RE: [ActiveDir] Group Policy Infrastructure problems

[Mark Woods]

Check to make sure you have given the 'Domain Computers' object Read & Apply Group Policy permissions in the GP, also if there XP machines also make sure you give Domain Computers or the computer account (i.e comp01$) read access to the OU. -Mark From: Darren Mar-Elia [mailto:[EMAIL PROTECTED] Sent: 16 December 2003 22:37 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Group Policy Infrastructure problems Brad- A quick suggestion is to make sure that the DC servicing those GPO processing requests is correctly registered in DNS. Missing SRV records for LDAP, for example, can cause GPO processing to simply fail, which would result in no GPO processing at all on a given client.   Another option is to enable verbose event log or userenv logging on the client after you verify DNS health. For event log logging, try adding:   HKLM\Software\Microsoft\Windows NT\Diagnostics\RunDiagnosticLoggingGroupPolicy REG_DWORD 0x1   For userenv, that reg value was just recently posted on this list--do a search on userenv to find it.   Darren From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brad Martin Sent: Tuesday, December 16, 2003 1:39 PM To: Active Directory Mailing List Subject: [ActiveDir] Group Policy Infrastructure problems Well, I’m having a problem with my GPOs and I’m having an issue finding information on it.  If I use the Group Policy Management tool and run a Group Policy Results report then under Component Status (in Computer Configuration) I get an error that reads:   Group Policy Infrastructure failed due to the error listed below. The data is invalid. Note: Due to the GP Core failure, none of the other Group Policy components processed their policy. Consequently, status information for the other components is not available. Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between 12/16/2003 2:24:23 PM and 12/16/2003 2:24:24 PM.   In the event log I get a Event ID: 1030 event, which reads:   Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.                                                                                                                                                                        & nbsp;                   And a Event ID: 1101 even which reads:   Windows cannot access the the object OU=STUFF,OU=STUFF,DC=STUFF,DC=STUFF,DC=STUFF in Active Directory. The access to the object may be denied. Group Policy processing aborted.   Both these event are generated when someone logs onto a box, or even when I run a Group Policy Results report.  I’ve checked the rights on the SYSVOL and everything seems to be fine, but I can’t seem to track down what the problem is.  Any help is appreciated.   Brad Martin GoDaddy.Com 480.505.8800 ext. 250 [EMAIL PROTECTED] http://www.godaddy.com       **This e-mail has been scanned for viruses by Edwin Coe at the mail gateway** This e-mail message and any attached files are confidential and may contain legally privileged information. If you are not the addressee of this e-mail you may not copy, disclose, distribute or otherwise use it or any part of it in any form whatsoever. If you are not the intended recipient please notify the sender immediately by return e-mail or by telephoning +44 (0)20 7691 4000 and then delete this e-mail. Any opinion expressed in this e-mail does not necessarily represent the opinion of Edwin Coe. A list of the names of the partners of Edwin Coe, Solicitors can be inspected at 2 Stone Buildings, Lincoln's Inn, London WC2A 3TH.

image001.gif
Description: image001.gif