Solved

Domain Client Failing to update GPO settings

Posted on 2008-10-29
5
2,336 Views
Last Modified: 2012-06-21
Hi Everyone, need some advice regarding problematic clients on our network. all of our clients have roaming profiles that all save to the same windows fileserver. and are running windows xp pro.

my problem is that a minority of these clients are not updating group policies correctly or at all. so certain applications they try to run are failing to work because the application cannot write to its folder(we have a lot of non AD compliant software...).

i have enabled userEnvLogin (http://support.microsoft.com/kb/221833/en-us) for one client where the GPO's only seem to be half applying and there is a HUGE stack of errors, googling these errors seems to bring up more and more issues and fixes (which could take me DAYS to get through them all). i have attached a sample for reference.

i have recreated the local user profile on the PC (i have not tried recreating the profile altogether yet though).

does anyone have any ideas as to why this is happening ? its turned up out of the blue there was no changes made to the DC except the addition of new users (applying GPO to them works ok).

I have tried RSOP.MSC on the client but i get an error stating that Class is not registered. a quick google mentioned enabliing WMI on the local client and then rebooting to solve this. But its still broken sofar.

Thanks for any advice that may go towards solving this.
USERENV(2a4.cb4) 15:56:44:468 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a4.cb4) 15:57:01:187 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a4.e80) 17:36:13:576 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a4.cb4) 17:50:05:753 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a4.cb4) 17:50:46:924 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a4.2a8) 18:32:20:948 ReconcileFile: Unable to open temporary file
USERENV(2a4.7a0) 18:44:31:448 IProfileSecurityCallBack: RpcBindingInqAuthClient failed with 534
USERENV(2a8.2ac) 08:41:03:734 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2a8.2ac) 08:41:03:750 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2a8.2ac) 08:41:03:750 CUserProfile::GetRefCountAndFlags: RegQueryValueEx failed, key = S-1-5-21-1145379511-113177986-563163613-1177, error = 00000002
USERENV(2a8.2ac) 08:41:03:750 CUserProfile::CleanupUserProfile: Can not get ref count and flags
USERENV(2a8.2ac) 08:41:03:750 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2a8.2ac) 08:41:03:750 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2a8.2ac) 08:41:03:750 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(2a8.764) 08:41:35:500 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.764) 08:41:39:437 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.764) 08:41:42:469 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.764) 08:41:42:484 ProcessGPOs: Extension Software Installation ProcessGroupPolicy failed, status 0x64c.
USERENV(2a8.2ac) 08:42:47:155 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.f44) 08:44:17:839 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 10:14:42:784 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 10:15:03:393 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.f60) 10:42:14:851 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 12:00:08:879 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 12:00:25:723 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.f60) 12:22:14:878 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 13:36:30:735 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 13:36:47:735 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.f60) 14:04:15:161 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 15:32:53:827 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 15:33:10:140 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.f60) 15:43:15:421 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 17:28:15:808 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.cac) 17:28:32:699 CEvents::Report: ReportEvent failed.  Error = 1502
USERENV(2a8.f60) 17:33:18:168 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(2a8.2ac) 18:32:05:617 ReconcileFile: Unable to open temporary file

Open in new window

0
Comment
Question by:dave_source
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 13

Accepted Solution

by:
dhoffman_98 earned 500 total points
ID: 22833165
Can I suggest trying to remove the machine from the domain (move it to a workstation) and then re-joining the domain again?

You also might try right clicking on the computer object in AD and selecting to reset the computer account.

It may simply be that the computer has lost the secure channel with the domain and is not able to authenticate properly. These steps may resolve that.
0
 

Author Comment

by:dave_source
ID: 22839632
Hi Dhoffman,
thanks for the reply on this, firstly i have to appologise about my post, as i did disconnect the client i have under test from the domain and reconnect it as a new PC. when i disconnected it from the domain i changed the PC name and IP address removed all reference of its old name from the DC and then re added it to the domain.

this failed to solve the issue, in regards to the second part of your suggestion i have tried that but with no difference, is it just a case of using the reset computer option ?? as i have logged the PC off reset it on the DC and then logged in and the policies are still not applying correctly.

the biggest issue with the policies seems to be folder permissions i have setup for the PC are not being applied so the user has no write access to the folder, so the app fails to launch.

when i try GPresult from the command line i get the following error

Error: class not registered. (this is the same error when i attempt to run RSOP.MSC) but doing GPupdate /force from the cmd prompt seems to work (in that it does not return any errors).
0
 

Author Comment

by:dave_source
ID: 23002256
Does anyone have any further suggestions as to why this is happening? as i am still getting this issue and have found no resolution to it so far.
0
 

Expert Comment

by:rx7system
ID: 34701437
I am having exactly this issue...seems nobody can help!
0
 

Author Comment

by:dave_source
ID: 34702306
Hi Rx7System,
have you tried the accepted solution within this question? the problems i was getting originally were resolved by removing the client from the domain and adding it again. if this does not work i would suggest starting a new thread as it will get more exposure (been as this one has been marked as answered).

0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question