Group Policy Problems

[M. T]

In short, I can not gain access to my AD so in turn I can
not edit my GP. When I attempt to open my AD MMC I get
this error: "Naming information can not be located
because: The logon attempt failed." Which was
suggested to be edited to resolve my AD issues. The only
way I can access my AD is via hyena. And even then I can
dont get to edit my GP. Every time I attempt to I get
this error message: "Group Policy Error"
Failed to open the Group Policy Object. "You may not
have appropriate rights" (yet I am logged in with DC
Admin account) "The specified domain either does not
exist or could not be contacted"

Via Hyena I can create a user but not assign a password.
This new user can even join the domain. But when I
attempt to set a passwd, I get this error
message : "error setting password for 'username' on
LDAP://DBA-
SERVER/CN=username,CN=Users,DC=saminco,DC=local. The
network path was not found."

When I attempt to create a new GP I get this
error: "Unable to create new policy 'LDAP://DBA-
SERVER/DC=saminco,DC=local'. the network path was not
found."


Any suggestions would be GREAT!!!

Thank You Kindly!

 

[Danny Sanders]

this error: "Naming information can not be located

This is usually because of a bad DNS set up. AD MUST have a DNS server for
the AD domain. You can not use your ISP's DNS servers like NT 4.0 days.

Basically you need to install DNS on your DC, point your DNS server to
itself for DNS (in the properties of TCP/IP) Point all AD clients to your AD
DNS server only. Then for Internet access configure your AD DNS server to
forward requests and list your ISP's DNS server as the forwarders.
See:
How to: Configure DNS for Internet Access In Windows 2000

http://support.microsoft.com/default.aspx?scid=kb;en-us;300202

Setting Up the Domain Name System for Active Directory

http://support.microsoft.com/default.aspx?scid=kb;en-us;237675





hth
DDS W 2k MVP MCSE