Cannot Install Software from GPO

I have changed employers, and find myself in an environment that has recently migrated servers, with all servers having new names. Software deployment has not been too good here, with no deployment tool being used - not even AD. Most apps are installed on a server with the clients provided with shortcuts to those apps. I'm not a huge fan of this method, so I tyhought I'd start using AD for software distribution.

So I created a new OU and linked a new GPO to it with a single application to assign. I moved a PC into that OU and restarted. No installation occurred.

Looking at the logs it seems there is a problem in that the error message 'The Group Policy client-side extension Software Installation failed to execute' is reported by Userenv in the application log. I wondered if the PC in question is at fault, but a new virtual machine (not part of the new OU) is also reporting the same problem.

Userenv.log looks like this:

USERENV(410.414) 14:47:37:687 ReconcileFile: Unable to open temporary file
USERENV(410.414) 14:48:42:625 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(410.414) 14:48:42:625 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(410.414) 14:48:42:625 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(410.768) 14:49:08:359 ProcessGPOs: Extension Software Installation ProcessGroupPolicy failed, status 0x80040169.
USERENV(410.414) 14:50:28:258 GetExclusionList: Failed to get file size of <C:\Documents and Settings\wheatleyk\ntuser.ini>
USERENV(410.414) 14:50:28:870 ReconcileFile: Unable to open temporary file
USERENV(410.820) 14:50:42:764 ProcessGPOs: Extension Software Installation ProcessGroupPolicy failed, status 0x80040169.
USERENV(410.90c) 14:50:43:454 PolicyChangedThread: UpdateUser failed with 1008.
USERENV(410.414) 15:08:51:357 ReconcileFile: Unable to open temporary file
USERENV(410.414) 15:09:12:338 GetExclusionList: Failed to get file size of <C:\Documents and Settings\wheatleyk\ntuser.ini>
USERENV(410.414) 15:09:12:963 ReconcileFile: Unable to open temporary file
USERENV(410.e88) 15:09:19:847 ProcessGPOs: Extension Software Installation ProcessGroupPolicy failed, status 0x80040169.
USERENV(410.c6c) 15:09:19:925 PolicyChangedThread: UpdateUser failed with 1008.
-----------------------------------------------------
Appmgmt.log has the following:

Software installation extension returning with final error code 2147746153.
11-11 15:09:19:816
Software installation extension has been called for foreground synchronous policy refresh.
The following policies are to be applied, flags are 0.
    InterJigsaw Global Policy (unique identifier {ED51F1B4-3F98-477B-812B-E24A72DD5C61})
        System volume path = \\haec-staff\Sysvol\haec.local\Policies\{ED51F1B4-3F98-477B-812B-E24A72DD5C61}\User
        Active Directory path = LDAP://CN=User,CN={ED51F1B4-3F98-477B-812B-E24A72DD5C61},CN=Policies,CN=System,DC=haec,DC=local
Set the Active Directory path to LDAP://CN=Class Store,CN=User,CN={ED51F1B4-3F98-477B-812B-E24A72DD5C61},CN=Policies,CN=System,DC=haec,DC=local;.
Enumerating applications in the Active Directory for user wheatleyk with flags 5.
Cannot bind to the Active Directory to enumerate applications, error code 80040169.
Failed to apply changes to software installation settings.  Software changes could not be applied.  A previous log entry with details should exist.  The error was : %2147746153

Software installation extension returning with final error code 2147746153.

---------------------------------------

I suspect that whatever the problem is its root cause is the migrartion last August. But how do I start to debug this?
birchangerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Netman66Commented:
Your Default Domain Policy is likely corrupt.

Back it up via GPMC.

Recreate the policy like so:

DCGPOFIX /target:domain

Beware that default security settings are not returned by this method.  Follow the KB below to make the necessary changes if you find some functionality is broken.

http://support.microsoft.com/kb/833783
0
birchangerAuthor Commented:
Thanks for the suggestion - that sounds like something I need to plan for, rather carefully.
0
birchangerAuthor Commented:
I have just run RSOP on a machine in the domain and get an exclamation mark. The error information says:

Software Installation did not complete policy processing because a system restart is required for the settings to be applied. Group Policy will attempt to apply the settings the next time the computer is restarted.

Does this support the corrupt default GP theory?
0
Netman66Commented:
It could, yes.

Did a reboot cure it?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
birchangerAuthor Commented:
I still haven't fixed this, as I haven't had time. But for fairness I'll close this and award points.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.