Agreed, XP fast logon optimization used to wreak havoc with it, its extremely network-sensitive
---Blackberried -----Original Message----- From: Steve Kradel <[email protected]> Date: Fri, 10 Aug 2012 18:25:45 To: NT System Admin Issues<[email protected]> Reply-To: "NT System Admin Issues" <[email protected]>Subject: Re: [dkim-failure] Re: [dkim-failure] Re: Problem with computer not getting its security group If Joe's machinepwd is needed, then the machine can't work on the domain at all (e.g., you wouldn't be able to login with a domain account except maybe with cached credentials). I think this one's password is probably in sync, but the network is too pokey to satisfy local GPO processing--so it misses out on its one and only opportunity to install software. --Steve On Fri, Aug 10, 2012 at 6:08 PM, Free, Bob <[email protected]> wrote: > Grumble. Gave up too much of my life to nltest and netdom > > > > Today there is actually a solution that works J > > > > http://www.joeware.net/freetools/tools/machinepwd/ if you just want to fix > it. > > > > http://blog.joeware.net/2012/06/05/2508/ if you want to understand it > verbatim. Another slam-dunk by joe. > > > > > > > > > > > > > > > > From: Rankin, James R [mailto:[email protected]] > > Sent: Friday, August 10, 2012 2:51 PM > To: NT System Admin Issues > Subject: [dkim-failure] Re: [dkim-failure] Re: Problem with computer not > getting its security group > > > > Many moons ago nltest.exe was my primary weapon fighting secure channel > issues...YMMV > > ---Blackberried > > ________________________________ > > From: "Free, Bob" <[email protected]> > > Date: Fri, 10 Aug 2012 21:44:47 +0000 > > To: NT System Admin Issues<[email protected]> > > ReplyTo: "NT System Admin Issues" <[email protected]> > > Subject: RE: [dkim-failure] Re: Problem with computer not getting its > security group > > > > The underlying issue is that some element of the path to authenticate your > computer to the domain (AKA secure channel) is broken. > > > > Everything else is irrelevant until that is fixed. > > > > From: Eric Wittersheim [mailto:[email protected]] > Sent: Friday, August 10, 2012 1:58 PM > > > To: NT System Admin Issues > Subject: [dkim-failure] Re: Problem with computer not getting its security > group > > > > The test group is Push. > > > > The GPO is applied to the OU where the server is located. > > > > The full error is : > > > > his computer was not able to set up a secure session with a domain > controller in domain Domain due to the following: > > There are currently no logon servers available to service the logon request. > > This may lead to authentication problems. Make sure that this computer is > connected to the network. If the problem persists, please contact your > domain administrator. > > > > Event 1053 - Got to be related to the above event > > his computer was not able to set up a secure session with a domain > controller in domain Domain due to the following: > > There are currently no logon servers available to service the logon request. > > This may lead to authentication problems. Make sure that this computer is > connected to the network. If the problem persists, please contact your > domain administrator. > > > > > > > > On Fri, Aug 10, 2012 at 3:37 PM, Ben Scott <[email protected]> wrote: > > On Fri, Aug 10, 2012 at 2:43 PM, Eric Wittersheim > <[email protected]> wrote: >> Windows 2008 domain and I'm trying to apply a software installation policy >> gpo to a security group named "Push" >> >> I remove auth users from the GPO add the Push group. Verified that Push >> has >> read and apply policy to the GPO >> >> I have added a windows 2003 R2 server to the test group and waited for AD >> to >> replicate to all the DCs. > > What is "the test group"? Is that the "Push" security group? > > > > GPOs are not applied to security groups, they're applied to OUs. > Is the server's computer object in Active Directory located under the > OU which is linked to the GPO? > > You need to be more precise in your terminology. The computers > *are* that precise, and if you're not, we won't be able to understand > what the computers are doing. > > >> I have rebooted the 2003 server many times but it is not seeing that it >> should/is a member of the Push group. I am getting this information by >> running gpresult from the 2003 box. >> >> GPresult shows that it is applying the GPO that I created to push the >> software. > > If the server is not a member of the "Push" group, and the "Push" > > > group is the only one which has Apply permission for that GPO, then > the GPO should not be applying. > > >> I am getting a Event ID 5719 when the server boots up saying that it can't >> set up a secure session with the domain controller. > > What's the full text of the error message? This matters, there's > > > important details on causes in there. > > Are there other, related log entries from NETLOGON, SCHANNEL, > UserEnv, etc., around the same time? > > -- Ben > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
