Title: Message
Greetings one and all
 
We’ve got a domain with Win 2000 domain controllers and a bunch of win 2000 terminal servers.  We’ve started adding in a few Server 2003 servers and now some group policy permissions issues are appearing. 

 

When a user logs onto a 2000 server he gets the group policy, but when that same account logs onto a 2003 server the group policy doesn’t get applied and it throws the following errors in the event log.

 

Event ID 1030

Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.

 

And

 

Event ID 1101

Windows cannot access the the object OU=Hosting,DC=my-netgain,DC=com in Active Directory. The access to the object may be denied. Group Policy processing aborted.

 

Our domain is designed as per the Microsoft white paper "Deploying AD in a High Volume Hosting environment".

 

Domain

    Hosting (OU)

        Company(OU)

            User1

            User2

    Terminal Servers (OU)

        Server1

        Server2

 

and the group policy is set on the Company OU.

 

I found some newsgroup postings that talked about XP SP1 problems with the message block signing but that doesn't seem to be the problem either (tried turning it off and no change in the behavior).   

 

Any help would be appreciated

 

thanks

Damon

 

Reply via email to