GP not appling to single client and GP core failure

[Guest]

On a SBS 2003 Sp1 all clients XP SP2 with latest Hot fixes.
I have one client that refuses to except GP updates and gpresults indicate
the client is experiencing GP core failure.
I tried everything from deleting it from the domain and reentering back into
the domain. etc.
Can any one help me with this issue?

Daniel

 

[Steven L Umbach]

Are there any events in the application log that contain any pertinent info
or anything else indicating major problems. Can the domain controller be
pinged by name an IP address from the computer? -- Steve

 

[Guest]

Steve,

There is no indication at all the GPO failed. I just got done
disconnecting the computer from the domain and deleting (A) record from dns.
Shutting down the computer for over 30 min. disconnecting from the wall.
Setting to computer to
the local workgroup. start up so everything looks and feel like it is in a
workgroup.
turned it off. Reconnected it to the wall and then start adding it in to the
domain
again. Oh, I did do a ipconfig /flushdns and ipconfig /registerdns.
Everything is the same the GP core failed and the gp are denied..

Please help me
Daniel

 

[Steven L Umbach]

Can you post the summary of running gpresult in reply here?? Also run the
support tool netdiag on that computer and post those results if you can. Run
both tests while the computer is a member of the domain and while logged on
as a domain user. Could you ping the domain controller by name and IP and
where there any error/warnings in the application log that may look related
particularly for userenv?? I would also check the permissions on the
Windows\system32\group policy folder and subfolders/files and compare to a
computer that is not having the problem. Can you logon to the computer as a
local administrator and open and edit local Group Policy via gpedit.msc for
both user and computer configuration and also open and edit Local Security
Policy via secpol.msc?? --- Steve

 

[Guest]

Steve,

Here is th GP results:

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 7/6/2006 at 2:34:56 PM



RSOP results for Domain\UName on client-Name : Logging Mode
-----------------------------------------------------------

OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name: DN
Domain Type: Windows 2000
Site Name: Default-First-Site-Name
Roaming Profile:
Local Profile: C:\Documents and Settings\UserName
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
CN=CompName,OU=Computers,OU=MyBusiness,DC=DN,DC=AB
Last time Group Policy was applied: 7/6/2006 at 1:20:24 PM
Group Policy was applied from: ServerName.Domain
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
Small Business Server Windows Firewall
Small Business Server Client Computer
Small Business Server Remote Assistance Policy
XP Services Firewall
Default Domain Policy
OfficeInstall
Default Domain Policy
XP SP2 Security
Small Business Server Lockout Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Local Group Policy
Filtering: Not Applied (Empty)

The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Name
Everyone
BUILTIN\UName
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
ComputerName$
Domain Computers
CERTSVC_DCOM_ACCESS


USER SETTINGS
--------------
CN=UserName,OU=SBSU,OU=Users,OU=MyBusiness,DC=Domain,DC=AB
Last time Group Policy was applied: 7/6/2006 at 1:24:39 PM
Group Policy was applied from: ServerName.Domain
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
Default Domain Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Remote Assistance Policy
Filtering: Not Applied (Empty)

Small Business Server Client Computer
Filtering: Not Applied (Empty)

XP Services Firewall
Filtering: Not Applied (Empty)

Small Business Server Windows Firewall
Filtering: Not Applied (Empty)

Small Business Server Lockout Policy
Filtering: Not Applied (Empty)

Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Local Group Policy
Filtering: Not Applied (Empty)

The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
Support
Administration Staff
CERTSVC_DCOM_ACCESS
Human Staff

