[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

GPP issues on Windows 2008 Terminal Server

Posted on 2011-10-09
16
Medium Priority
?
1,037 Views
Last Modified: 2012-05-12
Hi All,
I had a windows 2003 AD with win2K8 STD. X64. Everything was working fine until I migrated the network to a new windows 2008 R2 AD. I have enabled printers and drive mapping using GPP. I had some issued with windows Xp but those were solved by patching with the MS client side patch. The problem starts with a windows 2008 STD. That functioned as a TS. It refuses to accept the new GPO/ GPP. I was not able to find a patch for client side for win2k8 nor do I know if it even exist. I have removed server from domain and re-added and patched latest nic drivers but with no luck.

I have another client with a similar envir and their win2k8 works fine with the win2k8 R2 Ad. I have also fully patched the server. I have also disabled the GPO printer settings for getting printers only from certain servers.

Anyone else is or was having issues with win2k8 STD ( which is really Vista) on a win2k8 R2 domain?

Thanks for your help.
0
Comment
Question by:SpiderPig
  • 8
  • 7
16 Comments
 
LVL 10

Expert Comment

by:SuperTaco
ID: 36939464
Did you change DNS server in DHCP.  Often times Improper DNS settings are the downfall of Group Policy.
0
 

Author Comment

by:SpiderPig
ID: 36939779
The server has a static ip. I did change the priority on the dns servers so that the newly added 2k8r2 is the first on the list of dns servers and the old win 2k3 ad with it's dns as the second of the list. From what I could tell both dns servers are happy.
0
 
LVL 11

Expert Comment

by:Ackles
ID: 36940837
Hi,
Can you please try to make a simple GPO or GPP & not amend the one's which were existing from the old environment?

Let's see if the Server takes the GP or is it totally denying it? Please reboot the server after you apply GPO & post the GPO you configure for test.

A
0
Restore individual SQL databases with ease

Veeam Explorer for Microsoft SQL Server delivers an easy-to-use, wizard-driven interface for restoring your databases from a backup. No expert SQL background required. Web interface provides a complete view of all available SQL databases to simplify the recovery of lost database

 

Author Comment

by:SpiderPig
ID: 36943664
The two polices are new. I think I am going to remove the old profile from the server.
0
 
LVL 11

Expert Comment

by:Ackles
ID: 36944168
The point is to make a new policy which didn't exist in the old environment, all what we want to see is if the GP processing is working or not?
0
 

Author Comment

by:SpiderPig
ID: 36950635
Yeah, I created these 2 new polices on the new R2. O.K so I have an update, I contacted MS to get a hold of that patch fix289883. That apparently can only be downloaded by emailing MS. Anyway, they sent me the file, I downloaded and install, and indeed my Win 2K8 TS boots up. The only issue it reports that it could not map the desktop and my doc, and the error shows the path of the old server. I did GPresult /r and saw that I am still getting GPO from the old BDC which is Win2K3. The old BDC is still alive, but it is not GC. I moved all roles to the new R2. I have the feeling I need to demote it completely don't i?
0
 
LVL 11

Expert Comment

by:Ackles
ID: 36950679
If you have move everything I don't see any harm doing it.
0
 

Author Comment

by:SpiderPig
ID: 36950855
Thats what I am going to do. Its driving me crazy that the server still look for the redirected folders on the old non existing AD. I rebooted 4 times and it still says that the desktop and my doc cannot be found....

Thanks, I will keep you guys posted.
0
 

Author Comment

by:SpiderPig
ID: 36952194
OK old Win2K3 BDC removed. Now I have only a single AD on Win2K8 R2. DNS also removed from old Win2K3.

Here is the event ID I am getting when logging in to the Win2K8 TS:

Log Name:      Application
Source:        Microsoft-Windows-Folder Redirection
Date:          10/11/2011 1:52:34 PM
Event ID:      502
Task Category: None
Level:         Error
Keywords:      Classic
User:          DOMAIN\administrator
Computer:      TS.domain.com
Description:
Failed to apply policy and redirect folder "Videos" to "\\NEWSERVER\UserProfiles\administrator\My Documents\My Videos".
 Redirection options=80009211.
 The following error occurred: "Failed to build the list of regular subfolders under "\\OLDSERVER\Users Profiles\administrator\My Documents\My Videos"".
 Error details: "Logon Failure: The target account name is incorrect.
".
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Folder Redirection" Guid="{7D7B0C39-93F6-4100-BD96-4DDA859652C5}" EventSourceName="Folder Redirection" />
    <EventID Qualifiers="49152">502</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-10-11T20:52:34.000Z" />
    <EventRecordID>36305</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>TS.domain.com</Computer>
    <Security UserID="S-1-5-21-714707875-3432220489-2560136311-500" />
  </System>
  <EventData Name="EVENT_FDEPLOY_FailedToApplyPolicy">
    <Data Name="FromFolder">Videos</Data>
    <Data Name="ToFolder">\\NEWSERVER\UserProfiles\administrator\My Documents\My Videos</Data>
    <Data Name="Options">80009211</Data>
    <Data Name="Error">Failed to build the list of regular subfolders under "\\OLDSERVER\Users Profiles\administrator\My Documents\My Videos"</Data>
    <Data Name="ErrorDetails">Logon Failure: The target account name is incorrect.
</Data>
    <Binary>74050780</Binary>
  </EventData>
</Event>

Also, see screen shoot when logging in to the TS. (BSTDC01 = old AD, does not exist anymore).

Capture.PNG
0
 
LVL 11

Expert Comment

by:Ackles
ID: 36952220
Can you try something;
Define DNS in your Workstation for the new DC, flushdns or reboot & see what happens?
0
 

Author Comment

by:SpiderPig
ID: 36952300
You know I am starting to think its a Folder Redirection Permissions on the folders themselves.... I lost them since I reinstalled the OS on the file server (which is also the new AD).... I am searching for an article on what is the default permissions on the redirected folder location.

As to DNS, the TS has a static IP with DNS that points to 10.0.1.1 which is the new AD and DNS. I rebooted several times, and did not see any change. As to workstations, they use a DHCP (also on new server). The DHCP has a DNS of 10.0.1.1 as well.

Where were you going with this?
0
 
LVL 11

Expert Comment

by:Ackles
ID: 36952302
Alright, it seems that this is the exact thing:
http://www.nebev.net/blog/?p=258

I am really feeling bad that I can't exactly give you one stop solution, the problem is I can't replicate the issue, it will just take too long to recreate it :(

A
0
 
LVL 11

Accepted Solution

by:
Ackles earned 2000 total points
ID: 36952312
0
 

Author Comment

by:SpiderPig
ID: 36952702
No worries my friend you have done more than enough! The first link, I am not so sure that is the problem since I was not able to find the KB. Second link is awesome, I will make changes after hours when users are off and about.

I will keep you posted.

Thank you very much for your help. You have been awesome.
0
 
LVL 11

Expert Comment

by:Ackles
ID: 36952714
Great. Rest tomorrow. Signing Off now.
0
 
LVL 11

Expert Comment

by:Ackles
ID: 37084763
Thanks.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
Suggested Courses

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question