Solved

Domain Client Failing to update GPO settings

Posted on 2008-10-29
5
2,327 Views
Last Modified: 2012-06-21
Hi Everyone, need some advice regarding problematic clients on our network. all of our clients have roaming profiles that all save to the same windows fileserver. and are running windows xp pro.

my problem is that a minority of these clients are not updating group policies correctly or at all. so certain applications they try to run are failing to work because the application cannot write to its folder(we have a lot of non AD compliant software...).

i have enabled userEnvLogin (http://support.microsoft.com/kb/221833/en-us) for one client where the GPO's only seem to be half applying and there is a HUGE stack of errors, googling these errors seems to bring up more and more issues and fixes (which could take me DAYS to get through them all). i have attached a sample for reference.

i have recreated the local user profile on the PC (i have not tried recreating the profile altogether yet though).

does anyone have any ideas as to why this is happening ? its turned up out of the blue there was no changes made to the DC except the addition of new users (applying GPO to them works ok).

I have tried RSOP.MSC on the client but i get an error stating that Class is not registered. a quick google mentioned enabliing WMI on the local client and then rebooting to solve this. But its still broken sofar.

Thanks for any advice that may go towards solving this.
USERENV(2a4.cb4) 15:56:44:468 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a4.cb4) 15:57:01:187 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a4.e80) 17:36:13:576 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a4.cb4) 17:50:05:753 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a4.cb4) 17:50:46:924 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a4.2a8) 18:32:20:948 ReconcileFile: Unable to open temporary file
USERENV(2a4.7a0) 18:44:31:448 IProfileSecurityCallBack: RpcBindingInqAuthClient failed with 534
USERENV(2a8.2ac) 08:41:03:734 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2a8.2ac) 08:41:03:750 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2a8.2ac) 08:41:03:750 CUserProfile::GetRefCountAndFlags: RegQueryValueEx failed, key = S-1-5-21-1145379511-113177986-563163613-1177, error = 00000002
USERENV(2a8.2ac) 08:41:03:750 CUserProfile::CleanupUserProfile: Can not get ref count and flags
USERENV(2a8.2ac) 08:41:03:750 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2a8.2ac) 08:41:03:750 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2a8.2ac) 08:41:03:750 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2a8.764) 08:41:35:500 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.764) 08:41:39:437 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.764) 08:41:42:469 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.764) 08:41:42:484 ProcessGPOs: Extension Software Installation ProcessGroupPolicy failed, status 0x64c.
USERENV(2a8.2ac) 08:42:47:155 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.f44) 08:44:17:839 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 10:14:42:784 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 10:15:03:393 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.f60) 10:42:14:851 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 12:00:08:879 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 12:00:25:723 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.f60) 12:22:14:878 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 13:36:30:735 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 13:36:47:735 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.f60) 14:04:15:161 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 15:32:53:827 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 15:33:10:140 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.f60) 15:43:15:421 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 17:28:15:808 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 17:28:32:699 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.f60) 17:33:18:168 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.2ac) 18:32:05:617 ReconcileFile: Unable to open temporary file

Open in new window

0
Comment
Question by:dave_source
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 13

Accepted Solution

by:
dhoffman_98 earned 500 total points
ID: 22833165
Can I suggest trying to remove the machine from the domain (move it to a workstation) and then re-joining the domain again?

You also might try right clicking on the computer object in AD and selecting to reset the computer account.

It may simply be that the computer has lost the secure channel with the domain and is not able to authenticate properly. These steps may resolve that.
0
 

Author Comment

by:dave_source
ID: 22839632
Hi Dhoffman,
thanks for the reply on this, firstly i have to appologise about my post, as i did disconnect the client i have under test from the domain and reconnect it as a new PC. when i disconnected it from the domain i changed the PC name and IP address removed all reference of its old name from the DC and then re added it to the domain.

this failed to solve the issue, in regards to the second part of your suggestion i have tried that but with no difference, is it just a case of using the reset computer option ?? as i have logged the PC off reset it on the DC and then logged in and the policies are still not applying correctly.

the biggest issue with the policies seems to be folder permissions i have setup for the PC are not being applied so the user has no write access to the folder, so the app fails to launch.

when i try GPresult from the command line i get the following error

Error: class not registered. (this is the same error when i attempt to run RSOP.MSC) but doing GPupdate /force from the cmd prompt seems to work (in that it does not return any errors).
0
 

Author Comment

by:dave_source
ID: 23002256
Does anyone have any further suggestions as to why this is happening? as i am still getting this issue and have found no resolution to it so far.
0
 

Expert Comment

by:rx7system
ID: 34701437
I am having exactly this issue...seems nobody can help!
0
 

Author Comment

by:dave_source
ID: 34702306
Hi Rx7System,
have you tried the accepted solution within this question? the problems i was getting originally were resolved by removing the client from the domain and adding it again. if this does not work i would suggest starting a new thread as it will get more exposure (been as this one has been marked as answered).

0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question