Netdiag information
- Computer System ComputerName
AdminPasswordStatus = 1
AutomaticResetBootOption = TRUE
AutomaticResetCapability = TRUE
BootROMSupported = TRUE
BootupState = Normal boot
Caption = ComputerName
ChassisBootupState = 3
CreationClassName = Win32_ComputerSystem
CurrentTimeZone = -240
DaylightInEffect = TRUE
Description = AT/AT COMPATIBLE
Domain = DomainName
DomainRole = 1
EnableDaylightSavingsTime = TRUE
FrontPanelResetStatus = 2
InfraredSupported = FALSE
KeyboardPasswordStatus = 2
Manufacturer = Dell Computer Corporation
Model = OptiPlex GX260
Name = ComputerName
NetworkServerModeEnabled = TRUE
NumberOfProcessors = 1
OEMStringArray = www.dell.com
PartOfDomain = TRUE
PauseAfterReset = -1
PowerOnPasswordStatus = 1
PowerState = 0
PowerSupplyState = 3
PrimaryOwnerName = Agency Name
ResetCapability = 1
ResetCount = -1
ResetLimit = -1
- Roles
LM_Workstation
LM_Server
Print
NT
Potential_Browser
Status = OK
SystemStartupDelay = 30
SystemStartupOptions = "Microsoft Windows XP Professional" /fastdetect
/NoExecute=OptIn
SystemStartupSetting = 0
SystemType = X86-based PC
ThermalState = 3
TotalPhysicalMemory = 266326016
UserName = Domain\UserName
WakeUpType = 6
- Operating System Microsoft Windows XP Professional
BootDevice = \Device\HarddiskVolume1
BuildNumber = 2600
BuildType = Uniprocessor Free
Caption = Microsoft Windows XP Professional
CodeSet = 1252
CountryCode = 1
CreationClassName = Win32_OperatingSystem
CSCreationClassName = Win32_ComputerSystem
CSDVersion = Service Pack 2
CSName = ComputerName
CurrentTimeZone = -240
DataExecutionPrevention_32BitApplications = FALSE
DataExecutionPrevention_Available = FALSE
DataExecutionPrevention_Drivers = FALSE
DataExecutionPrevention_SupportPolicy = 2
Debug = FALSE
Distributed = FALSE
EncryptionLevel = 168
ForegroundApplicationBoost = 2
FreePhysicalMemory = 41032
FreeSpaceInPagingFiles = 224072
FreeVirtualMemory = 2054484
InstallDate = 4:59:13 PM 12/6/2005
LargeSystemCache = 0
LastBootUpTime = 11:49:06 AM 7/6/2006
LocalDateTime = 2:47:45 PM 7/6/2006
Locale = 0409
Manufacturer = Microsoft Corporation
MaxNumberOfProcesses = -1
MaxProcessMemorySize = 2097024
Name = Microsoft Windows XP
Professional|C:\WINDOWS|\Device\Harddisk0\Partition1
NumberOfProcesses = 41
NumberOfUsers = 5
Organization = Agency Name
OSLanguage = 1033
OSType = 18
Primary = TRUE
ProductType = 1
QuantumLength = 0
QuantumType = 0
RegisteredUser = Agency Name
SerialNumber = 55274-OEM-0011903-00102
ServicePackMajorVersion = 2
ServicePackMinorVersion = 0
SizeStoredInPagingFiles = 639980
Status = OK
SuiteMask = 272
SystemDevice = \Device\HarddiskVolume1
SystemDirectory = C:\WINDOWS\system32
SystemDrive = C:
TotalVirtualMemorySize = 2097024
TotalVisibleMemorySize = 260084
Version = 5.1.2600
WindowsDirectory = C:\WINDOWS
- Version 5.1.2600
Version = 5.1.2600
BuildVersion = 2600.0000

NetDiag Information/
Modems
- Network Adapters [00000008] Intel(R) PRO/1000 MT Network Connection PASSED
Caption = [00000008] Intel(R) PRO/1000 MT Network Connection
DatabasePath = %SystemRoot%\System32\drivers\etc
- DefaultIPGateway = xxx.xxx.xx.x(Same Subnet) (PASSED)
Pinging xxx.xxx.xx.x with 32 bytes of data:
Reply from xxx.xxx.xx.x1: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Ping statistics for xxx.xxx.xx.x:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss)
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
Description = Intel(R) PRO/1000 MT Network Connection - Packet Scheduler
Miniport
DHCPEnabled = TRUE
DHCPLeaseExpires = 11:49:24 AM 7/9/2006
DHCPLeaseObtained = 11:49:24 AM 7/6/2006
- DHCPServer = xxx.xxx.xx.x (PASSED)
Pinging xxx.xxx.xx.x with 32 bytes of data:
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Ping statistics for xxx.xxx.xx.x:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss)
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
DNSDomain = DomainName
DNSEnabledForWINSResolution = FALSE
DNSHostName = ComputerName
- DNSServerSearchOrder = xxx.xxx.xx.x (PASSED)
Pinging xxx.xxx.xx.x with 32 bytes of data:
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Ping statistics for xxx.xxx.xx.x:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss)
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
DomainDNSRegistrationEnabled = FALSE
FullDNSRegistrationEnabled = TRUE
GatewayCostMetric = 20
Index = 8
- IPAddress = xxx.xxx.xx.x (PASSED)
Pinging xxx.xxx.xx.x with 32 bytes of data:
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Ping statistics for xxx.xxx.xx.x:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss)
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
IPConnectionMetric = 20
IPEnabled = TRUE
IPFilterSecurityEnabled = FALSE
IPSecPermitIPProtocols = 0
IPSecPermitTCPPorts = 0
IPSecPermitUDPPorts = 0
IPSubnet = xxx.xxx.xx.x
IPXEnabled = FALSE
MACAddress = xx:xx:xx:xx:xx:xx
ServiceName = E1000
SettingID = (Guid)
TcpipNetbiosOptions = 0
WINSEnableLMHostsLookup = TRUE
- WINSPrimaryServer = xxx.xxx.xx.x (PASSED)
Pinging xxx.xxx.xx.x with 32 bytes of data:
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Ping statistics for xxx.xxx.xx.x:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss)
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
- Network Clients
- Microsoft Terminal Services
Description = RDPNP
Manufacturer = Microsoft Corporation
Name = Microsoft Terminal Services
Status = Unknown
- Microsoft Windows Network
Caption = Workstation
Description = Creates and maintains client network connections to remote
servers. If this service is stopped, these connections will be unavailable.
If this service is disabled, any services that explicitly depend on it will
fail to start.
Manufacturer = Microsoft Corporation
Name = Microsoft Windows Network
Status = OK
- Web Client Network
Caption = WebClient
Description = Enables Windows-based programs to create, access, and modify
Internet-based files. If this service is stopped, these functions will not be
available. If this service is disabled, any services that explicitly depend
on it will fail to start.
Manufacturer = Microsoft Corporation
Name = Web Client Network
Status = OK

