Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

GPO's not applying to XP workstations

Posted on 2013-05-20
15
Medium Priority
?
310 Views
Last Modified: 2013-07-26
Our XP pro sp2 machines cannot access our GPO's which created in our Win2k8 R2 server.  We have installed client side extensions, ipconfig /flushdns, Ipconfig /registerdns, reconnected to domain but nothing works.  The XP gets error in app log:
Event ID 1058
""Windows cannot access the file gpt.ini for GPO cn={69BFE048-B135-4169-8E5B-0329C6EA271D}cn=policies,cn=system,DC=domain,DC=com. The file must be present at the location <\\domain.com\SysVol\domain.com\Policies\{69BFE048-B135-4169-8E5B-0329C6EA271D}\gpt.ini>. (The system cannot find the path specified. ). Group Policy processing aborted.
"""

When I try to browse to that path via UNC path ""\\domain.com\SYSVOL\domain.com\Policies""
I see the old GPO's but nothing new/recent.  I can see them from Win 7 pro computers.
0
Comment
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
15 Comments
 
LVL 16

Expert Comment

by:uescomp
ID: 39182109
There is an optional update for xp operating system called group policy client side extension that needs to be installed.  Under windows update look for it as an optional update.

I thought XP also had to be SP3?
0
 

Author Comment

by:ProfessionalDataSystems
ID: 39182140
Sorry meant to say SP3, and I already isntalled Client side extensions.
0
 

Author Comment

by:ProfessionalDataSystems
ID: 39182144
BTW, I can view the GPO's if I browse via UNC path using the server's computer name but when I browse via the domain name it does not appear.
0
Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

 
LVL 35

Expert Comment

by:Joseph Daly
ID: 39182177
If you browse to \\domain.com does it bring you to a different server than by using the \\DCname?

Do you have multiple domain controllers in your environment? It sounds like you may have some replication issues.
0
 

Author Comment

by:ProfessionalDataSystems
ID: 39182203
1. I'm not sure how I could tell.  When I browse using the windows 7 pc's it works fine the contents are identical.  On the XP machines it seems to have the old GPO's but nothing new or recently configured.

2. There are 8 DC's.  I ran repadmin /syncall on server and the new gpo did replicate to the other local DC and the Windows 7 have the new GPO applied.
0
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 39182221
Ok not sure if this will work the same but from an XP machine thats having issues and in the run window type %logonserver%

Then do the same on a windows 7 machine. Do they both point to the same server?
0
 

Author Comment

by:ProfessionalDataSystems
ID: 39182254
I tried and it did work and both open the same server wich is our PDC.
0
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 39182265
And you still see the different GPOs when pointing to the same server?
0
 

Author Comment

by:ProfessionalDataSystems
ID: 39182283
It's not that they're different, I do see the same OLD gpo's but I don't see the newest ones that were recenlty created on the XP machines.
0
 

Author Comment

by:ProfessionalDataSystems
ID: 39182332
I ping the namespace "domain.com" and it resolves to the same PDC on windows 7 and xp machines.
0
 

Author Comment

by:ProfessionalDataSystems
ID: 39189319
Anyone else have any ideas?????
0
 

Author Comment

by:ProfessionalDataSystems
ID: 39217158
Please close question since I didn't get a solution.
0
 
LVL 4

Expert Comment

by:TechOps07
ID: 39245636
Confirm the following Hotfix was installed: KB943729, Are the XP machines remote or local?

Try this step if Hotfix is installed and still not working:

Registry settings

Registry subkey: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
 Value name: GroupPolicyMinTransferRate
 Value type: DWORD
 Value Data: 0

Registry subkey: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
 Value name: GroupPolicyMinTransferRate
 Value type: DWORD
 Value Data: 0

OR same registry values at these locations…! ( depend on OS I think )
•HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
•HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon

Group Policy settings

Policy location: Computer Configuration\Administrative Templates\System\Group Policy
 Policy name: Group Policy slow link detection
 Policy setting: Enabled with a value of 0

Policy location: User Configuration\Administrative Templates\System\Group Policy
 Policy name: Group Policy slow link detection
 Policy setting: Enabled with a value of 0

OR

1. Login to the target system as admin or run a cmd console as admin

2. cd to c:\windows\system32

3. run mmc gpedit.msc as admin

4. in both Computer Configuration and User Configuration, go to Administrative Templates

5. go to System, Group Policy

6. Double click the GP Slow Link Detection

7. Enable the policy and set it to 0 ( zero ) to disable “Group Policy slow link detection”  or set the link rate to a slower link speed so the policies will be applied on this link.
0
 

Accepted Solution

by:
ProfessionalDataSystems earned 0 total points
ID: 39342959
I apologize but didn't realize this wasn't closed.  The issue was fixed.  I had the GPO in the Computer OU instead of User OU.
0
 

Author Closing Comment

by:ProfessionalDataSystems
ID: 39357260
...
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many admins will agree: WSUS is is a nice invention but using it on the client side when updating a newly installed computer is still time consuming as you have to do several reboots and furthermore, the procedure of installing updates, rebooting an…
The password reset disk is often mentioned as the best solution to deal with the lost Windows password problem. In Windows 2008, 7, Vista and XP, a password reset disk can be easily created. But besides Windows 7/Vista/XP, Windows Server 2008 and ot…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question