Policy mismatch, but I don't see it

[Steve Stormont]

GPOTool reports that we have a policy mismatch, but I don't see it. I
looked at GPT.ini on both servers list this:

[General]
Version=15466574

Below are the relevant lines from GPOTool of the two conflicting
servers. I don't see anything different though.

Steve

============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Error: Version mismatch on apple.omni.imsweb.com, DS=20250702,
sysvol=15466574
Error: Version mismatch on stone.omni.imsweb.com, DS=20250702,
sysvol=15466574
Details:
------------------------------------------------------------
DC: apple.omni.imsweb.com
Friendly name: Default Domain Policy
Created: 1/17/2002 8:58:44 PM
Changed: 10/27/2004 6:56:26 PM
DS version: 309(user) 78(machine)
Sysvol version: 236(user) 78(machine)
Flags: 0
User extensions:
[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4
}][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB960
3F}]
Machine extensions:
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3
}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F8
3A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79
F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{C6DC5466-785A-11D2-84D0-00C04F
B169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: stone.omni.imsweb.com
Friendly name: Default Domain Policy
Created: 1/17/2002 8:58:44 PM
Changed: 10/27/2004 6:59:06 PM
DS version: 309(user) 78(machine)
Sysvol version: 236(user) 78(machine)
Flags: 0
User extensions:
[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4
}][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB960
3F}]
Machine extensions:
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3
}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F8
3A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79
F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{C6DC5466-785A-11D2-84D0-00C04F
B169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
Functionality version: 2

 

[Glenn L]

You should make a benign change to the a user policy to hopefully help the
DS SYSVOL version get up to date with the DS version.
This will bump the DS version number, which should cause the sysvol version
to update settings and follow suite with the version number.

 

[Steve Stormont]

I did. Now the error that I am getting says:

Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Error: apple.omni.imsweb.com - grape.omni.imsweb.com sysvol mismatch

We have 3 domain controllers. The error above is complaining about one
of the controllers from the first error and the third domain controller that
until now hadn't been involved.

Steve

You should make a benign change to the a user policy to hopefully help the
DS SYSVOL version get up to date with the DS version.
This will bump the DS version number, which should cause the sysvol version
to update settings and follow suite with the version number.

GPOTool reports that we have a policy mismatch, but I don't see it. I
looked at GPT.ini on both servers list this:

[General]
Version=15466574

Below are the relevant lines from GPOTool of the two conflicting
servers. I don't see anything different though.

Steve

============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Error: Version mismatch on apple.omni.imsweb.com, DS=20250702,
sysvol=15466574
Error: Version mismatch on stone.omni.imsweb.com, DS=20250702,
sysvol=15466574
Details:
------------------------------------------------------------
DC: apple.omni.imsweb.com
Friendly name: Default Domain Policy
Created: 1/17/2002 8:58:44 PM
Changed: 10/27/2004 6:56:26 PM
DS version: 309(user) 78(machine)
Sysvol version: 236(user) 78(machine)
Flags: 0
User extensions:

[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4

}][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB9

60

3F}]
Machine extensions:

[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3

}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79

F8

3A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79
F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{C6DC5466-785A-11D2-84D0-00C04F
B169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: stone.omni.imsweb.com
Friendly name: Default Domain Policy
Created: 1/17/2002 8:58:44 PM
Changed: 10/27/2004 6:59:06 PM
DS version: 309(user) 78(machine)
Sysvol version: 236(user) 78(machine)
Flags: 0
User extensions:

[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4

}][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB9

60

3F}]
Machine extensions:

[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3

}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79

F8

3A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79
F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{C6DC5466-785A-11D2-84D0-00C04F
B169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
Functionality version: 2

 

[Cary Shultz [A.D. MVP]]

Steve,

It looks like you are having an issue with the mismatch ( okay, that is
obvious! ). Let's do a really quick test to see where the problem is.

Create a test user account object but do not mail-enable it....just create
the user account object. After a few minutes do you see this user account
object on DC02 and DC03? You should.

Now, open up NotePad and create a very simple .txt file. I usually like to
call it something like 'createdonDC01.txt' and the body of the text is
usually something like "created on DC01 on Wednesday November 03, 2004 at
10:09AM". I put that .txt file in the SYSVOL shared folder of DC01. It
should quickly appear in the SYSVOL shared folders on all of the other
Domain Controllers in the Domain.

Glenn's idea is a good one. I am simply trying to make sure that
replication ( on both sides ) is working. You see, GPOs are actually two
distinct halves: one half lives in Active Directory ( the Group Policy
Container, or GPC ) and the other half lives in the SYSVOL ( the Group
Policy Template, or GPT ). Both are subject to their replication cycles (
the GPC to Active Directory replication and the GPT to FRS replication ).

If there is a problem then I might suggest that you run dcdiag /c /v on all
of the Domain Controllers. This will give us an idea of what is going on.
I suspect that you might have done this already?

HTH,

Cary

I did. Now the error that I am getting says:

Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Error: apple.omni.imsweb.com - grape.omni.imsweb.com sysvol mismatch

We have 3 domain controllers. The error above is complaining about one
of the controllers from the first error and the third domain controller that
until now hadn't been involved.

