logan510
asked on
Help and Support....help?
This is for my boss. On his new laptop when he goes into help and support/support/advanced system configuration, it won't allow him to view group policy objects, it says "invalid namespace". He's already changed his computer name and it's showing up fine in AD, but he still gets the same invalid namespace message. Any suggestions would be greatly appreciated.
Thanks
Casey
Thanks
Casey
To make sure if it's a WMI problem, first try running the following from a command prompt.
wmic /interactive:on /namespace:\\root\RSOP\use r
wmic /interactive:on /namespace:\\root\RSOP\com puter
Do either give you an error message?
Can also run wmimgmt.msc from Start|Run
Right-click on WMI Control (Local) and hit properties.
On the Security tab, check the permissions for RSOP\Computer\ms_409
wmic /interactive:on /namespace:\\root\RSOP\use
wmic /interactive:on /namespace:\\root\RSOP\com
Do either give you an error message?
Can also run wmimgmt.msc from Start|Run
Right-click on WMI Control (Local) and hit properties.
On the Security tab, check the permissions for RSOP\Computer\ms_409
ASKER
I will try out those suggestions tomorrow and post back the results.
Thanks
Casey
Thanks
Casey
ASKER
I tried the things you suggested and got some interesting results, tho I'm not sure if they'll be helpful or not.
First some information: this is now surfacing on other laptops that I have imaged. Our suspicion is that my profile which I use as the template using sysprep is possibly the culprit, so I'm going to create a fresh image and never introduce my profile into the mix..just to test it.
I ran rsop.msc and got error messages, he is an administrator of the computer. We make everyone an administrator on their local machine.
When I ran the wmic's from the command propmts, neither of those errored out.
Any fixes you can suggest? We already tried taking him out of the domain and putting him back in to generate another SID and no dice. We also ran the sysprep tool with the same negative results.
Thanks
Casey
First some information: this is now surfacing on other laptops that I have imaged. Our suspicion is that my profile which I use as the template using sysprep is possibly the culprit, so I'm going to create a fresh image and never introduce my profile into the mix..just to test it.
I ran rsop.msc and got error messages, he is an administrator of the computer. We make everyone an administrator on their local machine.
When I ran the wmic's from the command propmts, neither of those errored out.
Any fixes you can suggest? We already tried taking him out of the domain and putting him back in to generate another SID and no dice. We also ran the sysprep tool with the same negative results.
Thanks
Casey
Try running the following from a command line....
cd /d %windir%\system32
regsvr32 /n /I userenv.dll
cd wbem
mofcomp scersop.mof
gpupdate /force
Maybe check for a saved password in his profile.....
https://www.experts-exchange.com/questions/21699053/RSOP-Issues-Policy-Nightmare.html
cd /d %windir%\system32
regsvr32 /n /I userenv.dll
cd wbem
mofcomp scersop.mof
gpupdate /force
Maybe check for a saved password in his profile.....
https://www.experts-exchange.com/questions/21699053/RSOP-Issues-Policy-Nightmare.html
ASKER
I tried the last suggestion and no dice. Interesting thing...my boss set up a lab where he created a lab domain. We took his computer out of our domain and put it in the lab domain and we were able to check group policy with help and support no problem. We then put his computer back in our company domain and the "invalid namespace" appeard again.
Casey
Casey
Can another user log into his computer and use rsop fine?
ASKER
Well, we found out the solution to the problem..after a 4 hour call with Microsoft tech support. Turns out the Symantec Anti-Virus server I set up was acting as a domain controller and created some registry keys that conflicted with our top level domain controller. It took 4 different guys on the phone and my boss to eventually come across it and fix it, but now everything is back to normal and all newly imaged PC's are getting their Group Policy and not "invalid namespace". I appreciate all your suggestions but can't award the points because they didn't lead to the eventual solution. I will ask a mod to close this question out.
Thanks again
Casey
Thanks again
Casey
Just glad you got it worked out!
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Does running rsop.msc from Start|Run work?
Do either work when logged in as another user?
Is he an administrator on the laptop?