Solved

Domain Client Failing to update GPO settings

Posted on 2008-10-29
5
2,291 Views
Last Modified: 2012-06-21
Hi Everyone, need some advice regarding problematic clients on our network. all of our clients have roaming profiles that all save to the same windows fileserver. and are running windows xp pro.

my problem is that a minority of these clients are not updating group policies correctly or at all. so certain applications they try to run are failing to work because the application cannot write to its folder(we have a lot of non AD compliant software...).

i have enabled userEnvLogin (http://support.microsoft.com/kb/221833/en-us) for one client where the GPO's only seem to be half applying and there is a HUGE stack of errors, googling these errors seems to bring up more and more issues and fixes (which could take me DAYS to get through them all). i have attached a sample for reference.

i have recreated the local user profile on the PC (i have not tried recreating the profile altogether yet though).

does anyone have any ideas as to why this is happening ? its turned up out of the blue there was no changes made to the DC except the addition of new users (applying GPO to them works ok).

I have tried RSOP.MSC on the client but i get an error stating that Class is not registered. a quick google mentioned enabliing WMI on the local client and then rebooting to solve this. But its still broken sofar.

Thanks for any advice that may go towards solving this.
USERENV(2a4.cb4) 15:56:44:468 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.

USERENV(2a4.cb4) 15:57:01:187 CEvents::Report: ReportEvent failed.  Error = 1502

USERENV(2a4.e80) 17:36:13:576 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.

USERENV(2a4.cb4) 17:50:05:753 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.

USERENV(2a4.cb4) 17:50:46:924 CEvents::Report: ReportEvent failed.  Error = 1502

USERENV(2a4.2a8) 18:32:20:948 ReconcileFile: Unable to open temporary file

USERENV(2a4.7a0) 18:44:31:448 IProfileSecurityCallBack: RpcBindingInqAuthClient failed with 534

USERENV(2a8.2ac) 08:41:03:734 CUserProfile::CleanupUserProfile: Ref Count is not 0

USERENV(2a8.2ac) 08:41:03:750 CUserProfile::CleanupUserProfile: Ref Count is not 0

USERENV(2a8.2ac) 08:41:03:750 CUserProfile::GetRefCountAndFlags: RegQueryValueEx failed, key = S-1-5-21-1145379511-113177986-563163613-1177, error = 00000002

USERENV(2a8.2ac) 08:41:03:750 CUserProfile::CleanupUserProfile: Can not get ref count and flags

USERENV(2a8.2ac) 08:41:03:750 CUserProfile::CleanupUserProfile: Ref Count is not 0

USERENV(2a8.2ac) 08:41:03:750 CUserProfile::CleanupUserProfile: Ref Count is not 0

USERENV(2a8.2ac) 08:41:03:750 CUserProfile::CleanupUserProfile: Ref Count is not 0

USERENV(2a8.764) 08:41:35:500 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.

USERENV(2a8.764) 08:41:39:437 CEvents::Report: ReportEvent failed.  Error = 1502

USERENV(2a8.764) 08:41:42:469 CEvents::Report: ReportEvent failed.  Error = 1502

USERENV(2a8.764) 08:41:42:484 ProcessGPOs: Extension Software Installation ProcessGroupPolicy failed, status 0x64c.

USERENV(2a8.2ac) 08:42:47:155 CEvents::Report: ReportEvent failed.  Error = 1502

USERENV(2a8.f44) 08:44:17:839 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.

USERENV(2a8.cac) 10:14:42:784 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.

USERENV(2a8.cac) 10:15:03:393 CEvents::Report: ReportEvent failed.  Error = 1502

USERENV(2a8.f60) 10:42:14:851 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.

USERENV(2a8.cac) 12:00:08:879 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.

USERENV(2a8.cac) 12:00:25:723 CEvents::Report: ReportEvent failed.  Error = 1502

USERENV(2a8.f60) 12:22:14:878 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.

USERENV(2a8.cac) 13:36:30:735 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.

USERENV(2a8.cac) 13:36:47:735 CEvents::Report: ReportEvent failed.  Error = 1502

USERENV(2a8.f60) 14:04:15:161 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.

USERENV(2a8.cac) 15:32:53:827 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.

USERENV(2a8.cac) 15:33:10:140 CEvents::Report: ReportEvent failed.  Error = 1502

USERENV(2a8.f60) 15:43:15:421 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.

USERENV(2a8.cac) 17:28:15:808 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.

USERENV(2a8.cac) 17:28:32:699 CEvents::Report: ReportEvent failed.  Error = 1502

USERENV(2a8.f60) 17:33:18:168 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.

USERENV(2a8.2ac) 18:32:05:617 ReconcileFile: Unable to open temporary file

Open in new window

0
Comment
Question by:dave_source
  • 3
5 Comments
 
LVL 13

Accepted Solution

by:
dhoffman_98 earned 500 total points
Comment Utility
Can I suggest trying to remove the machine from the domain (move it to a workstation) and then re-joining the domain again?

You also might try right clicking on the computer object in AD and selecting to reset the computer account.

It may simply be that the computer has lost the secure channel with the domain and is not able to authenticate properly. These steps may resolve that.
0
 

Author Comment

by:dave_source
Comment Utility
Hi Dhoffman,
thanks for the reply on this, firstly i have to appologise about my post, as i did disconnect the client i have under test from the domain and reconnect it as a new PC. when i disconnected it from the domain i changed the PC name and IP address removed all reference of its old name from the DC and then re added it to the domain.

this failed to solve the issue, in regards to the second part of your suggestion i have tried that but with no difference, is it just a case of using the reset computer option ?? as i have logged the PC off reset it on the DC and then logged in and the policies are still not applying correctly.

the biggest issue with the policies seems to be folder permissions i have setup for the PC are not being applied so the user has no write access to the folder, so the app fails to launch.

when i try GPresult from the command line i get the following error

Error: class not registered. (this is the same error when i attempt to run RSOP.MSC) but doing GPupdate /force from the cmd prompt seems to work (in that it does not return any errors).
0
 

Author Comment

by:dave_source
Comment Utility
Does anyone have any further suggestions as to why this is happening? as i am still getting this issue and have found no resolution to it so far.
0
 

Expert Comment

by:rx7system
Comment Utility
I am having exactly this issue...seems nobody can help!
0
 

Author Comment

by:dave_source
Comment Utility
Hi Rx7System,
have you tried the accepted solution within this question? the problems i was getting originally were resolved by removing the client from the domain and adding it again. if this does not work i would suggest starting a new thread as it will get more exposure (been as this one has been marked as answered).

0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now