Changing ODBC System Datasource with Windows 2008 GPOs

Posted on 2009-04-07
Medium Priority
Last Modified: 2012-05-06
We have been fighting an issue with trying to get Windows 2008 GPOs to change an ODBC System DSN. We are moving SQL servers (From SQL 2005 to SQL 2008) and we what to have all users change once we have the database moved over. The clients we are concerned with are Windows XP Pro SP2.

The error we keep getting is:
Application Event ID:4098

The user 'ActiveM_Database' preference item in the 'DT16SQLADD {9E21A2A8-AD49-4E5C-AACA-DAFE084A64C2}' Group Policy object did not apply because it failed with error code '0x80070057 The parameter is incorrect.' This error was suppressed.

I have searched and have found no solution. We can create the GPO that can delete the old System DSN but it will not create the new one.
Question by:Dura-Tech
  • 2
  • 2
LVL 52

Expert Comment

by:Mark Wills
ID: 24103566
You are  creating the preference first and all that type of palava...  Have a look at http://technet.microsoft.com/en-us/library/cc725828.aspx go down to preferences for a quick read - the preference you need to create is 'data sources'

also, there is a detailed discussion in part 3 of an often referred to site : http://www.windowsecurity.com/articles/Group-Policy-related-changes-Windows-Server-2008-Part3.html

But from the sounds of it, and looking at the messages you have "been there and done that", and I am not trying to teach you how to suck eggs, maybe just a glimmer of hope that one of the above might have a "missing link" that can bring it together.

Now, I think there is still a problem with SQL using data srouces if running SQL 2008 64bit on top of Win Server 2008 64 bit. At the moment, ODBC is not working for that combination (have seen a letter from MS to someone in EE).

seems to be quite a bit of actvity around that error code, will try to track something down...

Might also pay to have a look at utilities as contained on : http://www.windowsmanagement.com/sw-activedirectory/  like: http://www.tools4ever.com/products/user-management-resource-administrator/  says it does all the ODBC stuff...
LVL 52

Accepted Solution

Mark Wills earned 1500 total points
ID: 24103605
Found that entry, but not the letter yet : They are saying that applications running as 64 bit, will not work with ODBC drivers.  


they ended up installing SQL 2005 as a "mule" for there ODBC connections.

Expert Comment

ID: 33704402
I believe I have found a solution to your ODBC error. Hopefully this can help anyone else who runs across this thread. The solution was actually discovered by MVP Mark Heitbrink and posted here: http://www.frickelsoft.net/blog/?p=115http://groups.google.com/group/microsoft.public.windows.group_policy/browse_thread/thread/c4145644429870/f80f9aff4e472618?lnk=st

This is a bug in either the Group policy preference or the SQL ODBC driver, depending on your point of view. The XML for the DSN contains two empty properties "username" and "cpassword". The SQL ODBC driver does not support saved credentials and so these properties, even though they are empty, cause the DSN to fail.

Right-click the Data source preference object from the Group Policy Preferences Data Sources GUI and paste it to the desktop. Edit the XML to remove the username and cpassword properties, then save the XML. Delete the invalid DSN preference object from the Data Sources GUI, and drag and drop the modified XML file into the blank panel. Answer yes when prompted to import the object.

After this, do not attempt to edit the DSN object or open the object properties, as this will add the "username" and "cpassword" properties back into the object.

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Stellar Phoenix SQL Database Repair software easily fixes the suspect mode issue of SQL Server database. It is a simple process to bring the database from suspect mode to normal mode. Check out the video and fix the SQL database suspect mode problem.

607 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question