I think we getting somewhere on this one, from the clients browsing
\\domain.co.uk yields an empty explorer window, however from the DC
a 'Duplicate name exists on the network' error is displayed.
Checked DNS, there is a valid record for 'same as parent' which points to
the DC's IP address, nothing untoward in WINS, so god only knows where
this is comming from.
Any ideas anyone?
>
> You won't be able to delete this because
> {31B2F340-016D-11D2-945F-00C04FB984F9} is the "Default Domain Policy".
> It is marked with "isCriticalSystemObject" attribute. By default it's
> not allowed to delete "critical system objects".
> Anyway it wouldn't be too wise to delete Default Domain policy.
> Try to restore "right" security on both GPO (with adsiedit utility
> from support tools) and sysvol folder (with explorer).
>
> Vladimir.
> -----Original Message-----
> From: David Abbishaw [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, April 10, 2002 10:27 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [ActiveDir] Group Policy
>
>
> Sorry to sound stupid on this one, but which tool would you se to
> delete this?
>
> BTW the (31B2F340-016D-11D2-945F-00C04FB984F9} directory does exist in
> the sysvol share. ----- Original Message -----
> From: davlloyd <mailto:[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Sent: Tuesday, April 09, 2002 10:40 PM
> Subject: RE: [ActiveDir] Group Policy
>
> Seen this error before when people had manually deleted the group
> policy directories in SysVol share instead of through an administration
> tool. Clients keep trying to get hold of it because the object is still
> in the directory. Have a look for the object in the directory and
> remove the data references (the GUID for the GPO is
> (31B2F340-016D-11D2-945F-00C04FB984F9}). Not sure it will fix the
> problem but it will stop the client attempting to download it!
>
> Cheers
>
> David
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of David Abbishaw
> Sent: 09 April 2002 21:44
> To: [EMAIL PROTECTED]
> Subject: [ActiveDir] Group Policy
>
> Come across a very strange error during client operation (W2K / XP)
> basically the machine becomes intermittantly very slow and loses access
> to shares/printers always login is painfully slow ~ 3 -5minutes.
>
> The event log is showing the following error :
>
> Windows cannot access the file gpt.ini for GPO
> CN={31B2F340-016D-11D2-945F-
00C04FB984F9},CN=Policies,CN=System,DC=domains,DC=co,DC=uk.
> The file must be present at the location
> <\\domain.co.uk\sysvol\domain.co.uk\Policies\{31B2F340-016D-11D2-945F-
00C04FB984F9}\gpt.ini>.
> (The network path was not found. ). Group Policy processing aborted.
> For more information, see Help and Support Center at
> <http://go.microsoft.com/fwlink/events.asp>
> http://go.microsoft.com/fwlink/events.asp.
>
> When trying to goto \\domain.co.uk <file:///\\domain.co.uk> an empty
> explorer window is displayed. Also it looks like someone has messed
> with the sysvol permissions as the everyone group only had list and not
> read access, and changing these back had no effect. Any suggestions
> really welcome.
>
> regards
> David.
>
>
>
> ----- Original Message -----
> From: "davlloyd" < <mailto:[EMAIL PROTECTED]>
> [EMAIL PROTECTED]> To: < <mailto:[EMAIL PROTECTED]>
> [EMAIL PROTECTED]> Sent: Tuesday, April 09, 2002 6:07 PM
> Subject: RE: [ActiveDir] AD Administration Tools Suvey
>
>> FAZAM is now part of the NetIQ Policy Management suite so it would be
>> worth going straight to NetIQ.
>>
>> Cheers
>>
>> David
>>
>>
>> -----Original Message-----
>> From: <mailto:[EMAIL PROTECTED]>
>> [EMAIL PROTECTED]
>> [mailto:[EMAIL PROTECTED]] On Behalf Of Tony Murray
>> Sent: 09 April 2002 08:18
>> To: <mailto:[EMAIL PROTECTED]>
>> [EMAIL PROTECTED] Subject: RE: [ActiveDir] AD
>> Administration Tools Suvey
>>
>> For Group Policy administration FAZAM 2000 from FULLAMOR has some good
>> features, including reporting.
>> <http://www.fullarmor.com/solutions/group/>
>> http://www.fullarmor.com/solutions/group/
>> As with many 3rd party products the price tag may be a problem.
>> Microsoft is in the process of a developing a new Group Policy
>> Management Tool, which is currently in a closed Beta program and may
>> not be available for a while. The feature set has a large overlap
>> with FAZAM 2000 and if your timescales are undemanding it may be worth
>> talking to your TAM about it.
>>
>> NetIQ's DRA appears to be very popular. In some environments it may
>> not offer the level of granularity of delegation management required
>> and I know some companies who, having bought DRA, are now doing some
>> in-house development for Group management.