Daniel

 

[Steven L Umbach]

I have never seen netdiag output like that before. I was expecting more like
what is shown below. Anyhow your gpresult seems fine and I see no mention of
"GP core failure" that you originally posted. What I do see is that some
Group Policy settings are not being applied because of filtering or that the
Group Policy is empty meaning that nothing is configured in it for
user/computer configuration. One thing to check is that the user or computer
is in the proper container/Organizational Unit compared to those that are
getting the Group Policy applied as expected. In particular what Group
Policy settings are not being applied to the user or computer and what is
the name of the Group Policy where these settings are defined? After you run
the command gpupdate /force on the problem computer do you then see an Event
1704 in it's application log for SceCli indicating that security/Group
Policy was applied successfully? --- Steve


E:\Documents and Settings\Administrator>netdiag

......................................

Computer Name: SERVER1-2003
DNS Host Name: server1-2003.umbach3.com
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 6 Model 8 Stepping 3, GenuineIntel
List of installed hotfixes :
Q147222


Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'RAS Async Adapter' may not be working because it
has
not received any packets.



Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : server1-2003
IP Address . . . . . . . . : 192.168.1.251
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.1.1
Dns Servers. . . . . . . . : 127.0.0.1
192.168.1.251


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenge
r Service', <20> 'WINS' names is missing.
No remote names have been found.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{71140813-8D5C-4117-B7FE-11D1FBAF9C63}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation
Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'127.0.0.1'.
PASS - All the DNS entries for DC are registered on DNS server
'192.168.1.25
1'.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{71140813-8D5C-4117-B7FE-11D1FBAF9C63}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{71140813-8D5C-4117-B7FE-11D1FBAF9C63}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully

E:\Documents and Settings\Administrator>

Steve,

Here is th GP results:

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool
v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 7/6/2006 at 2:34:56 PM



RSOP results for Domain\UName on client-Name : Logging Mode
-----------------------------------------------------------

OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name: DN
Domain Type: Windows 2000
Site Name: Default-First-Site-Name
Roaming Profile:
Local Profile: C:\Documents and Settings\UserName
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
CN=CompName,OU=Computers,OU=MyBusiness,DC=DN,DC=AB
Last time Group Policy was applied: 7/6/2006 at 1:20:24 PM
Group Policy was applied from: ServerName.Domain
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
Small Business Server Windows Firewall
Small Business Server Client Computer
Small Business Server Remote Assistance Policy
XP Services Firewall
Default Domain Policy
OfficeInstall
Default Domain Policy
XP SP2 Security
Small Business Server Lockout Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Local Group Policy
Filtering: Not Applied (Empty)

The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Name
Everyone
BUILTIN\UName
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
ComputerName$
Domain Computers
CERTSVC_DCOM_ACCESS


USER SETTINGS
--------------
CN=UserName,OU=SBSU,OU=Users,OU=MyBusiness,DC=Domain,DC=AB
Last time Group Policy was applied: 7/6/2006 at 1:24:39 PM
Group Policy was applied from: ServerName.Domain
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
Default Domain Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Remote Assistance Policy
Filtering: Not Applied (Empty)

Small Business Server Client Computer
Filtering: Not Applied (Empty)

XP Services Firewall
Filtering: Not Applied (Empty)

Small Business Server Windows Firewall
Filtering: Not Applied (Empty)

Small Business Server Lockout Policy
Filtering: Not Applied (Empty)

Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Local Group Policy
Filtering: Not Applied (Empty)

The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
Support
Administration Staff
CERTSVC_DCOM_ACCESS
Human Staff

