Windows 2000 Group Policy Problem.

[Vincent IP]

Hi all,

I have implemented a group policy for the workstations in my domain to
include a logon-script to launch an application when the domain user
logged in.

However, I found that occassionally, the group policy will not be
applied on some domain workstations. Originally, the group policy can
be applied.

I found that in the eventlog of the domain controller, there is an
entry of Event ID 5722 for that errorneous domain workstations. The
description in the support page matches the problem we observed (the
group policy cannot be applied exactly seven days after we join the
workstation to the domain). Therefore, I've disabled the password
synchronization since then, but the problem (group policy cannot be
applied occassionally) still appears although less computer accounts
are affected.

Does anyone know why?

Thank you.
Pong

 

[Tim Hines, MCSA, MCSE]

If your clients are having problems resetting secure channels then they will
experience more problems than group policy failures. You should verify that
name resolution is working. Clients need to be able to locate all DCs by
querying DNS for SRV records. Verify that the records are there for all
DCs. You should also verify that replication is working between all domain
controllers. Check the event logs on the client for errors. There is
usually an error in the system log from netlogon if there is a secure
channel problem. You should also review the application log for errors. Post
any additional errors in the newsgroup.


--
--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.