>>
>> Because 3rd party tools can be expensive, the other option is to
>> script a lot of the administration and reporting. The .NET framework
>> also makes it easier to develop in-house web administration tools for
>> AD.
>>
>> Tony
>>
>> ---------- Original Message ----------------------------------
>> From: "Ayers, Diane" < <mailto:[EMAIL PROTECTED]>
>> [EMAIL PROTECTED]> Reply-To: <mailto:[EMAIL PROTECTED]>
>> [EMAIL PROTECTED] Date: Mon, 08 Apr 2002 21:12:13 -0700
>>
>> MessageWe are currently looking at our current tool set and are
>> evaluating
>> if we want to replace or stick with what we have. We have been using
>> Mission Critical's "Enterprise Administrator" since 1997 in our NT 4.0
>> environment. Back in 1997 there were only two vendors that had an
>> "enterprise" level delegate admin tool and in our opinion, Enterprise
>> Admin
>> was the best tool. It has worked well in that setting and has enabled
>> us to
>> apply granular delegation to the domain structure and control the
>> administrator role. Since then EA and been acquired by NetIQ and is
>> now know as Domain and Resource Administrator (DRA)
>>
>> We are moving toward a native AD environment for aprox 20,000 folks
>> and we
>> are using the opportunity to re-evaluate the tools we have and are
>> looking
>> at NetIQs DRA and Fastlane's (Quest) Active Roles as well as others
>>
>> Each tool has it strengths and weaknesses. DRA is built around a
>> "proxy service" and the service makes the changes on behalf of the
>> user. Active
>> roles is built around the native ACLs of AD. The bottom line for us
>> is going to be how well the tools we integrate into our processes.
>>
>> If you want to drop me a line, I'll give you my number and I can let
>> you now
>> where we are at in our evaluation process. Send it to my work address
>> at
>> <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED]
>>
>> Diane Ayers
>> Tech Lead, Active Directory Deployment
>> San Francisco / Sacramento
>>
>>
>> -----Original Message-----
>> From: <mailto:[EMAIL PROTECTED]>
>> [EMAIL PROTECTED]
>> [mailto:[EMAIL PROTECTED]]On Behalf Of Myrick, Todd
>> (CIT)
>> Sent: Monday, April 08, 2002 6:03 AM
>> To: <mailto:'[EMAIL PROTECTED]'>
>> '[EMAIL PROTECTED]' Subject: [ActiveDir] AD Administration
>> Tools Suvey
>>
>>
>> Our group is in the process of evaluating some 3rd party tools to
>> assist
>> in delegation and administration of our Active Directory technology.
>> We are
>> evaluating the products based on 6 key areas.
>>
>> 1. Role / Trustee delegation
>> 2. Control View of resources
>> 3. Data Validation & Rule Sets
>> 4. Group Policy Management
>> 5. Reporting
>> 6. Web based administration
>>
>> We are also evaluating Native Delegation vs Proxy based Delegation.
>>
>> What I am fishing for from this community is some experiences and
>> possibly
>> some recommendations from this group on some of the Admin consoles you
>> folks
>> use.
>>
>> Thanks
>>
>> Todd
>>
>>
>> List info : <http://www.activedir.org/mail_list.htm>
>> http://www.activedir.org/mail_list.htm List FAQ :
>> <http://www.activedir.org/list_faq.htm>
>> http://www.activedir.org/list_faq.htm List archive:
>> <http://www.mail-archive.com/activedir%40mail.activedir.org/>
>> http://www.mail-archive.com/activedir%40mail.activedir.org/
>>
>> ---
>> Incoming mail is certified Virus Free.
>> Checked by AVG anti-virus system ( <http://www.grisoft.com>
>> http://www.grisoft.com). Version: 6.0.344 / Virus Database: 191 -
>> Release Date: 02/04/2002
>>
>>
>> ---
>> Outgoing mail is certified Virus Free.
>> Checked by AVG anti-virus system ( <http://www.grisoft.com>
>> http://www.grisoft.com). Version: 6.0.344 / Virus Database: 191 -
>> Release Date: 02/04/2002
>>
>>
>> List info : <http://www.activedir.org/mail_list.htm>
>> http://www.activedir.org/mail_list.htm List FAQ :
>> <http://www.activedir.org/list_faq.htm>
>> http://www.activedir.org/list_faq.htm List archive:
>> <http://www.mail-archive.com/activedir%40mail.activedir.org/>
>> http://www.mail-archive.com/activedir%40mail.activedir.org/
>>
>
> ---
> Incoming mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.344 / Virus Database: 191 - Release Date: 02/04/2002
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.344 / Virus Database: 191 - Release Date: 02/04/2002
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
