• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2370
  • Last Modified:

Domain Client Failing to update GPO settings

Hi Everyone, need some advice regarding problematic clients on our network. all of our clients have roaming profiles that all save to the same windows fileserver. and are running windows xp pro.

my problem is that a minority of these clients are not updating group policies correctly or at all. so certain applications they try to run are failing to work because the application cannot write to its folder(we have a lot of non AD compliant software...).

i have enabled userEnvLogin (http://support.microsoft.com/kb/221833/en-us) for one client where the GPO's only seem to be half applying and there is a HUGE stack of errors, googling these errors seems to bring up more and more issues and fixes (which could take me DAYS to get through them all). i have attached a sample for reference.

i have recreated the local user profile on the PC (i have not tried recreating the profile altogether yet though).

does anyone have any ideas as to why this is happening ? its turned up out of the blue there was no changes made to the DC except the addition of new users (applying GPO to them works ok).

I have tried RSOP.MSC on the client but i get an error stating that Class is not registered. a quick google mentioned enabliing WMI on the local client and then rebooting to solve this. But its still broken sofar.

Thanks for any advice that may go towards solving this.
USERENV(2a4.cb4) 15:56:44:468 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a4.cb4) 15:57:01:187 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a4.e80) 17:36:13:576 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a4.cb4) 17:50:05:753 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a4.cb4) 17:50:46:924 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a4.2a8) 18:32:20:948 ReconcileFile: Unable to open temporary file
USERENV(2a4.7a0) 18:44:31:448 IProfileSecurityCallBack: RpcBindingInqAuthClient failed with 534
USERENV(2a8.2ac) 08:41:03:734 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2a8.2ac) 08:41:03:750 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2a8.2ac) 08:41:03:750 CUserProfile::GetRefCountAndFlags: RegQueryValueEx failed, key = S-1-5-21-1145379511-113177986-563163613-1177, error = 00000002
USERENV(2a8.2ac) 08:41:03:750 CUserProfile::CleanupUserProfile: Can not get ref count and flags
USERENV(2a8.2ac) 08:41:03:750 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2a8.2ac) 08:41:03:750 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2a8.2ac) 08:41:03:750 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2a8.764) 08:41:35:500 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.764) 08:41:39:437 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.764) 08:41:42:469 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.764) 08:41:42:484 ProcessGPOs: Extension Software Installation ProcessGroupPolicy failed, status 0x64c.
USERENV(2a8.2ac) 08:42:47:155 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.f44) 08:44:17:839 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 10:14:42:784 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 10:15:03:393 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.f60) 10:42:14:851 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 12:00:08:879 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 12:00:25:723 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.f60) 12:22:14:878 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 13:36:30:735 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 13:36:47:735 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.f60) 14:04:15:161 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 15:32:53:827 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 15:33:10:140 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.f60) 15:43:15:421 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 17:28:15:808 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 17:28:32:699 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.f60) 17:33:18:168 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.2ac) 18:32:05:617 ReconcileFile: Unable to open temporary file

Open in new window

0
dave_source
Asked:
dave_source
  • 3
1 Solution
 
dhoffman_98Commented:
Can I suggest trying to remove the machine from the domain (move it to a workstation) and then re-joining the domain again?

You also might try right clicking on the computer object in AD and selecting to reset the computer account.

It may simply be that the computer has lost the secure channel with the domain and is not able to authenticate properly. These steps may resolve that.
0
 
dave_sourceAuthor Commented:
Hi Dhoffman,
thanks for the reply on this, firstly i have to appologise about my post, as i did disconnect the client i have under test from the domain and reconnect it as a new PC. when i disconnected it from the domain i changed the PC name and IP address removed all reference of its old name from the DC and then re added it to the domain.

this failed to solve the issue, in regards to the second part of your suggestion i have tried that but with no difference, is it just a case of using the reset computer option ?? as i have logged the PC off reset it on the DC and then logged in and the policies are still not applying correctly.

the biggest issue with the policies seems to be folder permissions i have setup for the PC are not being applied so the user has no write access to the folder, so the app fails to launch.

when i try GPresult from the command line i get the following error

Error: class not registered. (this is the same error when i attempt to run RSOP.MSC) but doing GPupdate /force from the cmd prompt seems to work (in that it does not return any errors).
0
 
dave_sourceAuthor Commented:
Does anyone have any further suggestions as to why this is happening? as i am still getting this issue and have found no resolution to it so far.
0
 
rx7systemCommented:
I am having exactly this issue...seems nobody can help!
0
 
dave_sourceAuthor Commented:
Hi Rx7System,
have you tried the accepted solution within this question? the problems i was getting originally were resolved by removing the client from the domain and adding it again. if this does not work i would suggest starting a new thread as it will get more exposure (been as this one has been marked as answered).

0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now