Group policies on server 2008 won't apply to XP computers

Posted on 2009-05-20
Medium Priority
Last Modified: 2012-05-07
Our public network is fairly simple with one DC. This DC has Windows Server 2008 installed. The Vista clients all apply the GPOs without difficulty, but the Windows XP clients will not apply them. Event Viewer on the XP machines shows Event ID: 1096. The permissions for the registry.pol and the GPT.ini are both sufficient. The DNS suffix is correct on client pc when checked using ipconfig /all. When running dcdiag on server all tests pass except systemlog with Event ID 0x00002724 and Event ID 0xC0002719 which both state that DCOM was unable to communicate with the computer <XP workstation name> using any of the configured protocols. Gpresult on XP machine shows that the GPOs are applied and lists them, yet they are not in reality. Please help! Thank you
Question by:fondulac
LVL 35

Accepted Solution

Bembi earned 2000 total points
ID: 24437443
You should take in mind, that the GPOs in W2008 are enhanced and intended for Windows Vista, but not necessarily available for XP. If you experience, that a few of them are without effect without any thrown error, especially in GPResult or somewhere else, I would quite assume, that they may not have any effect in general on XP.

XP GPO are simply registry keys within a special tree. Applying them means, there are transfered into the keys, which are defined within the GPO template file.  But XP has to take notice of them. if they are within the wrong registry path of unknown by XP, they are just ignored.

W2K8 supports also XP GPOs in general, but you have to use templates, which are known by XP. It may be an idea (if you used the default templates from W2K8), to load the ADM files from a Win2003 machine (you can download them also from MS web site) and to configure them in W2K8.

The enhancements of the GPOs in W2K8 are dedicated to Vista (i.e. the admx files).

Author Closing Comment

ID: 31583687
Thanks so much! This sounds like it will work. I'll give it a try.

Featured Post

Free tool for managing users' photos in Office 365

Easily upload multiple users’ photos to Office 365. Manage them with an intuitive GUI and use handy built-in cropping and resizing options. Link photos with users based on Azure AD attributes. Free tool!

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Suggested Courses

600 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question