applying settings to clients forcefully

[DD]

Hi,
Have an Win2K domain controler. Configured background picture & screensaver via GP.There are few clients Win2000 & 3 WinXP on which the group policy setings do not apply. i have restarted these clients & domain but the GP configured on Dc do not take effect on these few clients while rest it's working fine.
what could be the issue and how can i apply GP on these clients whenever they login.

 

[myweb]

Hello DD,

In which policy did you configure it? Default domain policy, Default domain
controller policy or did you use an own created? How is DNS configured for
your clients, via DHCP or static? Post an ipconfig /all from your DC/DNS
server and a client.

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

 

[DD]

Hi,
All the clients are configure by DHCP , configured under the default domain policy. i have checked the IP config with the clients on which the group policy is successfully appled with clients on which GP is not applied the IP config | DNS is fine but still some of the clients GP isn't applied.
Hello DD,

In which policy did you configure it? Default domain policy, Default domain
controller policy or did you use an own created? How is DNS configured for
your clients, via DHCP or static? Post an ipconfig /all from your DC/DNS
server and a client.

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

 

[myweb]

Hello DD,

Can you see the DNS records in your Forward lookup zone? Please again post
the ipconfig /all. Also run a gpresult on the ws to compare it with a running
ws.

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

 

[DD]

Hi,
The machines on which GP dosen't apply
C:\>ipconfig/all

Windows IP Configuration

Host Name . . . . . . . . . . . . : itl11
Primary Dns Suffix . . . . . . . : infrasoft.lan
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : infrasoft.lan

Ethernet adapter Local Area Connection 3:

Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Bluetooth LAN Access Server Driver
Physical Address. . . . . . . . . : 00-0E-A1-33-A5-22

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : infrasoft.lan
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Desktop Adapter
Physical Address. . . . . . . . . : 00-07-E9-09-C9-83
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.16
Subnet Mask . . . . . . . . . . . : 255.255.254.0
Default Gateway . . . . . . . . . : 192.168.0.10
DHCP Server . . . . . . . . . . . : 192.168.0.22
DNS Servers . . . . . . . . . . . : 192.168.0.22
Lease Obtained. . . . . . . . . . : Monday, February 05, 2007 11:52:14 AM
Lease Expires . . . . . . . . . . : Thursday, February 08, 2007 11:52:14 AM


C:\>ipconfig/all

Windows IP Configuration

Host Name . . . . . . . . . . . . : itl11
Primary Dns Suffix . . . . . . . : infrasoft.lan
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : infrasoft.lan

Ethernet adapter Local Area Connection 3:

Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Bluetooth LAN Access Server Driver
Physical Address. . . . . . . . . : 00-0E-A1-33-A5-22

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : infrasoft.lan
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Desktop Adapter
Physical Address. . . . . . . . . : 00-07-E9-09-C9-83
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.16
Subnet Mask . . . . . . . . . . . : 255.255.254.0
Default Gateway . . . . . . . . . : 192.168.0.10
DHCP Server . . . . . . . . . . . : 192.168.0.22
DNS Servers . . . . . . . . . . . : 192.168.0.22
Lease Obtained. . . . . . . . . . : Monday, February 05, 2007 11:52:14 AM
Lease Expires . . . . . . . . . . : Thursday, February 08, 2007 11:52:14 AM


The machine on which the GP is applied
C:\>ipconfig/all

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : ITL470
Primary DNS Suffix . . . . . . . : infrasoft.lan
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : infrasoft.lan

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : infrasoft.lan
Description . . . . . . . . . . . : Realtek RTL8139/810x Family Fast Eth
ernet NIC
Physical Address. . . . . . . . . : 00-16-76-99-DF-27
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.140
Subnet Mask . . . . . . . . . . . : 255.255.254.0
Default Gateway . . . . . . . . . : 192.168.0.10
DHCP Server . . . . . . . . . . . : 192.168.0.22
DNS Servers . . . . . . . . . . . : 192.168.0.22
Lease Obtained. . . . . . . . . . : Tuesday, February 06, 2007 8:50:39 A
M
Lease Expires . . . . . . . . . . : Friday, February 09, 2007 8:50:39 AM