Steve

You should make a benign change to the a user policy to hopefully help the
DS SYSVOL version get up to date with the DS version.
This will bump the DS version number, which should cause the sysvol version
to update settings and follow suite with the version number.

GPOTool reports that we have a policy mismatch, but I don't see it. I
looked at GPT.ini on both servers list this:

[General]
Version=15466574

Below are the relevant lines from GPOTool of the two conflicting
servers. I don't see anything different though.

Steve

============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Error: Version mismatch on apple.omni.imsweb.com, DS=20250702,
sysvol=15466574
Error: Version mismatch on stone.omni.imsweb.com, DS=20250702,
sysvol=15466574
Details:
------------------------------------------------------------
DC: apple.omni.imsweb.com
Friendly name: Default Domain Policy
Created: 1/17/2002 8:58:44 PM
Changed: 10/27/2004 6:56:26 PM
DS version: 309(user) 78(machine)
Sysvol version: 236(user) 78(machine)
Flags: 0
User extensions:

[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4

}][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB9
60

3F}]
Machine extensions:

[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3

}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79
F8

3A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{C6DC5466-785A-11D2-84D0-00C04F

B169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: stone.omni.imsweb.com
Friendly name: Default Domain Policy
Created: 1/17/2002 8:58:44 PM
Changed: 10/27/2004 6:59:06 PM
DS version: 309(user) 78(machine)
Sysvol version: 236(user) 78(machine)
Flags: 0
User extensions:

[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4

}][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB9
60

3F}]
Machine extensions:

[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3

}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79
F8

3A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{C6DC5466-785A-11D2-84D0-00C04F

B169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
Functionality version: 2

 

[Steve Stormont]

I figured it out. I followed the steps here and it fixed it right up.

http://www.uta.edu/oit/how-to/docs/dcreplication1.php

Steve

Steve,

It looks like you are having an issue with the mismatch ( okay, that is
obvious! ). Let's do a really quick test to see where the problem is.

Create a test user account object but do not mail-enable it....just create
the user account object. After a few minutes do you see this user account
object on DC02 and DC03? You should.

Now, open up NotePad and create a very simple .txt file. I usually like to
call it something like 'createdonDC01.txt' and the body of the text is
usually something like "created on DC01 on Wednesday November 03, 2004 at
10:09AM". I put that .txt file in the SYSVOL shared folder of DC01. It
should quickly appear in the SYSVOL shared folders on all of the other
Domain Controllers in the Domain.

Glenn's idea is a good one. I am simply trying to make sure that
replication ( on both sides ) is working. You see, GPOs are actually two
distinct halves: one half lives in Active Directory ( the Group Policy
Container, or GPC ) and the other half lives in the SYSVOL ( the Group
Policy Template, or GPT ). Both are subject to their replication cycles (
the GPC to Active Directory replication and the GPT to FRS replication ).

If there is a problem then I might suggest that you run dcdiag /c /v on all
of the Domain Controllers. This will give us an idea of what is going on.
I suspect that you might have done this already?

HTH,

Cary

I did. Now the error that I am getting says:

Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Error: apple.omni.imsweb.com - grape.omni.imsweb.com sysvol mismatch

We have 3 domain controllers. The error above is complaining about one
of the controllers from the first error and the third domain controller that
until now hadn't been involved.

Steve

You should make a benign change to the a user policy to hopefully help the
DS SYSVOL version get up to date with the DS version.
This will bump the DS version number, which should cause the sysvol version
to update settings and follow suite with the version number.

GPOTool reports that we have a policy mismatch, but I don't see

it.
I

looked at GPT.ini on both servers list this:

[General]
Version=15466574

Below are the relevant lines from GPOTool of the two conflicting
servers. I don't see anything different though.

Steve

============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Error: Version mismatch on apple.omni.imsweb.com, DS=20250702,
sysvol=15466574
Error: Version mismatch on stone.omni.imsweb.com, DS=20250702,
sysvol=15466574
Details:
------------------------------------------------------------
DC: apple.omni.imsweb.com
Friendly name: Default Domain Policy
Created: 1/17/2002 8:58:44 PM
Changed: 10/27/2004 6:56:26 PM
DS version: 309(user) 78(machine)
Sysvol version: 236(user) 78(machine)
Flags: 0
User extensions:

[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4

}][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB9

60
3F}]
Machine extensions:

[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3

}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79

F8

3A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{C6DC5466-785A-11D2-84D0-00C04F

B169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: stone.omni.imsweb.com
Friendly name: Default Domain Policy
Created: 1/17/2002 8:58:44 PM
Changed: 10/27/2004 6:59:06 PM
DS version: 309(user) 78(machine)
Sysvol version: 236(user) 78(machine)
Flags: 0
User extensions:

[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4

}][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB9

60
3F}]
Machine extensions:

[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3

}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79

F8

3A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{C6DC5466-785A-11D2-84D0-00C04F

B169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
Functionality version: 2