[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1238
  • Last Modified:

Certain Group Policies are not applying - Overlapped I/O operation in progress?

Hello All;

Having a strange group policy problem that I've never seen before.  I have a single domain controller (SBS2003) and all of my domain clients are XP Pro SP2.  GP's have always applied correctly.  Created a new Group Policy specifically for the purpose of ScreenSaver settings.  Created a security group called SCREENSAVER PEEPZ and joined all users to the group that I want the policy to apply to.  Most users are getting the policy no problem, even if it requires a logoff/logon and/or reboot occasionally.  

Some users are not getting the policy even though they are part of the group.  In GP Management Concole, I run the Policy Results Wizard and see the following statistics for these users:

Group Policy Infrastucture failed due to the error listed below.
Overlapped I/O operation is in progress.

Now after this error occurs, GP objects that should have been processed after the error are never applied.  I've tried rebooting everything, including the domain controller as well as the client machines, several times.  Still no go.  

Any ideas?
0
zagnutttt4
Asked:
zagnutttt4
  • 5
  • 5
1 Solution
 
Dusan_BajicCommented:
Click Start / Run and type "control keymgr.dll"
Delete the stored password for the Domain Controller that you are connected to.
 
Run GPUpdate /force from the command promp
0
 
zagnutttt4Author Commented:
Just tried it - here's what happened:

I ran "control keymgr.dll".

The login box displays the correct domain controller.  The username was listed as the profile that outlook is using on this machine, it did not have the user account listed that the machine is actually logged onto the domain as.  So, in the box I changed the username to DOMAIN\username where username represents the correct username.   The password box was blank, so I filled in the correct password.  Gpupdate /force shows a successful update in the command prompt window.  GP management console verifies that the same thing as before is happening, however.  Still not getting the policy in question applied, still got I/O error and Group Policy Infrastructure failed.
0
 
Dusan_BajicCommented:
Any errors in Event log?
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
zagnutttt4Author Commented:
For this particular user, yes.  On the domain controller, I repeatedly see:

Event ID 1030
"Windows cannot query for the list of Group Policy objects.  Check the event log for possible messages previously logged by the policy engine that describes the reason for this.".

Also I get:

Event ID 1517
"Windows saved user DOMAIN\username registry while an application or service was still using the registry during log off.  The memory used by the user's registry has not been freed.  The registry will be unloaded when it is no longer in use."

0
 
Dusan_BajicCommented:
Click Start / Run and type "control keymgr.dll"
_Remove_ everything
 
Run GPUpdate /force from the command prompt
0
 
zagnutttt4Author Commented:
By remove everything - you mean literally remove everything from the box that pops up, including server name, username, and password?
0
 
zagnutttt4Author Commented:
It worked!!  Amazingly, after deleting everything from that box, gpupdate finally worked all the way through.  I confirmed this with RSOP.  

However, after that, I logged off and back on.  Back to the same thing.

So, I now know that clearing the logon credentials using control keymgr.dll will temporarily allow me to squeeze this policy out to the users that have not received it yet.  

However, the main questions is A.)  What causes this behavior  and B.) Why does it come back after caching the credentials again and C.) How to permanently fix it?
0
 
Dusan_BajicCommented:
Yes, Microsoft recommends to "... delete stored passwords" , but I've seen this already and deleting everything helped.

 
0
 
Dusan_BajicCommented:
My knowledge about this issue ends there :), and even http://support.microsoft.com/kb/555651 doesn't give any additional info.
If you wish to investigate further, I would try removing client from domain and joining it back or something like that...  
0
 
zagnutttt4Author Commented:
Thanks for the help!!  I never would have thought to delete the store passwords!!  I am awarding points and I will continue my research as well, but at least for now I know how to troubleshoot this problem.    Thanks again!!
0

Featured Post

A Cyber Security RX to Protect Your Organization

Join us on December 13th for a webinar to learn how medical providers can defend against malware with a cyber security "Rx" that supports a healthy technology adoption plan for every healthcare organization.

  • 5
  • 5
Tackle projects and never again get stuck behind a technical roadblock.
Join Now