PLEASE HELP!! XP GPO Updates!!

[Tim]

Hello!

I have a Win2K Domain w/AD and mostly Win2K and 98
clients. I am now beginning to add XP boxes and for the
life of me cannot get XP to take the GPO's I've set up. I
went through articles KB307900 and 294257 to address the
issue I'm having and it hasn't changed a thing.

When I'm attempting to upgrade the GPO I get an error
message:

*****
Failed to Open the 'GPO': You may not have appropriate
rights.

Details:
The network path was not found.
*****

This only occurs on the XP boxes. I can edit the GPO from
Win2K Pro workstations w/o error. All the rights have
been assigned and I'm going in as the Domain Admin.

I don't have a clue as to what I'm doing wrong. Anyone
else seen this or have a solution?

Thanks!

 

[Derek Melber [MVP]]

Tim,

Are you trying to apply the GPOs or edit them from the XP box when you get
the error below?

Some things to check:
1) DNS on the XP boxes. I know you have checked already, but check again
2) See if you can get ANY GPO to apply by creating a TEST OU, then putting
an XP account in there. do something simple, like altering a user right.
That is easily seen in the Local Security Policy settings.

What errors does the gpresult or Event Viewer give you regarding GPOs?

 

[Tim]

Thanks for the reply.

I'm just trying to get XP to take the GPO. The GPO is set
the way I need it. Just that XP won't take the GPO. With
a couple of past XP boxes I had to go out to the GPO via
the mmc and then simply close it, artc 307900, that took
care of it and the GPO was applied to the box. Not now -
just won't allow an XP box to get to the GPO.

DNS is ok - box is listed and all the settings are applied
via DHCP.

Local Sec Pol is the defaults.

GPResult states something about no RSOP on the machine -
admittedly I don't know a whole lot about the gpresult
tool.

And I've rebooted numerous times.

 

[Derek Melber [MVP]]

Tim,

There are too many variables to be taking stabs at what the issue might be.
Here is what I suggest you do:

1) Use the gpresult tool in verbose mode to see if you can track down which
GPOs it is applying, if any. This will also tell you what groups the system
thinks you are in.
2) Check Event Viewer for SceCli and related events.
3) Check the userenv.log file under the UserMode folder in the Winnt\debug
folder structure.

My guess is one of the following:
1) ADM template version issue
2) GPO filtering issue
3) SYSVOL permission issue
4) DNS issue (most likely not, since you have double checked)

 

[Tim]

Thanks again.

Checked a couple things out and it can't get to the sysvol
share (I can't possibly assign anymore rights to the share
though) it also squawks about not being able to access the
LOCAL gpt.ini file. I did a search and that file doesn't
exsist on the pc - hmm.

Errors 1058 and 1030 keep occurring and the MS article fix
didn't help.

??????

 

[Tim]

What's very odd though is that the machine is accessing
the login scripts in the same \sysvol\domain name\ share
and the login scripts are running just fine.

Weird.

 

[Derek Melber [MVP]]

check out these Microsoft articles:
810907
331519
329170

It is related to XP SP1 and the fact that it hoses you with GPOs. I am
pretty sure these will fix it for you!