Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

GPO is not working after upgrading Active Directory to Windows 2008 R2

Posted on 2010-11-09
2
Medium Priority
?
870 Views
Last Modified: 2012-05-10
Dear All,

I upgrade my Active Directory from windows 2003 to windows 2008 R2, now I have two domain controllers, windows 2008 and windows 2003. The windows 2008 DC have all FSMO roles now.

Almost, everything is working fine except some group policy which they are not applied now.
So I need your help to upgrade the GPO to windows 2008 R2.

Thanks
0
Comment
Question by:Arabsoft_Security
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 27

Expert Comment

by:KenMcF
ID: 34098901
Are you getting any errors?
When you updated the schema did you run adprep /gpprep?

Is it all computers that the GPOs do not work on or just the new 2008 servers?

http://www.petri.co.il/windows-server-2008-adprep.htm
0
 
LVL 24

Accepted Solution

by:
Awinish earned 2000 total points
ID: 34099492
Have you run adprep /domainprep /gpprep command while upgrading domain controller to 2k8.

This cmd is required to update permission on GPO,sometime adprep /domainprep is enough but this command requires to be run while upgrading or you can run now.

You can run gpotool.exe & can see the health of GPO's & then you can track with the error in event log.

You can use userenv logging the best way to find the cause for GPO not getting applied.

http://social.technet.microsoft.com/Forums/en/winservergen/thread/224c95bc-e6b3-4b66-82e1-22de625b7dc6

http://blogs.technet.com/b/askds/archive/2008/11/11/understanding-how-to-read-a-userenv-log-part-1.aspx 
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question