GPO not applied...

[Cary Shultz]

-----Original Message-----
Hi,

I'm trying to install sp4 on w2k pro boxes, but it seems
that the machines are unable to enumerate installable
applications...

I receive a 401 error in the eventlog, stating: failed to
link to Active Directory to enumerate applications, error
code 800704bc.
Original error:
"Échec de la liaison à Active Directory pour énumérer les
applications, code d'erreur 800704bc."

The following eventlog entry is error code 108, stating
that specified domain name format is invalid...

Permissions are ok since some machines are able to update.

Any clue?
.

Bon jour, Yannick!

I think that I might have an answer for you. here is how
I install the latest SP via Group Policy:

1) create a folder on the Distribution Server - call it
WIN2KSP4
2) share that folder as WIN2KSP4$ and give both share and
NTFS permissions as follows: Domain Admins-FC; Domain
Computers-Read
3) create an OU called PCs and then create a sub-OU called
WIN2000 ( and, naturally another sub-OU called WINXP - but
this does not apply to this post ).
4) right click the WIN2000 sub-OU, select Properties and
create the GPO. You M U S T assign this to the computer
configuration side and you M U S T use the UNC to the
update.msi file and not a Mapped Network Drive ( so, the
path to the update.msi file would be \\distiserver\win2ksp4
$\update.msi and NOT f:\software\ServicePacks\win2000\sp4
\blah\blah\update.msi )
Put the computer accounts into the sub-OU called WIN2000
and then reboot the computers in question.

Do not forget to give it a bit oftime to propagate. If
you create the GPO and then immediately reboot a computer
it might not work...patience!

Is this similar to what you did?

Let us know...

Cary

 

[Yannick Lepage]

Yep... only the OU names have changed...

As I said, some pc are updating while other don't...
That's why I'm sure the network share is available.

Thanks for the effort anyway.

Yannick

 

[Cary Shultz]

-----Original Message-----
Yep... only the OU names have changed...

As I said, some pc are updating while other don't...
That's why I'm sure the network share is available.

Thanks for the effort anyway.

Yannick

Okay,

Just wanted to make sure that it was not "user error" on
the part of the admin ( Lord knows that has been the case
with me a few times! ).

I took a look at www.eventid.net. Take a look at these
two links:

http://www.eventid.net/display.asp?eventid=401&source=
http://www.eventid.net/display.asp?eventid=108&source=

401 does not seem to help. However, 108 might just have a
MS KB ARticle that does:

http://support.microsoft.com/default.aspx?scid=kb;
[LN];278472

But, that refers to the 'source' not being available to
the system - you seem certain that the source is.

I am sure that you have done this already - can you map a
network drive to the shared folder ( aka 'source' ) from
any of the machines where the GPO is failing? Have you
done an ipconfig /all on those machines to see if there is
something "different"...Again, I am sure that you have
done this...just asking to make sure.

I would usually say that DNS has its fingers in here as
well....All of your WIN2000/WINXP clients point to their
internal DNS Servers and not to the ISP? I assume that
you have it set up correctly but just checking.

HTH

Cary