(4bc.1128) 12:30:12:797 ProcessGPOs: -----------------------
USERENV(4bc.1128) 12:30:12:797 ProcessGPOs: Processing extension QoS Packet Scheduler
USERENV(4bc.1128) 12:30:12:797 CompareGPOLists: The lists are the same.
USERENV(4bc.1128) 12:30:12:797 CheckGPOs: No GPO changes but couldn't read extension QoS Packet Scheduler's status or policy time.
USERENV(4bc.1128) 12:30:12:797 ProcessGPOs: Extension QoS Packet Scheduler skipped with flags 0x6.
USERENV(4bc.1128) 12:30:12:812 ProcessGPOs: -----------------------
USERENV(4bc.1128) 12:30:12:812 ProcessGPOs: Processing extension Scripts
USERENV(4bc.1128) 12:30:12:812 ReadStatus: Read Extension's Previous status successfully.
USERENV(4bc.1128) 12:30:12:812 CompareGPOLists: Different version numbers found
USERENV(4bc.1128) 12:30:12:812 ProcessGPOList: Entering for extension Scripts
USERENV(4bc.1128) 12:30:12:828 UserPolicyCallback: Setting status UI to Applying Scripts policy...
USERENV(4bc.1128) 12:30:12:844 GetWbemServices: CoCreateInstance succeeded
USERENV(4bc.1128) 12:30:12:906 ConnectToNameSpace: ConnectServer returned 0x0
USERENV(4bc.1128) 12:30:12:984 LogExtSessionStatus: Successfully logged Extension Session data
USERENV(4bc.1128) 12:30:13:031 ProcessGPOList: Extension Scripts returned 0x2.
USERENV(4bc.1128) 12:30:13:031 ProcessGPOList: Extension Scripts was able to log data. RsopStatus = 0x0, dwRet = 2, Clearing the dirty bit
USERENV(4bc.1128) 12:30:13:031 ProcessGPOs: Extension Scripts ProcessGroupPolicy failed, status 0x2.
USERENV(4bc.1128) 12:30:13:047 ProcessGPOs: -----------------------
USERENV(4bc.1128) 12:30:13:047 ProcessGPOs: -----------------------
USERENV(4bc.1128) 12:30:13:047 ProcessGPOs: Processing extension Internet Explorer Zonemapping
USERENV(4bc.1128) 12:30:13:047 CompareGPOLists: The lists are the same.
USERENV(4bc.1128) 12:30:13:047 CheckGPOs: No GPO changes but couldn't read extension Internet Explorer Zonemapping's status or policy time.
USERENV(4bc.1128) 12:30:13:062 ProcessGPOs: Extension Internet Explorer Zonemapping skipped because both deleted and changed GPO lists are empty.
USERENV(4bc.1128) 12:30:13:062 ProcessGPOs: -----------------------
USERENV(4bc.1128) 12:30:13:062 ProcessGPOs: Processing extension Security
USERENV(4bc.1128) 12:30:13:062 CompareGPOLists: The lists are the same.
USERENV(4bc.1128) 12:30:13:062 CheckGPOs: No GPO changes but couldn't read extension Security's status or policy time.
USERENV(4bc.1128) 12:30:13:078 ProcessGPOs: Extension Security skipped with flags 0x6.
USERENV(4bc.1128) 12:30:13:078 ProcessGPOs: -----------------------
USERENV(4bc.1128) 12:30:13:078 ProcessGPOs: Processing extension Internet Explorer Branding
USERENV(4bc.1128) 12:30:13:078 ReadStatus: Read Extension's Previous status successfully.
USERENV(4bc.1128) 12:30:13:078 CompareGPOLists: The lists are the same.
USERENV(4bc.1128) 12:30:13:094 CheckGPOs: No GPO changes and no security group membership change and extension Internet Explorer Branding has NoGPOChanges set.
USERENV(4bc.1128) 12:30:13:094 ProcessGPOs: -----------------------
USERENV(4bc.1128) 12:30:13:094 ProcessGPOs: -----------------------
USERENV(4bc.1128) 12:30:13:094 ProcessGPOs: Processing extension EFS recovery
USERENV(4bc.1128) 12:30:13:094 CompareGPOLists: The lists are the same.