Netdiag information
- Computer System ComputerName
AdminPasswordStatus = 1
AutomaticResetBootOption = TRUE
AutomaticResetCapability = TRUE
BootROMSupported = TRUE
BootupState = Normal boot
Caption = ComputerName
ChassisBootupState = 3
CreationClassName = Win32_ComputerSystem
CurrentTimeZone = -240
DaylightInEffect = TRUE
Description = AT/AT COMPATIBLE
Domain = DomainName
DomainRole = 1
EnableDaylightSavingsTime = TRUE
FrontPanelResetStatus = 2
InfraredSupported = FALSE
KeyboardPasswordStatus = 2
Manufacturer = Dell Computer Corporation
Model = OptiPlex GX260
Name = ComputerName
NetworkServerModeEnabled = TRUE
NumberOfProcessors = 1
OEMStringArray = www.dell.com
PartOfDomain = TRUE
PauseAfterReset = -1
PowerOnPasswordStatus = 1
PowerState = 0
PowerSupplyState = 3
PrimaryOwnerName = Agency Name
ResetCapability = 1
ResetCount = -1
ResetLimit = -1
- Roles
LM_Workstation
LM_Server
Print
NT
Potential_Browser
Status = OK
SystemStartupDelay = 30
SystemStartupOptions = "Microsoft Windows XP Professional" /fastdetect
/NoExecute=OptIn
SystemStartupSetting = 0
SystemType = X86-based PC
ThermalState = 3
TotalPhysicalMemory = 266326016
UserName = Domain\UserName
WakeUpType = 6
- Operating System Microsoft Windows XP Professional
BootDevice = \Device\HarddiskVolume1
BuildNumber = 2600
BuildType = Uniprocessor Free
Caption = Microsoft Windows XP Professional
CodeSet = 1252
CountryCode = 1
CreationClassName = Win32_OperatingSystem
CSCreationClassName = Win32_ComputerSystem
CSDVersion = Service Pack 2
CSName = ComputerName
CurrentTimeZone = -240
DataExecutionPrevention_32BitApplications = FALSE
DataExecutionPrevention_Available = FALSE
DataExecutionPrevention_Drivers = FALSE
DataExecutionPrevention_SupportPolicy = 2
Debug = FALSE
Distributed = FALSE
EncryptionLevel = 168
ForegroundApplicationBoost = 2
FreePhysicalMemory = 41032
FreeSpaceInPagingFiles = 224072
FreeVirtualMemory = 2054484
InstallDate = 4:59:13 PM 12/6/2005
LargeSystemCache = 0
LastBootUpTime = 11:49:06 AM 7/6/2006
LocalDateTime = 2:47:45 PM 7/6/2006
Locale = 0409
Manufacturer = Microsoft Corporation
MaxNumberOfProcesses = -1
MaxProcessMemorySize = 2097024
Name = Microsoft Windows XP
Professional|C:\WINDOWS|\Device\Harddisk0\Partition1
NumberOfProcesses = 41
NumberOfUsers = 5
Organization = Agency Name
OSLanguage = 1033
OSType = 18
Primary = TRUE
ProductType = 1
QuantumLength = 0
QuantumType = 0
RegisteredUser = Agency Name
SerialNumber = 55274-OEM-0011903-00102
ServicePackMajorVersion = 2
ServicePackMinorVersion = 0
SizeStoredInPagingFiles = 639980
Status = OK
SuiteMask = 272
SystemDevice = \Device\HarddiskVolume1
SystemDirectory = C:\WINDOWS\system32
SystemDrive = C:
TotalVirtualMemorySize = 2097024
TotalVisibleMemorySize = 260084
Version = 5.1.2600
WindowsDirectory = C:\WINDOWS
- Version 5.1.2600
Version = 5.1.2600
BuildVersion = 2600.0000

NetDiag Information/
Modems
- Network Adapters [00000008] Intel(R) PRO/1000 MT Network Connection
PASSED
Caption = [00000008] Intel(R) PRO/1000 MT Network Connection
DatabasePath = %SystemRoot%\System32\drivers\etc
- DefaultIPGateway = xxx.xxx.xx.x(Same Subnet) (PASSED)
Pinging xxx.xxx.xx.x with 32 bytes of data:
Reply from xxx.xxx.xx.x1: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Ping statistics for xxx.xxx.xx.x:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss)
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
Description = Intel(R) PRO/1000 MT Network Connection - Packet Scheduler
Miniport
DHCPEnabled = TRUE
DHCPLeaseExpires = 11:49:24 AM 7/9/2006
DHCPLeaseObtained = 11:49:24 AM 7/6/2006
- DHCPServer = xxx.xxx.xx.x (PASSED)
Pinging xxx.xxx.xx.x with 32 bytes of data:
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Ping statistics for xxx.xxx.xx.x:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss)
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
DNSDomain = DomainName
DNSEnabledForWINSResolution = FALSE
DNSHostName = ComputerName
- DNSServerSearchOrder = xxx.xxx.xx.x (PASSED)
Pinging xxx.xxx.xx.x with 32 bytes of data:
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Ping statistics for xxx.xxx.xx.x:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss)
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
DomainDNSRegistrationEnabled = FALSE
FullDNSRegistrationEnabled = TRUE
GatewayCostMetric = 20
Index = 8
- IPAddress = xxx.xxx.xx.x (PASSED)
Pinging xxx.xxx.xx.x with 32 bytes of data:
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Ping statistics for xxx.xxx.xx.x:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss)
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
IPConnectionMetric = 20
IPEnabled = TRUE
IPFilterSecurityEnabled = FALSE
IPSecPermitIPProtocols = 0
IPSecPermitTCPPorts = 0
IPSecPermitUDPPorts = 0
IPSubnet = xxx.xxx.xx.x
IPXEnabled = FALSE
MACAddress = xx:xx:xx:xx:xx:xx
ServiceName = E1000
SettingID = (Guid)
TcpipNetbiosOptions = 0
WINSEnableLMHostsLookup = TRUE
- WINSPrimaryServer = xxx.xxx.xx.x (PASSED)
Pinging xxx.xxx.xx.x with 32 bytes of data:
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Reply from xxx.xxx.xx.x: bytes=32 time<1ms TTL=0
Ping statistics for xxx.xxx.xx.x:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss)
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
- Network Clients
- Microsoft Terminal Services
Description = RDPNP
Manufacturer = Microsoft Corporation
Name = Microsoft Terminal Services
Status = Unknown
- Microsoft Windows Network
Caption = Workstation
Description = Creates and maintains client network connections to remote
servers. If this service is stopped, these connections will be
unavailable.
If this service is disabled, any services that explicitly depend on it
will
fail to start.
Manufacturer = Microsoft Corporation
Name = Microsoft Windows Network
Status = OK
- Web Client Network
Caption = WebClient
Description = Enables Windows-based programs to create, access, and
modify
Internet-based files. If this service is stopped, these functions will not
be
available. If this service is disabled, any services that explicitly
depend
on it will fail to start.
Manufacturer = Microsoft Corporation
Name = Web Client Network
Status = OK

