Makes sense, and thanks for the explanation. But this makes me wonder if the maybe the gp setting, wait for network and startup policy processing, aren't waiting for valid network data, but just a link being established. Anyway, on to the next issue. Glen.
-----Original Message----- From: Phil Brutsche [mailto:[email protected]] Sent: Thursday, October 14, 2010 2:49 PM To: NT System Admin Issues Subject: Re: Group Policy Problems Over Wireless Portfast is a spanning tree feature; it refers to how quickly a switch port will move from the learning state to the forwarding state. Portfast enabled -> plug the cable in, the port is immediately in the forwarding state, but you run the risk of brief ethernet loops. Portfast disabled -> plug the cable in, the switch will listen for 802.1d or 802.1w spanning tree PDUs for either 30 seconds (normal 802.1d spanning trees) or 10 seconds (802.1w rapid spanning trees) before passing traffic. Wireless gear tends to not have such a thing; access points typically do not forward STP PDUs. I'm not saying your problem isn't related, it's that in my environment I ALWAYS have portfast enabled on "edge" (ie end-user station) ports; I am 110% certain that spanning tree configuration was not *my* problem, nor are spanning trees the OP's problem. On 10/14/2010 1:26 PM, Glen Johnson wrote: > I've been fighting a similar problem here and just solved it Although > our connections are wired, we've been seeing some strange GP problems. > Had all the group policy settings, wait for network, startup policy > processing set. Ran dcdiag and several other tests, nothing came up. > Finally found an error in the even log. Unable to establish a secure session > with any domain controllers, error number 5719. > Googled that and MS had a note about enabling portfast on the switch. > Bingo. > Now anyone know of a similar config for wireless that would be similar? -- Phil Brutsche [email protected] ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