USERENV(4bc.1128) 12:30:13:109 CheckGPOs: No GPO changes but couldn't read extension EFS recovery's status or policy time.
USERENV(4bc.1128) 12:30:13:109 ProcessGPOs: Extension EFS recovery skipped with flags 0x6.
USERENV(4bc.1128) 12:30:13:109 ProcessGPOs: -----------------------
USERENV(4bc.1128) 12:30:13:109 ProcessGPOs: Processing extension Microsoft Offline Files
USERENV(4bc.1128) 12:30:13:109 CompareGPOLists: The lists are the same.
USERENV(4bc.1128) 12:30:13:125 CheckGPOs: No GPO changes but couldn't read extension Microsoft Offline Files's status or policy time.
USERENV(4bc.1128) 12:30:13:125 ProcessGPOs: Extension Microsoft Offline Files skipped with flags 0x6.
USERENV(4bc.1128) 12:30:13:125 ProcessGPOs: -----------------------
USERENV(4bc.1128) 12:30:13:125 ProcessGPOs: Processing extension Software Installation
USERENV(4bc.1128) 12:30:13:125 CompareGPOLists: The lists are the same.
USERENV(4bc.1128) 12:30:13:141 CompareGPOLists: The lists are the same.
USERENV(4bc.1128) 12:30:13:141 CheckGPOs: No GPO changes but couldn't read extension Software Installation's status or policy time.
USERENV(4bc.1128) 12:30:13:141 ProcessGPOs: Extension Software Installation skipped because both deleted and changed GPO lists are empty.
USERENV(4bc.1128) 12:30:13:141 ProcessGPOs: -----------------------
USERENV(4bc.1128) 12:30:13:141 ProcessGPOs: Processing extension IP Security
USERENV(4bc.1128) 12:30:13:156 CompareGPOLists: The lists are the same.
USERENV(4bc.1128) 12:30:13:156 CheckGPOs: No GPO changes but couldn't read extension IP Security's status or policy time.
USERENV(4bc.1128) 12:30:13:156 ProcessGPOs: Extension IP Security skipped with flags 0x6.
USERENV(4bc.1128) 12:30:13:156 SetFgRefreshInfo: Previous User Fg policy Synchronous, Reason: NonCachedCredentials.
USERENV(4bc.1128) 12:30:13:156 SetFgRefreshInfo: Next User Fg policy Asynchronous, Reason: NoNeedForSync.
USERENV(4bc.1128) 12:30:13:172 LeaveCriticalPolicySection: Critical section 0x720 has been released.
USERENV(4bc.1128) 12:30:13:172 ProcessGPOs: User Group Policy has been applied.
USERENV(4bc.1128) 12:30:13:172 ProcessGPOs: Leaving with 1.
USERENV(4bc.1128) 12:30:13:172 ApplyGroupPolicy: Leaving successfully.
USERENV(4bc.d20) 12:30:13:172 GPOThread: Next refresh will happen in 109 minutes
USERENV(4bc.4c0) 12:30:13:594 IsSyncForegroundPolicyRefresh: Asynchronous, Reason: NoNeedForSync
USERENV(4bc.16cc) 12:30:13:594 IsSyncForegroundPolicyRefresh: Asynchronous, Reason: NoNeedForSync
USERENV(4bc.16cc) 12:30:13:609 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(1224.15a8) 12:30:14:094 LibMain: Process Name: C:\WINDOWS\system32\userinit.exe
USERENV(5fc.1508) 12:30:14:094 LibMain: Process Name: C:\WINDOWS\system32\userinit.exe
USERENV(4f4.544) 12:30:14:391 ImpersonateUser: Failed to impersonate user with 5.
USERENV(4f4.544) 12:30:14:391 GetUserNameAndDomain Failed to impersonate user
USERENV(4f4.544) 12:30:14:391 ImpersonateUser: Failed to impersonate user with 5.
USERENV(4f4.544) 12:30:14:406 GetUserDNSDomainName: Failed to impersonate user
USERENV(4f4.544) 12:30:14:406 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(4f4.544) 12:30:14:437 ImpersonateUser: Failed to impersonate user with 5.

