Adding XP group policy to W2K

[MVM]

We are using group policy with Windows 2000 Server and I would like to add
the policies for Windows XP. I followed the directions from KB307900. But
when I attempt to add a Group Policy on a Windows XP SP1 machine I get an
error mesage: Failed to Open the Group Policy Object. You may not have
appropriate rights. Details: The network path was not found. The XP machine
is part of the domain, and I am using a login with Domain Admin rights. The
group policy objects have security to allow full control to the Domain Admin
group.

When I attempt to add Group Policy to the MMC from a Windows 2000 Pro
machine using the same domain login and password I am able to access the
domain group policy. I have verified that my domain controllers have File
and Printer sharing enabled, WINS, DNS are both working correctly.

Do you know what would not allow an XP machine to access my group policy
objects? Since it is SP1 I don't have the Windows Firewall running.
Thanks,
MVM

 

[lforbes]

We are using group policy with Windows 2000 Server and I would
like to add
the policies for Windows XP. I followed the directions from
KB307900. But
when I attempt to add a Group Policy on a Windows XP SP1
machine I get an
error mesage: Failed to Open the Group Policy Object. You may
not have
appropriate rights. Details: The network path was not found.
The XP machine
is part of the domain, and I am using a login with Domain
Admin rights. The
group policy objects have security to allow full control to
the Domain Admin
group.

When I attempt to add Group Policy to the MMC from a Windows
2000 Pro
machine using the same domain login and password I am able to
access the
domain group policy. I have verified that my domain
controllers have File
and Printer sharing enabled, WINS, DNS are both working
correctly.

Do you know what would not allow an XP machine to access my
group policy
objects? Since it is SP1 I don't have the Windows Firewall
running.
Thanks,
MVM

Hi,

First of all if you want the XP Policies, it is best to do it
manually. Go to an XP machine in the C:\Windows\inf folder and copy
all the .adm files to a server share.

Go to ALL the DC’s and copy the above .adm files to the C:\Windows
(or WINNT)\INF directories on ALL DC’s and any machines that you run
adminpak.msi on (eg workstations that are used to administer AD).

This will give you a whole bunch of new Group Policies that will now
let you make XP specific settings to. Open Group Policy as normal on
any of the DC’s and you will see the new policies. They have 2000 and
XP policies in them.

If you want to administer a Windows 2000 DC FROM an XP Workstation you
need to get the adminpak.msi to do this. It used to be on MS website
but now all I can see are adminpak.msi to administer Windows 2003 from
XP but not Windows 2000 from XP.

Cheers,

Lara

 

[Bruce Sanderson]

The symptom you describe (The network path was not found) tends to indicate
that the Windows XP computer can not resolve the name of the domain
controller to an IP address, can not communicate with the domain controller
for some reason or that the Domain's SYSVOL share can not be located. I've
observed similar symptoms even when you can logon to the XP computer with a
Domain user account, access other resources in the Domain etc.

Check the System Event Log for Errors or Warnings relating to Domain
functions and also the Application Event Log for possible errors,
particularly any from Userenv.

A possible fix for these problems is to remove the XP computer from the
Domain, reset its account, then join the computer to the Domain again.
Before remove the computer from the Domain, make sure you can logon to it
using a local administrator account or you may have to reinstall Windows XP!

You can also copy the .adm files to the %windir%\inf folder on a Windows
2000 computer. The Windows XP version of the Microsoft supplied .adm files
can be downloaded from
http://www.microsoft.com/downloads/...4B-7112-4B6C-AD4A-BBF3802A5C9B&displaylang=en.

But, be aware of the information in these KB articles:
http://support.microsoft.com/default.aspx?kbid=842933
http://support.microsoft.com/kb/873449

 

[MVM]

Thanks to both for your help. I used your recommendations and that fixed my
issue.