veebonk
asked on
rsop.msc shows some group policies will not apply in Windows XP
New domain using Server 2003, and GPOs are all created and seem to be working on the server level. However, when I bring a workstation into the domain, I get some group policies applied but not all. Domain policies apply with no problem for member servers and for the PDC.
When I run rsop.msc on the workstations, I get a popup that says the latest versions of the ADM files are not availale and gives a couple of specific .adm filenames and a path to the sysvol share and says path not found (the path is valid and permissions are ok). In the rsop.msc window there are red X's over the Computer and User Configurations, and a right-click look at the error message gives the error: Group Policy Infrastructure failed due to the error listed below.
The specified domain either does not exist or could not be contacted.
Again, the Default User Policy is applied, but the Default Domain Policy is not.
GPRESULT returned the following:
Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001
Created On 9/8/2006 at 9:14:08 AM
RSOP results for KR\kevin on D87QPH71 : Logging Mode
--------------------------
OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name: KR
Domain Type: Windows 2000
Site Name: Default-First-Site
Roaming Profile: \\main\user profiles\Kevin\
Local Profile: C:\Documents and Settings\kevin
Connected over a slow link?: Yes
COMPUTER SETTINGS
------------------
Last time Group Policy was applied: 9/8/2006 at 8:41:43 AM
Group Policy was applied from: main.kr.local
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
--------------------------
Local Group Policy
The computer is a part of the following security groups:
--------------------------
BUILTIN\Administrators
Everyone
NT AUTHORITY\Authenticated Users
USER SETTINGS
--------------
Last time Group Policy was applied: 9/8/2006 at 8:41:43 AM
Group Policy was applied from: main.kr.local
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
--------------------------
KR Default User Policy
Local Group Policy
The following GPOs were not applied because they were filtered out
--------------------------
KR Domain Policy
Filtering: Not Applied (Empty)
The user is a part of the following security groups:
--------------------------
Domain Users
Everyone
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
Art Department
So any ideas? I need to bring this domain up over the weekend and I'd like to get the GPOs working before the users get to things...
When I run rsop.msc on the workstations, I get a popup that says the latest versions of the ADM files are not availale and gives a couple of specific .adm filenames and a path to the sysvol share and says path not found (the path is valid and permissions are ok). In the rsop.msc window there are red X's over the Computer and User Configurations, and a right-click look at the error message gives the error: Group Policy Infrastructure failed due to the error listed below.
The specified domain either does not exist or could not be contacted.
Again, the Default User Policy is applied, but the Default Domain Policy is not.
GPRESULT returned the following:
Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001
Created On 9/8/2006 at 9:14:08 AM
RSOP results for KR\kevin on D87QPH71 : Logging Mode
--------------------------
OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name: KR
Domain Type: Windows 2000
Site Name: Default-First-Site
Roaming Profile: \\main\user profiles\Kevin\
Local Profile: C:\Documents and Settings\kevin
Connected over a slow link?: Yes
COMPUTER SETTINGS
------------------
Last time Group Policy was applied: 9/8/2006 at 8:41:43 AM
Group Policy was applied from: main.kr.local
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
--------------------------
Local Group Policy
The computer is a part of the following security groups:
--------------------------
BUILTIN\Administrators
Everyone
NT AUTHORITY\Authenticated Users
USER SETTINGS
--------------
Last time Group Policy was applied: 9/8/2006 at 8:41:43 AM
Group Policy was applied from: main.kr.local
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
--------------------------
KR Default User Policy
Local Group Policy
The following GPOs were not applied because they were filtered out
--------------------------
KR Domain Policy
Filtering: Not Applied (Empty)
The user is a part of the following security groups:
--------------------------
Domain Users
Everyone
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
Art Department
So any ideas? I need to bring this domain up over the weekend and I'd like to get the GPOs working before the users get to things...
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Oh, and there is a slow link threshold setting in both user and computer group policy - you'll want to update both.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks to both of you for the proposed solutions. I'm working on things today and will post again Mon/Tues once I've tried the changes....
ASKER
Thanks to both for your help - unfortunately extenuating circumstances have kept me from going back to these servers to resolve the issues. I'm going to assume that one of your answers will solve the problem when things get back to normal...