Do you have DNS alias for the server? There is a problem with Win2k where servers with DNS aliases can return this error when clients try to connect. Can't remember the Q I'm afraid.
dave -----Original Message----- From: David Abbishaw [mailto:[EMAIL PROTECTED]] Sent: 10 April 2002 13:11 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Group Policy I think we getting somewhere on this one, from the clients browsing \\domain.co.uk yields an empty explorer window, however from the DC a 'Duplicate name exists on the network' error is displayed. Checked DNS, there is a valid record for 'same as parent' which points to the DC's IP address, nothing untoward in WINS, so god only knows where this is comming from. Any ideas anyone? > > You won't be able to delete this because > {31B2F340-016D-11D2-945F-00C04FB984F9} is the "Default Domain Policy". > It is marked with "isCriticalSystemObject" attribute. By default it's > not allowed to delete "critical system objects". Anyway it wouldn't be > too wise to delete Default Domain policy. Try to restore "right" > security on both GPO (with adsiedit utility from support tools) and > sysvol folder (with explorer). > > Vladimir. > -----Original Message----- > From: David Abbishaw [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, April 10, 2002 10:27 AM > To: [EMAIL PROTECTED] > Subject: Re: [ActiveDir] Group Policy > > > Sorry to sound stupid on this one, but which tool would you se to > delete this? > > BTW the (31B2F340-016D-11D2-945F-00C04FB984F9} directory does exist in > the sysvol share. ----- Original Message ----- > From: davlloyd <mailto:[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Sent: Tuesday, April 09, 2002 10:40 PM > Subject: RE: [ActiveDir] Group Policy > > Seen this error before when people had manually deleted the group > policy directories in SysVol share instead of through an > administration tool. Clients keep trying to get hold of it because the > object is still in the directory. Have a look for the object in the > directory and remove the data references (the GUID for the GPO is > (31B2F340-016D-11D2-945F-00C04FB984F9}). Not sure it will fix the > problem but it will stop the client attempting to download it! > > Cheers > > David > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]] On Behalf Of David > Abbishaw > Sent: 09 April 2002 21:44 > To: [EMAIL PROTECTED] > Subject: [ActiveDir] Group Policy > > Come across a very strange error during client operation (W2K / XP) > basically the machine becomes intermittantly very slow and loses > access to shares/printers always login is painfully slow ~ 3 > -5minutes. > > The event log is showing the following error : > > Windows cannot access the file gpt.ini for GPO > CN={31B2F340-016D-11D2-945F- 00C04FB984F9},CN=Policies,CN=System,DC=domains,DC=co,DC=uk. > The file must be present at the location > <\\domain.co.uk\sysvol\domain.co.uk\Policies\{31B2F340-016D-11D2-945F- 00C04FB984F9}\gpt.ini>. > (The network path was not found. ). Group Policy processing aborted. > For more information, see Help and Support Center at > <http://go.microsoft.com/fwlink/events.asp> > http://go.microsoft.com/fwlink/events.asp. > > When trying to goto \\domain.co.uk <file:///\\domain.co.uk> an empty > explorer window is displayed. Also it looks like someone has messed > with the sysvol permissions as the everyone group only had list and > not read access, and changing these back had no effect. Any > suggestions really welcome. > > regards > David. > > > > ----- Original Message ----- > From: "davlloyd" < <mailto:[EMAIL PROTECTED]> > [EMAIL PROTECTED]> To: < <mailto:[EMAIL PROTECTED]> > [EMAIL PROTECTED]> Sent: Tuesday, April 09, 2002 6:07 PM > Subject: RE: [ActiveDir] AD Administration Tools Suvey > >> FAZAM is now part of the NetIQ Policy Management suite so it would be >> worth going straight to NetIQ. >> >> Cheers >> >> David >> >> >> -----Original Message----- >> From: <mailto:[EMAIL PROTECTED]> >> [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED]] On Behalf Of Tony Murray >> Sent: 09 April 2002 08:18 >> To: <mailto:[EMAIL PROTECTED]> >> [EMAIL PROTECTED] Subject: RE: [ActiveDir] AD >> Administration Tools Suvey >> >> For Group Policy administration FAZAM 2000 from FULLAMOR has some >> good features, including reporting. >> <http://www.fullarmor.com/solutions/group/> >> http://www.fullarmor.com/solutions/group/ >> As with many 3rd party products the price tag may be a problem. >> Microsoft is in the process of a developing a new Group Policy >> Management Tool, which is currently in a closed Beta program and may >> not be available for a while. The feature set has a large overlap >> with FAZAM 2000 and if your timescales