Group Policy not applied to machines in domain

[Guest]

I have several machines that are having a issue deploy they GPOs.

The machines are windows XP SP1 and are in a 2000 Domain with 7 DCs with
Vlans for traffic segmentation. students vlan can not connect to the admin
vlan but the admin vlan can talk to the studetns vlan.

All the hardware are onboard including the nic card (SIS 900).

i get the following events logged when a user logs in
*1058 Windows cannot access the file gpt.ini
*5719 No Domain Controller is available
*4201 The system detected that network adapter was connected to the
network, and has initiated normal operation over the network adapter.

Now i wandering if the 5719 event is happening becuase the 4201 event is
happening after the system tries to communicate with the domain controller.

I've updated my bios and drivers for the nic card. but i can't figure out
the problem. but when i log in with a few user everything works fine and
group polices are applied. but for the majority of users (students) it is
applying meaning that a lot of security and configuration settings are not
applied.

i've checked my domain for mismatches of GPOs in servers and found a couple
and was wondering if this could be the issue.
sql.knox.vic.edu.au - schema1.knox.vic.edu.au sysvol mismatch
the schema1 is a server that the students access and was wondering if this
is the issue.

Any help would be appreciated.

 

[Chuck]

I have several machines that are having a issue deploy they GPOs.

The machines are windows XP SP1 and are in a 2000 Domain with 7 DCs with
Vlans for traffic segmentation. students vlan can not connect to the admin
vlan but the admin vlan can talk to the studetns vlan.

All the hardware are onboard including the nic card (SIS 900).

i get the following events logged when a user logs in
*1058 Windows cannot access the file gpt.ini
*5719 No Domain Controller is available
*4201 The system detected that network adapter was connected to the
network, and has initiated normal operation over the network adapter.

Now i wandering if the 5719 event is happening becuase the 4201 event is
happening after the system tries to communicate with the domain controller.

I've updated my bios and drivers for the nic card. but i can't figure out
the problem. but when i log in with a few user everything works fine and
group polices are applied. but for the majority of users (students) it is
applying meaning that a lot of security and configuration settings are not
applied.

i've checked my domain for mismatches of GPOs in servers and found a couple
and was wondering if this could be the issue.
sql.knox.vic.edu.au - schema1.knox.vic.edu.au sysvol mismatch
the schema1 is a server that the students access and was wondering if this
is the issue.

Any help would be appreciated.

Cameron,

This sounds like a DNS issue. Windows XP uses DNS to locate Domain Controllers.

1) Ensure that the XP clients are all configured to use the domain DNS server.
If you're using DHCP on your LAN, the DHCP server should point to the DNS
server.

2) Ensure the domain DNS server is configured to permit dynamic updates. Ensure
the DNS server points to itself as a DNS server.

3) For internet resolution, specify your ISP's DNS server not on the individual
clients, or on the DHCP server, but in the forwarders tab of the DNS server.

The following articles may provide more information:
Frequently Asked Questions About Windows 2000 DNS
http://support.microsoft.com/default.aspx?id=291382
Setting Up the Domain Name System for Active Directory
http://support.microsoft.com/default.aspx?id=237675
HOW TO: Configure DNS for Internet Access in Windows 2000
http://support.microsoft.com/default.aspx?id=300202

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.

 

[Guest]

i've checked the dns and all seems fine, i can nslookup all the academic vlan
servers by host name and the domain by host name.

Out of the 300 odd computers we have this is the only 28 that are having
this issue.

 

[Chuck]

i've checked the dns and all seems fine, i can nslookup all the academic vlan
servers by host name and the domain by host name.

Out of the 300 odd computers we have this is the only 28 that are having
this issue.

Cameron,

OK, it's not DNS but it is multiple computers. What's special about these 28
computers, that makes them different from the 270 odd others (other than this
symptom)?

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.