Site Link Disabled???

[John]

When I run the GPM results wizard (Win2K domain) against computers on
our network, the link to the site that they are located in is showing up
as a Disabled Link - (note: the lines would wrap so the Name, Location &
Reason are shown on seperate lines).

Denied GPOs

Name
Link Location
Reason Denied

Local Group Policy
Local
Empty

{FF619378-2F32-4697-B4E4-E8361E706F62}
domain.local/Configuration/Sites/Site1
Disabled Link

{60676BD1-726A-4C5C-B306-8C11BAE66E38}
domain.local
Disabled Link

I looked in AD Sites and Services, and the sites (3), subnets (3) and
Inter-site Transport (IP) are defined and not disabled. Where do I look
next?

Thanks.

John

 

[Darren Mar-Elia \(MVP\)]

John-
How about in GPMC when you expand the Sites container on the forest. Do you
see the GPOs linked to those Sites as enabled or disabled?

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
Check out http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related
And, the Windows Group Policy Guide is out from Microsoft Press!!! Check it
out at http://www.microsoft.com/mspress/books/8763.asp
GPOGUY Blog: http://blogs.dirteam.com/blogs/gpoguy

 

[John]

When I expand the Sites container, there are NO GPOs shown as being
linked. The list is empty. Seems odd that the network would have been
setup with sites (good idea) but then not linked them to anything...

John

 

[Darren Mar-Elia \(MVP\)]

If GPMC is showing the link as disabled but then you don't see any GPOs
linked to any sites, then something is very wrong. I'm wondering if maybe
there are some AD-replication issues such that the client that is showing a
disabled link in its GP Results report is get old information from that DC.
Ordinarily, site-linked GPOs seem to be pretty rare so I would not be
surprised that you have no GPOs linked to your sites, but the fact that GP
Results showed a disabled link as the reason that the GPO is not being
processed is definitely not right.

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
Check out http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related
And, the Windows Group Policy Guide is out from Microsoft Press!!! Check it
out at http://www.microsoft.com/mspress/books/8763.asp
GPOGUY Blog: http://blogs.dirteam.com/blogs/gpoguy

 

[John]

I have noticed odd (bad) GPO behavior but have not been able to track it
down. For instance, I have a GPO defined to publish applications. I'll
randomly pick clients and it will be working, then the next day I'll
look and the clients say that there are no apps available. Similar
issues with the GPOs for SUS/WSUS where clients didn't seem to
communicate with the SUS/WSUS servers consistently. I ended up modifying
the registry on the clients.

I ran gpotool.exe /dc:dc /verbose. It reported that the 15 GPO's were
all OK. I've run dcdiag also, and there's nothing to note in it's
results. I've looked at DNS/WINS, but they also appear to be fine.

I have (2) sites with (2) DC/GC's in each. I checked a couple of the
servers event logs, and outside of perlib errors (1008) related to
ASP.NET 2.0, they look OK.

I'll try forcing a client to update GPO's and then run the gpo result
wizard against it to see if I still get the disabled link errors.

Any other thoughts? Appreciate the help!

John