|
Brad-
A quick suggestion is to make sure that the DC servicing
those GPO processing requests is correctly registered in DNS. Missing SRV
records for LDAP, for example, can cause GPO processing to simply fail,
which would result in no GPO processing at all on a given client.
Another option is to enable verbose event log or userenv
logging on the client after you verify DNS health. For event log logging, try
adding:
HKLM\Software\Microsoft\Windows
NT\Diagnostics\RunDiagnosticLoggingGroupPolicy REG_DWORD 0x1
For userenv, that reg value was just recently posted on
this list--do a search on userenv to find it.
Darren From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brad Martin Sent: Tuesday, December 16, 2003 1:39 PM To: Active Directory Mailing List Subject: [ActiveDir] Group Policy Infrastructure problems Well, I’m having a problem with my GPOs and I’m having an issue finding information on it. If I use the Group Policy Management tool and run a Group Policy Results report then under Component Status (in Computer Configuration) I get an error that reads:
Group
Policy Infrastructure failed due to the error listed
below.
In the event log I get a Event ID: 1030 event, which reads:
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.
And a Event ID: 1101 even which reads:
Windows cannot access the the object OU=STUFF,OU=STUFF,DC=STUFF,DC=STUFF,DC=STUFF in Active Directory. The access to the object may be denied. Group Policy processing aborted.
Both these event are generated when someone logs onto a box, or even when I run a Group Policy Results report. I’ve checked the rights on the SYSVOL and everything seems to be fine, but I can’t seem to track down what the problem is. Any help is appreciated.
Brad Martin GoDaddy.Com 480.505.8800 ext. 250
|
image001.gif
Description: image001.gif
