Problems with gpo

[Pawe³ Mylka]

Hello, I have problem wtih gpo which I can't resolve from little time.
The problem is that computer policy for domain computer is not applied. The
main error in event log is:

System Windows nie mo¿e uzyskaæ dostêpu do pliku gpt.ini dla obiektu GPO
cn={96E16FDE-597D-4543-9628-77803E76A2A0},cn=policies,cn=system,DC=domena,DC=local.
Plik powinien znajdowaæ siê w lokalizacji
<\\domena.local\sysvol\domena.local\Policies\{96E16FDE-597D-4543-9628-77803E76A2A0}\gpt.ini>.
(Odmowa dostêpu. ).
Przetwarzanie zasad grupy zosta³o przerwane.


This mean Acces denide. But then i check i Group Policy Manageemnt Console
that inform me that just

Component Name Status Last Process Time
Infrastruktura zasad grupy Failed 2005-10-10 11:38:47
Infrastruktura zasad grupy failed due to the error listed below.

Okre¶lona domena nie istnieje lub nie mo¿na siê z ni± skontaktowaæ.

Note: Due to the GP Core failure, none of the other Group Policy components
processed their policy. Consequently, status information for the other
components is not available.

Additional information may have been logged. Review the Policy Events tab in
the console or the application event log for events between 2005-10-10
11:38:25 and 2005-10-10 11:38:47.


Transation:
Infrastruktura zasad grupy - infrastraction group policy
Okre¶lona domena nie istnieje lub nie mo¿na siê z ni± skontaktowaæ. ->
specified domain does not exist or can't be contacted.

But when I try from computer name step into shared folder
\\domena.local\sysvol\domena.local\Policies\{96E16FDE-597D-4543-9628-77803E76A2A0}\gpt.ini
i can without aby problem.

Does aby one have idea what can be wrong?

regards
Pawe³ Mylka

 

[Pawe³ Mylka]

It, seems that I give you wrong question, and no one was interested to
answer.

So maybe I ask in different way. I have strange situation, with gpo.
At thirst: i set new deafult policy domain policy, and after that the policy
for user on client computer are applayed, but for computer i have errors:

infrastraction group policy failed.

After that i was thinking that policy was wrong so i resotored default
domain policy and the situation is the same. The problem not disapired.

When I check access to dfs share sysvol, i can without problem.

I suspect that computer account does not have rights for access this share.
What I can do, i read the suspport on microsft, I check all point and
everything was ok.

But I steel have the problem.

thanks for advance

regards
Pawe³ Mylka

 

[Ace Fekay [MVP]]

It, seems that I give you wrong question, and no one was interested to
answer.

So maybe I ask in different way. I have strange situation, with gpo.
At thirst: i set new deafult policy domain policy, and after that the
policy for user on client computer are applayed, but for computer i have
errors:

infrastraction group policy failed.

After that i was thinking that policy was wrong so i resotored default
domain policy and the situation is the same. The problem not disapired.

When I check access to dfs share sysvol, i can without problem.

I suspect that computer account does not have rights for access this
share.
What I can do, i read the suspport on microsft, I check all point and
everything was ok.

But I steel have the problem.

thanks for advance

regards
Pawe³ Mylka

Usually, and I just mean usually, unless there is something else seriously
happening, this can be caused by a DNS misconfiguration. Ensure that all
your machines are only using the internal DNS servers in their IP
properties, which means the domain controllers, member servers, and clients.
If an ISP's DNS or any other external DNS that does not have a reference to
your Actice Directory zone data, is set in IP properties, numerous issues
may result.

If you are not sure, to give us a better start to help diagnose this, please
post an unedited ipconfig /all from one of your domain controllers and from
one of your clients. Let's at least eliminate any possible misconfigurations
as a start.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

If this post is viewed at a non-Microsoft community website, and you were to
respond to it through that community's website, I may not see your reply
unless that website posts replies back to the original Microsoft forum.
Therefore, please direct all replies ONLY to the Microsoft public newsgroup
this thread originated in so all can benefit or ensure the web community
posts it back to the original forum.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services
Microsot Certified Trainer
Infinite Diversities in Infinite Combinations.
=================================

 

[Pawel Mylka]

"Ace Fekay [MVP]"

Usually, and I just mean usually, unless there is something else seriously
happening, this can be caused by a DNS misconfiguration. Ensure that all
your machines are only using the internal DNS servers in their IP
properties, which means the domain controllers, member servers, and clients.
If an ISP's DNS or any other external DNS that does not have a reference to
your Actice Directory zone data, is set in IP properties, numerous issues
may result.

If you are not sure, to give us a better start to help diagnose this, please
post an unedited ipconfig /all from one of your domain controllers and from
one of your clients. Let's at least eliminate any possible misconfigurations
as a start.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

If this post is viewed at a non-Microsoft community website, and you were to
respond to it through that community's website, I may not see your reply
unless that website posts replies back to the original Microsoft forum.
Therefore, please direct all replies ONLY to the Microsoft public newsgroup
this thread originated in so all can benefit or ensure the web community
posts it back to the original forum.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services
Microsot Certified Trainer
Infinite Diversities in Infinite Combinations.
=================================

I am sure that this is not a misconfiguration of ip network. What is
strange, that they working half an day, and after that stop
working again for not specified reason or maybe i don't see this this
reason. Always not working with the same reson 1030,1058 access denide (on
computer part of policy). User policy working fine without any problems.

I have no idea what should I check more ??

regards
Pawel Mylka

 

[Ace Fekay [MVP]]

In

I am sure that this is not a misconfiguration of ip network. What is
strange, that they working half an day, and after that stop
working again for not specified reason or maybe i don't see this this
reason. Always not working with the same reson 1030,1058 access
denide (on computer part of policy). User policy working fine without
any problems.

I have no idea what should I check more ??

regards
Pawel Mylka

Pawel, I just want to make sure: does that mean that your machines are only
using the internal DNS server?

XP Pro or Win2000 Pro? Are the user accounts in a different OU than the
clients?

Run a
netdiag /v /fix > c:\netdiag.txt
and
dcdiag /v /fix > c:\dcdiag.txt
and post the results please.

Ace