Daniel

Can you post the summary of running gpresult in reply here?? Also run the
support tool netdiag on that computer and post those results if you can.
Run
both tests while the computer is a member of the domain and while logged
on
as a domain user. Could you ping the domain controller by name and IP and
where there any error/warnings in the application log that may look
related
particularly for userenv?? I would also check the permissions on the
Windows\system32\group policy folder and subfolders/files and compare to
a
computer that is not having the problem. Can you logon to the computer as
a
local administrator and open and edit local Group Policy via gpedit.msc
for
both user and computer configuration and also open and edit Local
Security
Policy via secpol.msc?? --- Steve

 

[Guest]

Steve,

The gp failure happens when I enter the client go into the GP results
then select
the gp that failed and it shows that error. I wish I could show that page,
but the computer is in use right now.

Daniel

I have never seen netdiag output like that before. I was expecting more like
what is shown below. Anyhow your gpresult seems fine and I see no mention of
"GP core failure" that you originally posted. What I do see is that some
Group Policy settings are not being applied because of filtering or that the
Group Policy is empty meaning that nothing is configured in it for
user/computer configuration. One thing to check is that the user or computer
is in the proper container/Organizational Unit compared to those that are
getting the Group Policy applied as expected. In particular what Group
Policy settings are not being applied to the user or computer and what is
the name of the Group Policy where these settings are defined? After you run
the command gpupdate /force on the problem computer do you then see an Event
1704 in it's application log for SceCli indicating that security/Group
Policy was applied successfully? --- Steve


E:\Documents and Settings\Administrator>netdiag

......................................

Computer Name: SERVER1-2003
DNS Host Name: server1-2003.umbach3.com
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 6 Model 8 Stepping 3, GenuineIntel
List of installed hotfixes :
Q147222


Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'RAS Async Adapter' may not be working because it
has
not received any packets.



Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : server1-2003
IP Address . . . . . . . . : 192.168.1.251
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.1.1
Dns Servers. . . . . . . . : 127.0.0.1
192.168.1.251


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenge
r Service', <20> 'WINS' names is missing.
No remote names have been found.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{71140813-8D5C-4117-B7FE-11D1FBAF9C63}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation
Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'127.0.0.1'.
PASS - All the DNS entries for DC are registered on DNS server
'192.168.1.25
1'.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{71140813-8D5C-4117-B7FE-11D1FBAF9C63}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{71140813-8D5C-4117-B7FE-11D1FBAF9C63}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully

E:\Documents and Settings\Administrator>

Steve,

Here is th GP results:

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool
v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 7/6/2006 at 2:34:56 PM



RSOP results for Domain\UName on client-Name : Logging Mode
-----------------------------------------------------------

OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name: DN
Domain Type: Windows 2000
Site Name: Default-First-Site-Name
Roaming Profile:
Local Profile: C:\Documents and Settings\UserName
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
CN=CompName,OU=Computers,OU=MyBusiness,DC=DN,DC=AB
Last time Group Policy was applied: 7/6/2006 at 1:20:24 PM
Group Policy was applied from: ServerName.Domain
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
Small Business Server Windows Firewall
Small Business Server Client Computer
Small Business Server Remote Assistance Policy
XP Services Firewall
Default Domain Policy
OfficeInstall
Default Domain Policy
XP SP2 Security
Small Business Server Lockout Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Local Group Policy
Filtering: Not Applied (Empty)

The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Name
Everyone
BUILTIN\UName
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
ComputerName$
Domain Computers
CERTSVC_DCOM_ACCESS


USER SETTINGS
--------------
CN=UserName,OU=SBSU,OU=Users,OU=MyBusiness,DC=Domain,DC=AB
Last time Group Policy was applied: 7/6/2006 at 1:24:39 PM
Group Policy was applied from: ServerName.Domain
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
Default Domain Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Remote Assistance Policy
Filtering: Not Applied (Empty)

