Solved

GPO not applied

Posted on 2014-12-10
4
72 Views
Last Modified: 2016-06-16
Hello All,

Previously I had a problem with my GPOs created on one DC and for some reason it was missing in the other DC. Upon checking and troubleshooting it, I eventually was able to resolve by performing the DFSR authoritative restore. The problem I am facing now is that the password policy GPO linked to Domain would not apply at all. I used the GPCresult /r and of course the GPO in question was not listed as applied. I also applied the GPCupdate.exe but still the GPO in question is not applied. Any ideas or suggestions on how I should proceed on trying to resolve this issue?? Any help or recommendation is greatly appreciated. I am new to GPO concept so you would have to spell it out a little bit for me to understand. Thanks!

Lotusmail1
0
Comment
Question by:lotusmail1
4 Comments
 
LVL 27

Accepted Solution

by:
Dan McFadden earned 250 total points
ID: 40493681
Have you verified that replication is fully functional?  As a start, I would run the following:

1. dcdiag /e /v
2. repadmin /replsummary

Are there errors?

Also, if you know what the file name of the GPO is, does it exist on all DCs?  Are the contents of the following location, the same on all DCs?:  C:\Windows\SYSVOL\sysvol\dpa.com\Policies

Here's a decent link on troubleshooting GPO:  http://www.tech-faq.com/troubleshooting-group-policy.html

Dan
0
 

Author Comment

by:lotusmail1
ID: 40493885
Thanks for your advise. It helped a lot.

Lotusmail1
0
 
LVL 32

Assisted Solution

by:Rodney Barnhardt
Rodney Barnhardt earned 250 total points
ID: 40494265
If you are still having a problem, I would check the FRS logs on each DC to see if you are experiencing any event ID's 13508 or 13568. These indicate JRNL_WRAP_Errors. I had a problem with GPO's randomly not processing correctly a few weeks ago. If you do, here is how to correct it.

Perform the following on one domain controller at a time. Start with the DC that has the JRNL_WRAP_ERROR in the event viewer.
 
Stop the FRS service
 
Click on Start, Run, and type REGEDIT
 
Expand HKEY_LOCAL_MACHINE
Go to the following location:
"System|CurrentControlSet|Services\NtFrs\Parameters\Backup/Restore\Process at Startup"
Double click on the value name "BurFlags"
Change the value to "d2"
 
Restart the FRS service
 
The SYSVOL should be recreated and the data will gradually repopulate. Refresh the event viewer until event ID 13516 appears indicting the rebuild is complete.

Once completed, the system will reset the registry key back. However, as stated above, you have to ensure there are no other replication problems prior to doing this.
0

Featured Post

Gigs: Get Your Project Delivered by an Expert

Select from freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
This tutorial will walk an individual through the process of installing the necessary services and then configuring a Windows Server 2012 system as an iSCSI target. To install the necessary roles, go to Server Manager, and select Add Roles and Featu…

815 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now