I'm having some problems with updating the group policy using - gpupdate /force.
The Background:
We have 6 Domain Controllers. 5 are windows 2003 server and one is a 2000 server. The 2000 is the operations master (ntserver).
When I run gpupdate on one of the domain controllers, it all runs through fine. It also works fine on our other windows 2003 servers that are not domain controllers (fileservers, application servers, etc..).
When I run gpupdate on an XP machine (SP1 or SP2) it takes ages, then the error pops up below:
----------
H:\>gpupdate /force
Refreshing Policy...
User Policy Refresh has not completed in the expected time. Exiting...
User Policy Refresh has completed.
Computer Policy Refresh has not completed in the expected time. Exiting...
Computer Policy Refresh has completed.
----------
This happens on all computers on the campus, regardless of which OU they are in, and regardless of the user (Domain Admins/General Users/etc..).
I can access the sysvol share quite happily (\\ntserver\sysvol - for our 2kbox(10.28.48.20) or \\dataserver\sysvol - for one of our 2k3 boxes (10.28.48.21)).
IP addresses are assigned by DHCP and the DNS servers are all local and not with our ISP.
IP ADDRESS: 10.28.51.146
Subnet: 255.255.252.0
Gateway: 10.28.51.254
DHCP Server: 10.28.48.29
DNS Servers: 10.28.48.29, 10.28.48.20, 10.28.48.21, 10.28.48.60
No Wins Servers
----------------
The last section of C:\windows\security\logs\w
inlogon.lo
g reads:
USERENV(29c.2a0) 13:32:42:534 MyRegUnLoadKey: Failed to unmount hive 00000005
USERENV(29c.2a0) 13:32:42:612 DumpOpenRegistryHandle: 4 user registry Handles leaked from \Registry\User\S-1-5-21-10
37851856-2
007117648-
2118856591
-6974
USERENV(29c.2a0) 13:32:42:612 UnloadUserProfileP: Didn't unload user profile <err = 5>
USERENV(29c.2a0) 13:32:48:800 UnloadUserProfile: UnloadUserProfileP failed with 0
USERENV(2c8.e60) 13:33:15:237 IsUIRequired: Failed to open key Software\Microsoft\Windows
NT\CurrentVersion\ProfileL
ist\S-1-5-
20
USERENV(29c.12c8) 13:33:15:284 IProfileSecurityCallBack: RpcBindingInqAuthClient failed with 534
USERENV(2c8.e60) 13:33:15:331 UnLoadUserProfile: Calling UnLoadUserProfileI took exception. err = 5
USERENV(2c8.e60) 13:33:15:331 UnLoadUserProfile: Calling UnLoadUserProfileI failed. err = 5
USERENV(29c.2c4) 13:33:15:331 IProfileSecurityCallBack: RpcBindingInqAuthClient failed with 534
USERENV(2c8.e60) 13:33:15:331 UnLoadUserProfile: ReleaseClientContext took exception.
USERENV(29c.2a0) 13:33:54:921 CUserProfile::CleanupUserP
rofile: Ref Count is not 0
USERENV(29c.2a0) 13:33:54:937 CUserProfile::CleanupUserP
rofile: Ref Count is not 0
USERENV(29c.2a0) 13:33:54:937 CUserProfile::CleanupUserP
rofile: Ref Count is not 0
USERENV(29c.488) 13:34:36:796 GetGPOInfo: Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(29c.7f0) 13:34:41:921 GetGPOInfo: Local GPO's gpt.ini is not accessible, assuming default state.
-----------
-----------
The last section of C:\windows\Debug\UserMode\
userenv.lo
g reads:
**************************
Make a local copy of \\school.local\SysVol\scho
ol.local\P
olicies\{8
A61D15B-33
DC-436A-97
55-C575A40
7983F}\Mac
hine\Micro
soft\Windo
ws NT\SecEdit\GptTmpl.inf.
GPLinkDomain GPO_INFO_FLAG_BACKGROUND )
Make a local copy of \\school.local\sysvol\scho
ol.local\P
olicies\{3
1B2F340-01
6D-11D2-94
5F-00C04FB
984F9}\Mac
hine\Micro
soft\Windo
ws NT\SecEdit\GptTmpl.inf.
GPLinkDomain GPO_INFO_FLAG_BACKGROUND )
Process GP template gpt00000.dom.
This is not the last GPO.
--------------------------
----------
-------
Friday, February 02, 2007 1:34:38 PM
Copy undo values to the merged policy.
----Un-initialize configuration engine...
Process GP template gpt00001.dom.
--------------------------
----------
-------
Friday, February 02, 2007 1:34:39 PM
----Configuration engine was initialized successfully.----
----Reading Configuration Template info...
----Configure Security Policy...
Configure password information.
Configure account force logoff information.
System Access configuration was completed successfully.
Audit/Log configuration was completed successfully.
Configuration of Registry Values was completed successfully.
----Configure available attachment engines...
Configuration of attachment engines was completed successfully.
----Un-initialize configuration engine...
this is the last GPO.
-------------------------
Any ideas on this will be greatly appreciated!
Start Free Trial