Solved

Changing ODBC System Datasource with Windows 2008 GPOs

Posted on 2009-04-07
4
3,691 Views
Last Modified: 2012-05-06
We have been fighting an issue with trying to get Windows 2008 GPOs to change an ODBC System DSN. We are moving SQL servers (From SQL 2005 to SQL 2008) and we what to have all users change once we have the database moved over. The clients we are concerned with are Windows XP Pro SP2.

The error we keep getting is:
Application Event ID:4098


The user 'ActiveM_Database' preference item in the 'DT16SQLADD {9E21A2A8-AD49-4E5C-AACA-DAFE084A64C2}' Group Policy object did not apply because it failed with error code '0x80070057 The parameter is incorrect.' This error was suppressed.

I have searched and have found no solution. We can create the GPO that can delete the old System DSN but it will not create the new one.
0
Comment
Question by:Dura-Tech
  • 2
  • 2
4 Comments
 
LVL 51

Expert Comment

by:Mark Wills
ID: 24103566
You are  creating the preference first and all that type of palava...  Have a look at http://technet.microsoft.com/en-us/library/cc725828.aspx go down to preferences for a quick read - the preference you need to create is 'data sources'

also, there is a detailed discussion in part 3 of an often referred to site : http://www.windowsecurity.com/articles/Group-Policy-related-changes-Windows-Server-2008-Part3.html

But from the sounds of it, and looking at the messages you have "been there and done that", and I am not trying to teach you how to suck eggs, maybe just a glimmer of hope that one of the above might have a "missing link" that can bring it together.

Now, I think there is still a problem with SQL using data srouces if running SQL 2008 64bit on top of Win Server 2008 64 bit. At the moment, ODBC is not working for that combination (have seen a letter from MS to someone in EE).

seems to be quite a bit of actvity around that error code, will try to track something down...

Might also pay to have a look at utilities as contained on : http://www.windowsmanagement.com/sw-activedirectory/  like: http://www.tools4ever.com/products/user-management-resource-administrator/  says it does all the ODBC stuff...
0
 
LVL 51

Accepted Solution

by:
Mark Wills earned 500 total points
ID: 24103605
Found that entry, but not the letter yet : They are saying that applications running as 64 bit, will not work with ODBC drivers.  

http://www.experts-exchange.com/Microsoft/Development/MS-SQL-Server/SQL_Server_2008/Q_24067488.html?cid=238#a23476507 

they ended up installing SQL 2005 as a "mule" for there ODBC connections.
0
 
LVL 1

Expert Comment

by:synaptech
ID: 33704402
I believe I have found a solution to your ODBC error. Hopefully this can help anyone else who runs across this thread. The solution was actually discovered by MVP Mark Heitbrink and posted here: http://www.frickelsoft.net/blog/?p=115http://groups.google.com/group/microsoft.public.windows.group_policy/browse_thread/thread/c4145644429870/f80f9aff4e472618?lnk=st

This is a bug in either the Group policy preference or the SQL ODBC driver, depending on your point of view. The XML for the DSN contains two empty properties "username" and "cpassword". The SQL ODBC driver does not support saved credentials and so these properties, even though they are empty, cause the DSN to fail.

Workaround:
Right-click the Data source preference object from the Group Policy Preferences Data Sources GUI and paste it to the desktop. Edit the XML to remove the username and cpassword properties, then save the XML. Delete the invalid DSN preference object from the Data Sources GUI, and drag and drop the modified XML file into the blank panel. Answer yes when prompted to import the object.

After this, do not attempt to edit the DSN object or open the object properties, as this will add the "username" and "cpassword" properties back into the object.
0
 
LVL 1

Expert Comment

by:synaptech
ID: 33704832
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question