Solved

Group Policy Update fails

Posted on 2014-03-27
6
647 Views
Last Modified: 2015-05-04
I recently demoted my main domain Controller but before doing so i moved all of the FSMO roles over and then demoted it in accordance to the whitepapers, it was a 2003 DC.  i now have 2008 R2 DC which host all of the FSMO roles and everything was working correctly(at least I thought) until I tried to force a gpupdate and it failed.  here is the message:

Component Name Status Last Process Time
Group Policy Infrastructure Failed 3/27/2014 7:21:42 AM
Group Policy Infrastructure failed due to the error listed below.

The system cannot find the path specified.

Note: Due to the GP Core failure, none of the other Group Policy components processed their policy. Consequently, status information for the other components is not available.

Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between 3/27/2014 7:21:41 AM and 3/27/2014 7:21:42 AM.
 
Folder Redirection (N/A) 3/17/2014 5:28:00 PM
Internet Explorer Branding (N/A) 3/17/2014 5:28:01 PM
Registry (N/A) 3/17/2014 5:28:00 PM
Scripts

any suggestions?  here is the gpupdate /force failure:

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Users\Administrator.CHPHEALTH>gpupdate /force
Updating Policy...

User policy could not be updated successfully. The following errors were encount
ered:

The processing of Group Policy failed. Windows attempted to read the file \\chph
ealth.org\SysVol\chphealth.org\Policies\{276C6C9D-5EB4-4F7E-95B6-DC3F80FFD2CA}\g
pt.ini from a domain controller and was not successful. Group Policy settings ma
y not be applied until this event is resolved. This issue may be transient and c
ould be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller
 has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
Computer Policy update has completed successfully.


Thanks in advance.....
0
Comment
Question by:mogurek
  • 3
  • 2
6 Comments
 
LVL 23

Accepted Solution

by:
Thomas Grassi earned 500 total points
ID: 39959097
run this on your DC's

netdiag >>dclogx.txt

dcdiag >>dclogx.txt
dcdiag /test:registerindns /dnsdomain:FQDN HERE>>dclogx.txt
dcdiag /c /v >>dclogx.txt
dcdiag /test:dns >>dclogx.txt
browstat status -v our >>dclogx.txt

Post results
0
 

Author Comment

by:mogurek
ID: 39969744
Here you go, netdiag >>dclogx.txt and browstat status -v our >>dclogx.txt did not work.
dclogx.txt
0
 
LVL 23

Expert Comment

by:Thomas Grassi
ID: 39969851
Reviewed the report.

I would check your DNS settings as a start.

check this   http://support.microsoft.com/kb/887303


Fix the DNS errors and then run the report again
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 

Author Comment

by:mogurek
ID: 39970223
0
 

Author Comment

by:mogurek
ID: 39970226
how do I remove the references for gcc-dc-001 and chp-dc-002?  they are old DC that are not on line any longer.  how does everthing else look?  also the reference to: \\chphealth.org\SysVol\chphealth.org\Policies\{276C6C9D-5EB4-4F7E-95B6-DC3F80FFD2CA}\gpt.ini from a domain controller and was not successful. I believe is also from a old dc which I currently dcpromo'd.  Thanks!
0
 

Expert Comment

by:TMS
ID: 40758408
Hi I have this same problem where the User policy fails with a standard User but the computer policy applies successfully.  However, when I log in as a domain admin then Gpupdate is successful.  Because of this I assume the DNS is fine and therefore a permissions problem.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Remote Apps is a feature in server 2008 which allows users to run applications off Remote Desktop Servers without having to log into them to run the applications.  The user can either have a desktop shortcut installed or go through the web portal to…
Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now