Event ID 1054 - occurs when not using VPN, what port do GPOs pass through?

[Bob B]

I've reviewed the numerous posts that have been entered here for Event
ID 1054.
I believe my issue is a firewall issue.

Currently...
1) DNS is correctly configured on clients.
2) Windows 2000, no gig NIC
3) Domain servers can be contacted - either by mapping a drive or
using them for DNS. No DNS issues are present in contacting the domain
servers themselves, just the GPOs do not apply and the error occurs.

The campus I work at has two main networks - a hospital one and a
university one. I am on the hospital one. Everything was fine before
the Blaster worm erupted. Since then the routers have had rules added
to them and now our policies (on the hospital network) do not apply.
On the university network there are no problems with the GPOs.

When attempting to retrieve GPOs from the hospital network the Error
1054 occurs, however if I select and use a VPN at logon, no Error
1054.

I'm curious as to what potential firewall rule could be causing this.
Is there a certain TCP/UDP port that the GPOs communicate through?
Thanks, Bob

 

[stevta [MSFT]]

Use userenv debug logging to see more detailed information on GPO's.


Key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
NT\CurrentVersion\Winlogon
Value: UserEnvDebugLevel
Value Type: REG_DWORD

Value Data: 10002 (Hex)

UserEnvDebugLevel can have the following
values:



NONE 0x00000000

NORMAL 0x00000001

VERBOSE 0x00000002

LOGFILE 0x00010000

DEBUGGER 0x00020000


The default value is NORMAL|LOGFILE (0x00010001).

Note To disable logging, select NONE (where the value is 0X00000000).