Error event 1000 - loopback processing help!

[Guest]

All,

We have just (finally) performed the first step in our
Active Directory migration - I upgraded our WinNT 4.0 PDC
to Win2k sp3 (slipstreamed) and Active Directory. The
upgrade went very well, but I am not getting the
following error(s) in the event logs of a bunch of Win2k
member servers:

Event ID: 1000
Source: Userenv
Description: Windows cannot do loopback processing when
the computer is joined to a downlevel domain or is a
member of a workgroup. Loopback processing will be
disabled.

I have double checked our default domain policy and local
policies on each of the member servers, and loopback
processing is not defined.

I have also checked the reg key:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip
\Parameters
as described in KB article Q257623.

We are still running the domain in mixed mode - I have
one NT 4.0 BDC scheduled to retire next quarter...

Before I move on and continue with implementing our
planned OU structure and GPOs, I would really like to get
my head around this one...

Any help / advice is greatly appreciated!!

Thanks in advance -

David

 

[Adam Arndt]

Some where someone MUST HAVE configured Group Policy loopback processing.
When logged on as a user that experiences the problem run gpresult to view
all group policy objects that are applying to the user and in each group
policy object goto Computer Configuration\Administrative
Templates\System\Group Policy\"User group Policy Loopback processing mode"
it should be configured in ALL instances. (You could also look through the
gpresult to see which policy has the setting configured.)

Adam Arndt

 

[David Levine]

Thanks for the response!

I have taken a look at GPRESULT on one of the member
servers in question, and I am not seeing any policy that
are applying any settings... Here is a GPORESULT (I
changed some of the sensitive stuff):

---BEGIN DUMP---
Microsoft (R) Windows (R) 2000 Operating System Group
Policy Result tool
Copyright (C) Microsoft Corp. 1981-1999

Created on Wednesday, April 28, 2004 at 5:14:18 PM

Operating System Information:

Operating System Type: Server
Operating System Version: 5.0.2195.Service Pack 4
Terminal Server Mode: Remote Administration

##########################################################

User Group Policy results for:

CN=Administrator,CN=Users,DC=subdom,DC=private,DC=com

Domain Name: PRIVATE
Domain Type: Windows 2000
Site Name: Default-First-Site-Name

Roaming profile: (None)
Local profile: C:\Documents and
Settings\Administrator.PRIVATE

The user is a member of the following security groups:

PRIVATE\Domain Users
\Everyone
BUILTIN\Users
BUILTIN\Administrators
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
\LOCAL
PRIVATE\Domain Admins
PRIVATE\Schema Admins
PRIVATE\Enterprise Admins
PRIVATE\Group Policy Creator Owners

The user has the following security privileges:

Bypass traverse checking
Remove computer from docking station
Manage auditing and security log
Back up files and directories
Restore files and directories
Change the system time
Shut down the system
Force shutdown from a remote system
Take ownership of files or other objects
Debug programs
Modify firmware environment values
Profile system performance
Profile single process
Increase scheduling priority
Load and unload device drivers
Create a pagefile
Increase quotas
Impersonate a client after authentication
Create global objects


##########################################################

Last time Group Policy was applied: Wednesday, April 28,
2004 at 4:14:48 PM



##########################################################

Computer Group Policy results for:

CN=CORPGVPRT01,CN=Computers,DC=subdom,DC=private,DC=com

Domain Name: PRIVATE
Domain Type: Windows 2000
Site Name: Default-First-Site-Name


The computer is a member of the following security
groups:

BUILTIN\Administrators
\Everyone
NT AUTHORITY\Authenticated Users

##########################################################

Last time Group Policy was applied: Wednesday, April 28,
2004 at 4:01:44 PM


==========================================================


The computer received "Registry" settings from these GPOs:

Local Group Policy
Revision Number: 262148
Unique Name: Local Group Policy
Domain Name:


The following settings were applied from: Local
Group Policy

KeyName:
Software\Policies\Microsoft\SystemCertificates\EFS
ValueName: EFSBlob
ValueType: REG_BINARY
Value: Binary data. Use the /S switch
to display.

KeyName:
Software\Policies\Microsoft\SystemCertificates\EFS
\Certificates\7A10AC73F705F19A09F0976E13CA20D1E2608821
ValueName: Blob
ValueType: REG_BINARY
Value: Binary data. Use the /S switch
to display.

KeyName:
Software\Policies\Microsoft\SystemCertificates\EFS
\CRLs
ValueName:
ValueType: REG_NONE
Value: This key contains no values

KeyName:
Software\Policies\Microsoft\SystemCertificates\EFS
\CTLs
ValueName:
ValueType: REG_NONE
Value: This key contains no values


==========================================================
The computer received "EFS recovery" settings from these
GPOs:

Local Group Policy
Revision Number: 262148
Unique Name: Local Group Policy
Domain Name:


Additional information is not available for this
type of policy setting.
---END DUMP---

As you can see - there is nothing there...

Thanks for your help!

David