are undemanding it may be >> worth talking to your TAM about it. >> >> NetIQ's DRA appears to be very popular. In some environments it may >> not offer the level of granularity of delegation management required >> and I know some companies who, having bought DRA, are now doing some >> in-house development for Group management. >> >> Because 3rd party tools can be expensive, the other option is to >> script a lot of the administration and reporting. The .NET framework >> also makes it easier to develop in-house web administration tools for >> AD. >> >> Tony >> >> ---------- Original Message ---------------------------------- >> From: "Ayers, Diane" < <mailto:[EMAIL PROTECTED]> >> [EMAIL PROTECTED]> Reply-To: <mailto:[EMAIL PROTECTED]> >> [EMAIL PROTECTED] Date: Mon, 08 Apr 2002 21:12:13 -0700 >> >> MessageWe are currently looking at our current tool set and are >> evaluating if we want to replace or stick with what we have. We have >> been using Mission Critical's "Enterprise Administrator" since 1997 >> in our NT 4.0 environment. Back in 1997 there were only two vendors >> that had an "enterprise" level delegate admin tool and in our >> opinion, Enterprise Admin >> was the best tool. It has worked well in that setting and has enabled >> us to >> apply granular delegation to the domain structure and control the >> administrator role. Since then EA and been acquired by NetIQ and is >> now know as Domain and Resource Administrator (DRA) >> >> We are moving toward a native AD environment for aprox 20,000 folks >> and we are using the opportunity to re-evaluate the tools we have and >> are looking >> at NetIQs DRA and Fastlane's (Quest) Active Roles as well as others >> >> Each tool has it strengths and weaknesses. DRA is built around a >> "proxy service" and the service makes the changes on behalf of the >> user. Active >> roles is built around the native ACLs of AD. The bottom line for us >> is going to be how well the tools we integrate into our processes. >> >> If you want to drop me a line, I'll give you my number and I can let >> you now where we are at in our evaluation process. Send it to my >> work address at >> <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED] >> >> Diane Ayers >> Tech Lead, Active Directory Deployment >> San Francisco / Sacramento >> >> >> -----Original Message----- >> From: <mailto:[EMAIL PROTECTED]> >> [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED]]On Behalf Of Myrick, Todd >> (CIT) >> Sent: Monday, April 08, 2002 6:03 AM >> To: <mailto:'[EMAIL PROTECTED]'> >> '[EMAIL PROTECTED]' Subject: [ActiveDir] AD Administration >> Tools Suvey >> >> >> Our group is in the process of evaluating some 3rd party tools to >> assist in delegation and administration of our Active Directory >> technology. We are >> evaluating the products based on 6 key areas. >> >> 1. Role / Trustee delegation >> 2. Control View of resources >> 3. Data Validation & Rule Sets >> 4. Group Policy Management >> 5. Reporting >> 6. Web based administration >> >> We are also evaluating Native Delegation vs Proxy based Delegation. >> >> What I am fishing for from this community is some experiences and >> possibly some recommendations from this group on some of the Admin >> consoles you folks >> use. >> >> Thanks >> >> Todd >> >> >> List info : <http://www.activedir.org/mail_list.htm> >> http://www.activedir.org/mail_list.htm List FAQ : >> <http://www.activedir.org/list_faq.htm> >> http://www.activedir.org/list_faq.htm List archive: >> <http://www.mail-archive.com/activedir%40mail.activedir.org/> >> http://www.mail-archive.com/activedir%40mail.activedir.org/ >> >> --- >> Incoming mail is certified Virus Free. >> Checked by AVG anti-virus system ( <http://www.grisoft.com> >> http://www.grisoft.com). Version: 6.0.344 / Virus Database: 191 - >> Release Date: 02/04/2002 >> >> >> --- >> Outgoing mail is certified Virus Free. >> Checked by AVG anti-virus system ( <http://www.grisoft.com> >> http://www.grisoft.com). Version: 6.0.344 / Virus Database: 191 - >> Release Date: 02/04/2002 >> >> >> List info : <http://www.activedir.org/mail_list.htm> >> http://www.activedir.org/mail_list.htm List FAQ : >> <http://www.activedir.org/list_faq.htm> >> http://www.activedir.org/list_faq.htm List archive: >> <http://www.mail-archive.com/activedir%40mail.activedir.org/> >> http://www.mail-archive.com/activedir%40mail.activedir.org/ >> > > --- > Incoming mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.344 / Virus Database: 191 - Release Date: 02/04/2002 > > > --- > Outgoing mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.344 / Virus Database: 191 - Release Date: 02/04/2002 List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
