Solved

GPO problem

Posted on 2016-08-01
7
41 Views
Last Modified: 2016-08-23
Group Policy
In a regional office we have RODC on win 2K8 R2 since last few days I am trying to push a GPO to install a .MSI on client’s workstation but it doesn’t work.
1.      Today I added test machine in primary site to this GPO and installed the .MSI but still not working on reginal office.
2.      I am able to NSLOOKUP on client machine, ping host machines, Domain controllers , I can remotely to that machine with IP address not host name? This might be the issue or something else?
3.      In reverse lookup zone there is no entry for this site’s machines only few static.
4.      None of this site machines are accessible by host name but I can ping host names everything but can’t access with RDP, I am not sure what is the main issue with this site.
5.      .MSI file is placed in computer configuration and for computer accounts and all permission are ok for folders and .msi
Please help.
on clients machine i have saw event ID 1055 and 1058 source GPO.....

Regards
Ghairat
0
Comment
Question by:Abdul Wahid
7 Comments
 
LVL 21

Expert Comment

by:yo_bee
ID: 41738348
1: Have to you run RSOP on the computer or user the Group Policy Result Wizard in GPMC?
2: Do you have Sites and Service properly configured?


Before going any further this information will be very helpful for people to give a more accurate solution.
1
 
LVL 4

Expert Comment

by:Gene Blake
ID: 41738381
You're correct, you are having some DNS issues.

Check that the DNS servers are properly configured to same servers.

Check the domains, Gateways, and Subnets are configured to the same settings
1
 
LVL 6

Expert Comment

by:Ganesamoorthy S
ID: 41738488
0
 

Author Comment

by:Abdul Wahid
ID: 41738937
Yes The Site and services are working fine, i tested and syncing all client information with primary server.....

i checked all DNS and gateways everything is ok..
0
 

Accepted Solution

by:
Abdul Wahid earned 0 total points
ID: 41761750
I left the GPO for a while and after few 2 days it works fine nothing changed
0
 

Author Closing Comment

by:Abdul Wahid
ID: 41766618
So it mean some RODC users need more time get updates from GPO
0
 
LVL 21

Expert Comment

by:yo_bee
ID: 41766894
I find that RODC are really a waste of time.  There is no cost difference and I have never heard of someone just walking out with a DC under their arm.  

I think many others will agree with me.
1

Join & Write a Comment

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now