Small Business Server Client Computer
Filtering: Not Applied (Empty)

XP Services Firewall
Filtering: Not Applied (Empty)

Small Business Server Windows Firewall
Filtering: Not Applied (Empty)

Small Business Server Lockout Policy
Filtering: Not Applied (Empty)

Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Local Group Policy
Filtering: Not Applied (Empty)

The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
Support
Administration Staff
CERTSVC_DCOM_ACCESS
Human Staff

Netdiag information
- Computer System ComputerName
AdminPasswordStatus = 1
AutomaticResetBootOption = TRUE
AutomaticResetCapability = TRUE
BootROMSupported = TRUE
BootupState = Normal boot
Caption = ComputerName
ChassisBootupState = 3
CreationClassName = Win32_ComputerSystem
CurrentTimeZone = -240
DaylightInEffect = TRUE
Description = AT/AT COMPATIBLE
Domain = DomainName
DomainRole = 1
EnableDaylightSavingsTime = TRUE
FrontPanelResetStatus = 2
InfraredSupported = FALSE
KeyboardPasswordStatus = 2
Manufacturer = Dell Computer Corporation
Model = OptiPlex GX260
Name = ComputerName
NetworkServerModeEnabled = TRUE
NumberOfProcessors = 1
OEMStringArray = www.dell.com
PartOfDomain = TRUE
PauseAfterReset = -1
PowerOnPasswordStatus = 1
PowerState = 0
PowerSupplyState = 3
PrimaryOwnerName = Agency Name
ResetCapability = 1
ResetCount = -1
ResetLimit = -1
- Roles
LM_Workstation
LM_Server
Print
NT

 

[Steven L Umbach]

When you get a chance run gpresult directly on that computer and the support
tool netdiag. Support tools are found on the install disk in the
support/tools folder or can be downloaded from Microsoft. Also see if an
event 1704 is generated in the application log of that computer after
running gpupdate /force on it and see if you can use gpedit.msc and
secpol.msc on it to open/edit local Group Policy and Local Security Policy.
We want to try and narrow down if it is a networking/domain related issue or
related to file corruption or other problem on that computer's operating
system. --- Steve

Steve,

The gp failure happens when I enter the client go into the GP results
then select
the gp that failed and it shows that error. I wish I could show that page,
but the computer is in use right now.

Daniel

I have never seen netdiag output like that before. I was expecting more
like
what is shown below. Anyhow your gpresult seems fine and I see no mention
of
"GP core failure" that you originally posted. What I do see is that some
Group Policy settings are not being applied because of filtering or that
the
Group Policy is empty meaning that nothing is configured in it for
user/computer configuration. One thing to check is that the user or
computer
is in the proper container/Organizational Unit compared to those that are
getting the Group Policy applied as expected. In particular what Group
Policy settings are not being applied to the user or computer and what is
the name of the Group Policy where these settings are defined? After you
run
the command gpupdate /force on the problem computer do you then see an
Event
1704 in it's application log for SceCli indicating that security/Group
Policy was applied successfully? --- Steve


E:\Documents and Settings\Administrator>netdiag

......................................

Computer Name: SERVER1-2003
DNS Host Name: server1-2003.umbach3.com
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 6 Model 8 Stepping 3, GenuineIntel
List of installed hotfixes :
Q147222


Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'RAS Async Adapter' may not be working because
it
has
not received any packets.



Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : server1-2003
IP Address . . . . . . . . : 192.168.1.251
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.1.1
Dns Servers. . . . . . . . : 127.0.0.1
192.168.1.251


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenge
r Service', <20> 'WINS' names is missing.
No remote names have been found.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{71140813-8D5C-4117-B7FE-11D1FBAF9C63}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00>
'WorkStation
Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'127.0.0.1'.
PASS - All the DNS entries for DC are registered on DNS server
'192.168.1.25
1'.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{71140813-8D5C-4117-B7FE-11D1FBAF9C63}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{71140813-8D5C-4117-B7FE-11D1FBAF9C63}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully

E:\Documents and Settings\Administrator>

Steve,

Here is th GP results:

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool
v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 7/6/2006 at 2:34:56 PM



RSOP results for Domain\UName on client-Name : Logging Mode
-----------------------------------------------------------

OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name: DN
Domain Type: Windows 2000
Site Name: Default-First-Site-Name
Roaming Profile:
Local Profile: C:\Documents and Settings\UserName
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
CN=CompName,OU=Computers,OU=MyBusiness,DC=DN,DC=AB
Last time Group Policy was applied: 7/6/2006 at 1:20:24 PM
Group Policy was applied from: ServerName.Domain
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
Small Business Server Windows Firewall
Small Business Server Client Computer
Small Business Server Remote Assistance Policy
XP Services Firewall
Default Domain Policy
OfficeInstall
Default Domain Policy
XP SP2 Security
Small Business Server Lockout Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Local Group Policy
Filtering: Not Applied (Empty)

