Solved

Working with GPOs on a Windows 2000 DC generates numerous errors

Posted on 2001-07-10
6
182 Views
Last Modified: 2010-04-13
When i attempt to work with GPOs on my  Windows 2000 domain controller, my
application log contains:
UserEnv 1000 The Group Policy client-side extension Security was passed
flags (17) and returned a failure status code of (3).

SceCli 1001 Security policy cannot be propagated. Cannot access the
template. Error code = 3.
 \\<domain name>\sysvol\<domain
name>\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\Microsoft\Wind
ows NT\SecEdit\GptTmpl.inf.

UserEnv 1000 Windows cannot access the registry information at
 \\<domain name>\sysvol\<domain
name>\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\registry.pol
with (53).

so, i find a link by jsiinc http://www.jsiinc.com/subf/tip2900/rh2921.htm
but my error message is (53). don't (51) .
and my File and Printer sharing had been bound on my netcard, my dfs client
is enable.
who can tell me how do fix this ?
3ks
0
Comment
Question by:heilulu
6 Comments
 
LVL 5

Accepted Solution

by:
dcgames earned 50 total points
Comment Utility
There are a few tools to troubleshoot and repair the group policies.

First: Do you have multiple DCs?  If so, this can be repaired by replicating from one that works. If not, you have to repair.

Looks like at least the TEMPLATE policies are damaged or missing. The GPOTOOL below I believe will tell you how to replace the templates.

Here are some useful links:

- The first link is "Troubleshooting Group Policy" from Microsoft:

http://www.microsoft.com/windows2000/techinfo/howitworks/management/gptshoot.asp

- This tool verifies the group policy and tells you how to fix some of the problems:

http://www.microsoft.com/WINDOWS2000/techinfo/reskit/tools/existing/gpotool-o.asp

- The ADChecker tool allows you to check the Active Directory, where your group policies are stored.

http://www.netiq.com/form/form.asp?id=17

- GPResult is a command-line tool that displays information about the result Group Policy has had on the current computer and logged-on user.

http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/gpresult-o.asp

Dave
0
 
LVL 5

Expert Comment

by:dcgames
Comment Utility
p.s.

I found the ADChecker and the GPOTOOL to be the most useful ones. The GPResult tool is useful for troubleshooting policy problems related to login or specific users.

Dave
0
 

Author Comment

by:heilulu
Comment Utility
3ks,i will test these tools.
0
 
LVL 5

Expert Comment

by:cempasha
Comment Utility
This question is still open and getting old. If any of the comment(s) above helped you please accept it as an answer or split the points who ever helped you in this question. Your attention in finalising this question is very much appreciated. Thanks in advance,

****** PLEASE DO NOT ACCEPT THIS AS AN ANSWER ********

- If you would like to close this question and have your points refunded, please post a question in community support area on http://www.experts-exchange.com/Community_Support/ giving the address of this question. Thank you      

Pasha

Cleanup Volunteer


0
 
LVL 1

Expert Comment

by:netwiz562
Comment Utility
---- CLEAN UP ----

heilulu,
No comment has been added lately (89 days), so it's time to clean up this TA.
I will leave a recommendation in the Cleanup topic area for this question:

RECOMMENDATION: [ Award points to dcgames ]

Please leave any comments here within the next seven days.

¡PLEASE DO NOT ACCEPT THIS COMMENT AS AN ANSWER!

------------------------------
Rajiv Makhijani
EE Cleanup Volunteer
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
This article explains how to prepare an HTML email signature template file containing dynamic placeholders for users' Azure AD data. Furthermore, it explains how to use this file to remotely set up a department-wide email signature policy in Office …
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now