03.28.2008 at 09:46AM PDT, ID: 21231996

SkiptonBS:

You haven't got any rogue DNS servers on your clients have you?

Are there any other messages in the Application/System Event Log?

03.31.2008 at 05:37AM PDT, ID: 21244781

mcracco:

I guess the honest answer to that has to be yes. I had the secondary DNS server on my clients pointing to their ISP's DNS. The thinking being if a wan link went down a remote site would still be able to get Internet access and hence be able to continue working. But I believe that is what was causing my Outlook issue. I changed the secondary DNS back to my backup DC and Outlook is now behaving normally. While everyone is happier when Outlook works I still feel like this is a step backwards as I have lost some disaster readiness.

Maybe not so incidentally, gpresult is telling me group policy is being applied from the backup server. And System Event Log is complaining about it:

Event Type:      Warning
Event Source:      LSASRV
Event Category:      SPNEGO (Negotiator)
Event ID:      40961
Date:            2008-03-31
Time:            7:15:32 AM
User:            N/A
Computer:      HP_MXL6370P14
Description:
The Security System could not establish a secured connection with the server ldap/backup.torringtonsupply.com/torringtonsupply.com@torringtonsupply.com. No authentication protocol was available.

Seems like the question now becomes; why am I pointed to the backup DC for group policy rather than the primary DC?

03.31.2008 at 05:49AM PDT, ID: 21244849

SkiptonBS:

In the world of Windows 2000/2003 there is not such thing as a Backup Domain Controller. All DC's are equal apart from some specialised roles (FSMO Roles) they hold.

When a user logs onto a client workstation they can be authenticated via either of the DC, meaning that either of the DC's can also deploy the GPO's.

With regards to you LSASVR error above i would take a look at the following artical. I've seen this a number of times.

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/XP/Q_22850927.html

There are a number of things you can do regarding you DR DNS situation.

To begin with i would configure DNS via Group Policy then you can have more than 2 DNS Servers. You may find that if you have both your DC's and then your external DNS Outlook may work better.

If not then you should place a DNS Server at the remote location. You could either setup a Windows 2003 server to handle this or depending on your router, and whether or not it supports DNS forwarding you could configure it on your router.

Accepted Solution

04.02.2008 at 11:44AM PDT, ID: 21266101

mcracco:

Thanks, I am trying to follow the suggestions in the supplied links as time premits. Will report back what I find.

04.28.2008 at 10:01AM PDT, ID: 21455626

mcracco:

I think I found the problem. Upon opening GP Editor on my secondary DC I get about 50 thousand dialogs complaining: "The following entry in the [strings] section is too long and has been truncated." Why I 'm seeing this now I do not understand but a quick Google points me to KB842933. I apply the patch, reboot, and no more 'Group Policy client-side extension Scripts failed to execute' messages in Event Viewer. Cool.

To early to tell if my issue with Outlook going offline is corrected but I am guessing it is. I do know that before the patch login scripts we executing intermittently and I was having trouble mapping drives.That problem seems to have cleared up.

SkiptonBS, thanks for the help and I will gift you the points as you gave good input and got me looking at the right server.

SkiptonBS

04.29.2008 at 03:02AM PDT, ID: 21460814

Glad you sorted it mate. I know problems like this can leave you pulling your hair out!

mcracco

04.29.2008 at 03:54AM PDT, ID: 21461034

Actually....I'm not out of the woods yet. It appears the old symptoms came back after a couple hours. Although the patch fixed the truncation issue, I'm thinking the reboot was more the reason for the temporary fix of the GP problem. To be continued...

20080236-EE-VQP-29 / EE_QW_2_20070628