The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Name
Everyone
BUILTIN\UName
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
ComputerName$
Domain Computers
CERTSVC_DCOM_ACCESS


USER SETTINGS
--------------
CN=UserName,OU=SBSU,OU=Users,OU=MyBusiness,DC=Domain,DC=AB
Last time Group Policy was applied: 7/6/2006 at 1:24:39 PM
Group Policy was applied from: ServerName.Domain
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
Default Domain Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Remote Assistance Policy
Filtering: Not Applied (Empty)

Small Business Server Client Computer
Filtering: Not Applied (Empty)

XP Services Firewall
Filtering: Not Applied (Empty)

Small Business Server Windows Firewall
Filtering: Not Applied (Empty)

Small Business Server Lockout Policy
Filtering: Not Applied (Empty)

Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Local Group Policy
Filtering: Not Applied (Empty)

The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
Support
Administration Staff
CERTSVC_DCOM_ACCESS
Human Staff

Netdiag information
- Computer System ComputerName
AdminPasswordStatus = 1
AutomaticResetBootOption = TRUE
AutomaticResetCapability = TRUE
BootROMSupported = TRUE
BootupState = Normal boot
Caption = ComputerName
ChassisBootupState = 3
CreationClassName = Win32_ComputerSystem
CurrentTimeZone = -240
DaylightInEffect = TRUE
Description = AT/AT COMPATIBLE
Domain = DomainName
DomainRole = 1
EnableDaylightSavingsTime = TRUE
FrontPanelResetStatus = 2
InfraredSupported = FALSE
KeyboardPasswordStatus = 2
Manufacturer = Dell Computer Corporation
Model = OptiPlex GX260
Name = ComputerName
NetworkServerModeEnabled = TRUE
NumberOfProcessors = 1
OEMStringArray = www.dell.com
PartOfDomain = TRUE
PauseAfterReset = -1
PowerOnPasswordStatus = 1
PowerState = 0
PowerSupplyState = 3
PrimaryOwnerName = Agency Name
ResetCapability = 1
ResetCount = -1
ResetLimit = -1
- Roles
LM_Workstation
LM_Server
Print
NT

 

[Guest]

Steven,
I download all the latest tools and the results are as follows. I will be
out of the office for the next two weeks. I will follow up then. In the
application events: I get a 1704, 1807, and I get 2444. Something is still
block the policy from taking effect.
Daniel

Event Type: Information
Event Source: SecurityCenter
Event Category: None
Event ID: 1807
Date: 7/5/2006
Time: 8:56:28 AM
User: N/A
Computer: Computer name
Description:
The Security Center service has been stopped. It was prevented from running
by a software group policy.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Information
Event Source: MSDTC
Event Category: TM
Event ID: 2444
Date: 7/5/2006
Time: 8:56:29 AM
User: N/A
Computer:computer name
Description:
MS DTC started with the following settings:

Security Configuration (OFF = 0 and ON = 1):
Network Administration of Transactions = 0,
Network Clients = 0,
Inbound Distributed Transactions using Native MSDTC Protocol = 0,
Outbound Distributed Transactions using Native MSDTC Protocol = 0,
Transaction Internet Protocol (TIP) = 0,
XA Transactions = 0

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Information
Event Source: SceCli
Event Category: None
Event ID: 1704
Date: 7/5/2006
Time: 10:28:51 AM
User: N/A
Computer: Computer Name
Description:
Security policy in the Group policy objects has been applied successfully.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


The results of gpresult on the computer is:
Microsoft (R) Windows (R) XP Operating System Group Policy Result
tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 7/10/2006 at 4:28:09 PM



RSOP results for Domain\username on usercomputer : Logging Mode
-----------------------------------------------------------

OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name: Domain
Domain Type: Windows 2000
Site Name: Default-First-Site-Name
Roaming Profile:
Local Profile: C:\Documents and Settings\username
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
CN=computername,OU=Computers,OU=MyBusiness,DC=Domain,DC=State
Last time Group Policy was applied: 7/10/2006 at 3:14:48 PM
Group Policy was applied from: Servername.Domain
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
Small Business Server Windows Firewall
Small Business Server Client Computer
Small Business Server Remote Assistance Policy
XP Services Firewall
Default Domain Policy
OfficeInstall
Default Domain Policy
XP SP2 Security
Small Business Server Lockout Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Local Group Policy
Filtering: Not Applied (Empty)

The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Administrators
Everyone
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
Domain Computers
CERTSVC_DCOM_ACCESS


USER SETTINGS
--------------
CN=user Full name,OU=SBSUsers,OU=Users,OU=MyBusiness,DC=Domain,DC=State
Last time Group Policy was applied: 7/10/2006 at 2:51:03 PM
Group Policy was applied from: servername.domain
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
Default Domain Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Remote Assistance Policy
Filtering: Not Applied (Empty)

Small Business Server Client Computer
Filtering: Not Applied (Empty)

XP Services Firewall
Filtering: Not Applied (Empty)

Small Business Server Windows Firewall
Filtering: Not Applied (Empty)

Small Business Server Lockout Policy
Filtering: Not Applied (Empty)

Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Local Group Policy
Filtering: Not Applied (Empty)

The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
Support
Administration Staff
CERTSVC_DCOM_ACCESS
Human Staff

Error in the GPResults:

Monday, July 10, 2006 3:14:55 PM

Software Installation did not complete policy processing because a system
restart is required for the settings to be applied. Group Policy will
attempt to apply the settings the next time the computer is restarted.

