Darren,
SA rocks, although things are a bit cold at the moment - for us cold is
single figure above 0 ;)
Hmmmmm, have seen stuff around the profile as well, but not always
consistent enough to point a shaking finger at it and lay blame there.

Turns out that ADMT failed to migrate sid-history and QMM did migrate
sid-history, thus an attribute comparison of two objects migrated with
different turns out that the only difference was that ADMT failed on
sid-history.

When I dropped sid-history on migrated users RSOP returns a single set for
the target environment and GPO's fire correctly, re-introduce sid-history
and things go pear shaped.


On some users, giving them fresh profiles also helped on some occasions
though so I'm keen to know if you can give me a pointer in the right
direction as to how HKLM and HKCU relates to GPO processing?

-----Original Message-----
From: Darren Mar-Elia [mailto:[EMAIL PROTECTED] 
Sent: 16 May 2006 03:17 AM
To: [email protected]
Subject: RE: [ActiveDir] GPO wierdness during forest migration

Nicolas-
I hope things are well in SA. So, one possible issue here could be in how
the machines have been moved between forests. Were they re-imaged or just
moved between domains? If the latter, then what you could be experiencing is
some crap (technical term) in the registry from the old domain that
effecting GP processing. I would look under the Policies keys in HKLM and
HKCU for a given user and see if the stuff referenced in there is old or
new. 

Not sure why ADMT would be any different however.

Darren

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Nicolas Blank
Sent: Monday, May 15, 2006 11:26 AM
To: [email protected]
Subject: [ActiveDir] GPO wierdness during forest migration

Hi all
Migrating from one forest into another, one way trust treating the source as
a resource forest.

Migrating using Quest Migration Manager with Sidhistory.

Weird thing is that on the users machine, gpresult gives me source and
target GPO's as applied, however target GPO's are applying inconsistently in
practice - i.e. script firing sometimes.




If I migrate with ADMT, this behavior does not follow.

Anyone ever seen anything like this before?



List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to