C:\>gpresult
Microsoft (R) Windows (R) 2000 Operating System Group Policy Result tool
Copyright (C) Microsoft Corp. 1981-1999


Created on Tuesday, February 06, 2007 at 11:28:36 AM


Operating System Information:

Operating System Type: Professional
Operating System Version: 5.0.2195.Service Pack 4
Terminal Server Mode: Not supported

###############################################################

User Group Policy results for:

CN=Mahendra Patil,OU=Operations,DC=infrasoft,DC=lan

Domain Name: USER-DOMAIN
Domain Type: Windows 2000
Site Name: Default-First-Site-Name

Roaming profile: (None)
Local profile: C:\Documents and Settings\mahendra.patil

The user is a member of the following security groups:

USER-DOMAIN\Domain Users
\Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
\LOCAL
USER-DOMAIN\Rose Full Access Group
USER-DOMAIN\Systems
USER-DOMAIN\operations group
USER-DOMAIN\Security Forum
USER-DOMAIN\Proxy Access Level I
USER-DOMAIN\Abacus Level 2 for Proxy


###############################################################

Last time Group Policy was applied: Tuesday, February 06, 2007 at 10:46:34 AM
Group Policy was applied from: venus.infrasoft.lan


===============================================================


The user received "Registry" settings from these GPOs:

Default Domain Policy


===============================================================
The user received "Internet Explorer Branding" settings from these GPOs:

Default Domain Policy



###############################################################

Computer Group Policy results for:

CN=ITL470,OU=desktops,DC=infrasoft,DC=lan

Domain Name: USER-DOMAIN
Domain Type: Windows 2000
Site Name: Default-First-Site-Name


The computer is a member of the following security groups:

BUILTIN\Administrators
\Everyone
ITL470\Debugger Users
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
USER-DOMAIN\ITL470$
USER-DOMAIN\Domain Computers

###############################################################

Last time Group Policy was applied: Tuesday, February 06, 2007 at 10:46:50 AM
Group Policy was applied from: venus.infrasoft.lan


===============================================================


The computer received "Registry" settings from these GPOs:

Local Group Policy
Default Domain Policy
WSUS for desktops


===============================================================
The computer received "Security" settings from these GPOs:

Local Group Policy
Default Domain Policy
WSUS for desktops


===============================================================
The computer received "EFS recovery" settings from these GPOs:

Local Group Policy
Default Domain Policy


===============================================================
The computer received "Application Management" settings from these GPOs:

Default Domain Policy





--
Darshan Diora
Hello DD,

Can you see the DNS records in your Forward lookup zone? Please again post
the ipconfig /all. Also run a gpresult on the ws to compare it with a running
ws.

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

 

[myweb]

Hello DD,

What's about the DNS entry and the gpresult from itl11?

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

 

[DD]

Hi,
The dns entry is already given through ipconfig/all. getting the dns server entry from dhcp server.
please find in the gpresult & dns i.e ipconfig/all from itll11 as required.

C:\>ipconfig/all

Windows IP Configuration

Host Name . . . . . . . . . . . . : itl11
Primary Dns Suffix . . . . . . . : infrasoft.lan
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : infrasoft.lan
Ethernet adapter Local Area Connection 3:

Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Bluetooth LAN Access Server
Driver
Physical Address. . . . . . . . . : 00-0E-A1-33-A5-22
Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : infrasoft.lan
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Desktop
Adapter
Physical Address. . . . . . . . . : 00-07-E9-09-C9-83
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.16
Subnet Mask . . . . . . . . . . . : 255.255.254.0
Default Gateway . . . . . . . . . : 192.168.0.10
DHCP Server . . . . . . . . . . . : 192.168.0.22
DNS Servers . . . . . . . . . . . : 192.168.0.22
Lease Obtained. . . . . . . . . . : Monday, February 05, 2007
11:52:14 AM
Lease Expires . . . . . . . . . . : Thursday, February 08, 2007
11:52:14 AM
The machine on which the GP is applied
C:\>ipconfig/all
Windows 2000 IP Configuration


C:\>gpresult

Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 2/6/2007 at 1:09:01 PM


RSOP data for USER-DOMAIN\darshan.diora on ITL11 : Logging Mode
----------------------------------------------------------------