"Steven L Umbach" wrote:

When you get a chance run gpresult directly on that computer and the support
tool netdiag. Support tools are found on the install disk in the
support/tools folder or can be downloaded from Microsoft. Also see if an
event 1704 is generated in the application log of that computer after
running gpupdate /force on it and see if you can use gpedit.msc and
secpol.msc on it to open/edit local Group Policy and Local Security Policy.
We want to try and narrow down if it is a networking/domain related issue or
related to file corruption or other problem on that computer's operating
system. --- Steve

Steve,

The gp failure happens when I enter the client go into the GP results
then select
the gp that failed and it shows that error. I wish I could show that page,
but the computer is in use right now.

Daniel

I have never seen netdiag output like that before. I was expecting more
like
what is shown below. Anyhow your gpresult seems fine and I see no mention
of
"GP core failure" that you originally posted. What I do see is that some
Group Policy settings are not being applied because of filtering or that
the
Group Policy is empty meaning that nothing is configured in it for
user/computer configuration. One thing to check is that the user or
computer
is in the proper container/Organizational Unit compared to those that are
getting the Group Policy applied as expected. In particular what Group
Policy settings are not being applied to the user or computer and what is
the name of the Group Policy where these settings are defined? After you
run
the command gpupdate /force on the problem computer do you then see an
Event
1704 in it's application log for SceCli indicating that security/Group
Policy was applied successfully? --- Steve


E:\Documents and Settings\Administrator>netdiag

......................................

Computer Name: SERVER1-2003
DNS Host Name: server1-2003.umbach3.com
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 6 Model 8 Stepping 3, GenuineIntel
List of installed hotfixes :
Q147222


Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'RAS Async Adapter' may not be working because
it
has
not received any packets.



Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : server1-2003
IP Address . . . . . . . . : 192.168.1.251
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.1.1
Dns Servers. . . . . . . . : 127.0.0.1
192.168.1.251


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenge
r Service', <20> 'WINS' names is missing.
No remote names have been found.

WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{71140813-8D5C-4117-B7FE-11D1FBAF9C63}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00>
'WorkStation
Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'127.0.0.1'.
PASS - All the DNS entries for DC are registered on DNS server
'192.168.1.25
1'.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{71140813-8D5C-4117-B7FE-11D1FBAF9C63}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{71140813-8D5C-4117-B7FE-11D1FBAF9C63}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully

E:\Documents and Settings\Administrator>


Steve,

Here is th GP results:

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool
v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 7/6/2006 at 2:34:56 PM



RSOP results for Domain\UName on client-Name : Logging Mode
-----------------------------------------------------------

OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name: DN
Domain Type: Windows 2000
Site Name: Default-First-Site-Name
Roaming Profile:
Local Profile: C:\Documents and Settings\UserName
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
CN=CompName,OU=Computers,OU=MyBusiness,DC=DN,DC=AB
Last time Group Policy was applied: 7/6/2006 at 1:20:24 PM
Group Policy was applied from: ServerName.Domain
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
Small Business Server Windows Firewall
Small Business Server Client Computer
Small Business Server Remote Assistance Policy
XP Services Firewall
Default Domain Policy
OfficeInstall
Default Domain Policy
XP SP2 Security
Small Business Server Lockout Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Local Group Policy
Filtering: Not Applied (Empty)

The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Name
Everyone
BUILTIN\UName
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
ComputerName$
Domain Computers
CERTSVC_DCOM_ACCESS


USER SETTINGS
--------------
CN=UserName,OU=SBSU,OU=Users,OU=MyBusiness,DC=Domain,DC=AB
Last time Group Policy was applied: 7/6/2006 at 1:24:39 PM
Group Policy was applied from: ServerName.Domain
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
Default Domain Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Remote Assistance Policy
Filtering: Not Applied (Empty)

Small Business Server Client Computer
Filtering: Not Applied (Empty)

XP Services Firewall
Filtering: Not Applied (Empty)

Small Business Server Windows Firewall
Filtering: Not Applied (Empty)

Small Business Server Lockout Policy
Filtering: Not Applied (Empty)

Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Local Group Policy
Filtering: Not Applied (Empty)

The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
Support
Administration Staff
CERTSVC_DCOM_ACCESS
Human Staff

Netdiag information
- Computer System ComputerName
AdminPasswordStatus = 1
AutomaticResetBootOption = TRUE
AutomaticResetCapability = TRUE
BootROMSupported = TRUE