Have you tried "gpupdate.exe /force" and "gpresult.exe /scope computer /v" and looked at what's really happening?
 

--------
Roger Seielstad
E-mail Geek

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Schmieder, Marc
Sent: Wednesday, April 06, 2005 8:13 AM
To: [email protected]
Subject: [ActiveDir] Audit Policies are not applying in windows 2000

We have many servers that are not getting the correct auditing policies applied, although all other policy settings are working correctly.  I’ve already checked for Blocked Inheritance, enabled UserEnv.log and I cannot find anything that indicates any problems.  When I change the audit policies on the Domain, these problematic servers don’t seem to see the change when they do a policy refresh.  It doesn’t seem to matter what OU the servers are in either.  Some machine work in the same OU as another machine that doesn’t.  Another thing is that the userenv.log entries for the security extension seem to change.  They are listed below from earliest to oldest.  Does anyone know why this would occur, or how to fix it? 

 

 

 

USERENV(d0.358) 09:56:30:107 ProcessGPOs: Processing extension Security

USERENV(d0.358) 09:56:30:107 CompareGPOLists:  The lists are the same.

USERENV(d0.358) 09:56:30:107 CheckGPOs: No GPO changes and no security group membership change and extension Security has NoGPOChanges set.

 

USERENV(d0.350) 10:00:00:515 ProcessGPOs: Processing extension Security

USERENV(d0.350) 10:00:00:515 CompareGPOLists:  The lists are the same.

USERENV(d0.350) 10:00:00:515 CheckGPOs: No GPO changes but extension Security's MaxNoGPOListChangesInterval has been exceeded.

 

USERENV(d0.350) 10:00:00:515 ProcessGPOs: Processing extension Security

USERENV(b7c.bb8) 10:20:51:039 ProcessGPOs: Extension Security skipped with flags 0x6.

 

 

Thank you,

 

Marc Schmieder

 

 

 

 

Reply via email to