OS Type: Microsoft(R) Windows(R) Server 2003, Standard Editi
on
OS Configuration: Member Server
OS Version: 5.2.3790
Terminal Server Mode: Remote Administration
Site Name: Default-First-Site-Name
Roaming Profile:
Local Profile: C:\Documents and Settings\darshan.diora
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
CN=ITL11,OU=desktops,DC=infrasoft,DC=lan
Last time Group Policy was applied: 2/6/2007 at 12:28:39 PM
Group Policy was applied from: venus.infrasoft.lan
Group Policy slow link threshold: 500 kbps
Domain Name: USER-DOMAIN
Domain Type: Windows 2000

Applied Group Policy Objects
-----------------------------
WSUS for desktops
Default Domain Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Local Group Policy
Filtering: Not Applied (Empty)

The computer is a part of the following security groups
-------------------------------------------------------
BUILTIN\Administrators
Everyone
IIS_WPG
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
This Organization
ITL11$
Cert Publishers
Domain Computers


USER SETTINGS
--------------
CN=Darshan Diora,OU=Operations,DC=infrasoft,DC=lan
Last time Group Policy was applied: 2/6/2007 at 12:54:57 PM
Group Policy was applied from: venus.infrasoft.lan
Group Policy slow link threshold: 500 kbps
Domain Name: USER-DOMAIN
Domain Type: Windows 2000

Applied Group Policy Objects
-----------------------------
Default Domain Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Local Group Policy
Filtering: Not Applied (Empty)

The user is a part of the following security groups
---------------------------------------------------
Domain Users
Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
This Organization
LOCAL
Systems
operations group
Dotnet_read
VPN
Security Forum
Proxy Access Level I
Abacus Level 2 for Proxy

--
Darshan Diora
System Administrator
InfrasoftTech India Limited
6th Floor, A Wing, Trade Star Building,
Andheri-Kurla Road, Andheri (E), Mumbai - 400 059. INDIA
Tel: 00 91-22 6649 2222 Fax: 00 91-22 6649 2233
E-mail : (e-mail address removed)
Website: www.infrasofttech.com

About Infrasoft Technologies: Infrasoft Technologies is a dedicated software company for the Banking & Finance Industry. We help creating new business models with our software products, solutions and specialized services. We are an ISO9001 and CMM Level 5 Company having a global foot print with operations in New York, London, Bahrain, and Mumbai.

Notice: This correspondence may contain some privileged information. If you are not the intended recipient of this email (including attachments if any) and have received the same in error: 1) Please do not retain any printed copy of this correspondence, 2) Kindly delete the same from all your computers and 3) Please intimate us. We cannot be held responsible in any manner for
Hello DD,

What's about the DNS entry and the gpresult from itl11?

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

 

[myweb]

Hello DD,

The RSOP output states windows 2003 as member server. How is Darshan.diora
working. From the workstation with RDP to the member server? Is the member
server configured for terminal services?

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

 

[DD]

Hi,
Yes it's member server of the infrasoft.lan domain and i am not using any terminal services of that machine, nor it's configured as terminal server.
--
Darshan Diora

Hello DD,

The RSOP output states windows 2003 as member server. How is Darshan.diora
working. From the workstation with RDP to the member server? Is the member
server configured for terminal services?

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

 

[myweb]

Hello DD,

So you log in to the domain with the 2003 server standard edition? It's not
so easy to understand your network. Can you describe it a littlebit more
in detail? How many DC, DNS server, are they all connected in one physical
location, via switches?

Again:
Please post an ipconfig /all from your DNS server and 2000 Domain controller.

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

 

[DD]

Hi,
I have win 2000 domain controller & itl11 is just like a normal desktop machine but installed win 2003 server to join the Win 2000 domain controller & all the IP' s & DNs assigned from the Domain controller which is infrasoft.lan(VENUS)ip is 192.168.0.22 which is displayed in the result when typed ipconfig/all

--
Darshan Diora
Hello DD,

So you log in to the domain with the 2003 server standard edition? It's not
so easy to understand your network. Can you describe it a littlebit more
in detail? How many DC, DNS server, are they all connected in one physical
location, via switches?

Again:
Please post an ipconfig /all from your DNS server and 2000 Domain controller.

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.