voila`.

You have a secure channel problem....

From: Eric Wittersheim [mailto:[email protected]]
Sent: Friday, August 10, 2012 1:17 PM
To: NT System Admin Issues
Subject: [dkim-failure] Re: Problem with computer not getting its security group

2 things are sticking out to me.

1.  The Evend Id t5719, the computer was not able to set up a secure session 
with a domain controller due to the following. There are currently no logon 
server available to service login requests.
2.  The computer is not seeing itself in the security group.
On Fri, Aug 10, 2012 at 3:14 PM, Eric Wittersheim 
<[email protected]<mailto:[email protected]>> wrote:
That is what it is showing.  Computer membership is not listing the Push group. 
 But under Applied GPOs it is listing the GPO that I am trying to apply.

On Fri, Aug 10, 2012 at 2:52 PM, Eric Wittersheim 
<[email protected]<mailto:[email protected]>> wrote:
Adding domain computers didn't work.
On Fri, Aug 10, 2012 at 2:48 PM, Eric Wittersheim 
<[email protected]<mailto:[email protected]>> wrote:
I'll give that a shot.  But do you think that this would block the server from 
seeing that it is a member of the security group?  According to gpresult the 
policy is being applied.

On Fri, Aug 10, 2012 at 2:38 PM, Jonathan Link 
<[email protected]<mailto:[email protected]>> wrote:
It's been a long time since I set this up.  IIRC, the Everyone group just 
doesn't work.  Don't remember why.  You need to give Domain Computers rights to 
the installation point.

On Fri, Aug 10, 2012 at 3:27 PM, Eric Wittersheim 
<[email protected]<mailto:[email protected]>> wrote:
nope, it is on a member server at the 2003 server's site.

On Fri, Aug 10, 2012 at 2:19 PM, Rankin, James R 
<[email protected]<mailto:[email protected]>> wrote:
Is the software hosted on a DC? I had massive problems with installation 
policies in that config
---Blackberried
________________________________
From: Eric Wittersheim 
<[email protected]<mailto:[email protected]>>
Date: Fri, 10 Aug 2012 14:05:58 -0500
To: NT System Admin 
Issues<[email protected]<mailto:[email protected]>>
ReplyTo: "NT System Admin Issues" 
<[email protected]<mailto:[email protected]>>
Subject: Re: Problem with computer not getting its security group

I gave the share everyone full control and NTFS full control for everyone.  I'm 
not getting any errors at all in the event logs saying that there was a error 
during install.
On Fri, Aug 10, 2012 at 1:47 PM, Mayo, Bill 
<[email protected]<mailto:[email protected]>> wrote:
Software Installation policies are computer policies, so you have to make sure 
that the computer account has the ability to read the share where the software 
is.

From: Eric Wittersheim 
[mailto:[email protected]<mailto:[email protected]>]
Sent: Friday, August 10, 2012 2:43 PM
To: NT System Admin Issues
Subject: Problem with computer not getting its security group

Windows 2008 domain and I'm trying to apply a software installation policy gpo 
to a security group named "Push"

I remove auth users from the GPO add the Push group. Verified that Push has 
read and apply policy to the GPO

I have added a windows 2003 R2 server to the test group and waited for AD to 
replicate to all the DCs.

I have rebooted the 2003 server many times but it is not seeing that it 
should/is a member of the Push group.  I am getting this information by running 
gpresult from the 2003 box.

GPresult shows that it is applying the GPO that I created to push the software.
DNS resolution checks out
I have disabled slow link detection just in case but that didn't have any 
effect.
I have removed and rejoined the server from he domain.
Windows Firewall is disabled

When I run the GP results wizard it states that software installation did not 
complete and a restart is required.

I am getting a Event ID 5719 when the server boots up saying that it can't set 
up a secure session with the domain controller.  I have tried adding a policy 
that waits for the network to process policies.

If anyone can point me in the right direction I would be forever in your debt.  
I'm losing hair on this one.  This should be a 5 minute job and done.

Eric



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin


PG&E is committed to protecting our customers' privacy. 
To learn more, please visit http://www.pge.com/about/company/privacy/customer/

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

Reply via email to