We help IT Professionals succeed at work.

GPUpdate error.

Raneesh A
Raneesh A asked
on
Dear Team,

Recently we have upgarded our AD from 2008 R2 to 2016 .

When i do readmin everything is ysncing .
But when i use gpudate i am getting error on 2016 DCs but successful is 2008R2.

Can you please help me sort this.
I have attached the screenshot also.
lec3.jpg
Comment
Watch Question

View Solution Only

Shabarinath RamadasanInfrastructure Architect

Commented:

Hello Raneesh,


Could you please confirm if the sysvol is fully synchronized to the new 2016 DC?

Repadmin will only show the Active Directory Database level sync status. Sysvol is using FRS or DFS for syncing.


You can navigate to the Sysvol folder on the C drive of 2016 domain controller and check if the policy path matching the GUID is synced.


If the content is synced, then look for the network layer if the required ports are allowed from the client machine to the new domain controller.


Cheers !

Hello ThereSystem Administrator
Distinguished Expert 2018

Commented:
Please run and post here results of:
repadmin /replsummary
repadmin /showrepl

Open in new window

Raneesh AIT Engineer

Author

Commented:
Dear Shabarinath,
 I can see both having the same policy in the sysvol. It is using DFSR. I also done an D2 and D4 .
Raneesh AIT Engineer

Author

Commented:
Hi I attached the summary of the result
lec4.jpg
lec5.jpg
Raneesh AIT Engineer

Author

Commented:
also the mentioned the group policy  is not there in the policy folder on any dc.
Hello ThereSystem Administrator
Distinguished Expert 2018

Commented:
Can you check event log for any related errors?

Can you run repadmin /syncall to sync DCs??
Hello ThereSystem Administrator
Distinguished Expert 2018

Commented:
Maybe you need to migrate from FRS to DFS Replication using the DFSRMIG command?
Raneesh AIT Engineer

Author

Commented:
We already done and it’s in state 4
Shabarinath RamadasanInfrastructure Architect

Commented:

Hello Raneesh,


If you look at the error message, it says that the Computer policy has ended up in error.

While user policy got applied successfully.


That gives a different dimension for the issue.


Could you please check what is configured on the computer section of that GPO?

Is there any specific error on the domain controller related with GPOs?


Cheers !

Raneesh AIT Engineer

Author

Commented:
Hi,

When i google it , the missing object showing default. Is there any way we can regerate it.
6ac1786c-016f-11d2-945f-00c04fb984f9
Raneesh AIT Engineer

Author

Commented:
It looks like the Default Domain Policy and gpt.ini file is missing.  I dont have a backup.Is thereany way to re create it.

I dont have any policies created on Default. But i have  lot of custom GPO policies created.
Sr. Systems Administrator
Commented:
You could try dcgpofix to recreate the default domain policy

https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/dcgpofix
Raneesh AIT Engineer

Author

Commented:
Thanks Team for supporting
Shaun VermaakSenior Consultant
Awarded 2017
Distinguished Expert 2019

Commented:

This is a DFS error not and AD error and recreating/resetting GPO will not fix it