Re: XP workstations will not apply GPO software install but 2000 W

From: bbuchen (bbuchen_at_discussions.microsoft.com)
Date: 01/14/05


Date: Fri, 14 Jan 2005 11:19:07 -0800

Hi,
I don't think it is permissions because all my win2k ws work fine. I have
about 60 of these, I am only having a problem with my XP ws (about 10
machines).

The exact error I get is the following:

Windows cannot obtain the domain controller name for your computer network.
(The specified domain either does not exist or could not be contacted. ).
Group Policy processing aborted.

I have run netdiag with no problems. nslookup, ping any thing I could think
of.
I don't think it is specific to the workstation because all my XP machines
give me
this.

"Herb Martin" wrote:

> "bbuchen" <bbuchen@discussions.microsoft.com> wrote in message
> news:24BE27F6-DD98-4C2D-B1CB-9F81CB88424A@microsoft.com...
> > Hello,
> >
> > I have setup an OU with a GPO that will install Outlook 2003 by Computer.
> > This works great for win 2000 workstations but for any XP ws
> (Professional)
>
> > I get the error upon boot up that it could not contact the DC therefore
> the
> > GPO install will abort. Any ideas? I suspected a problem with DNS
> > but I have check it and seems fine. I am able to log into the WS with a
> AD
> > user and
>
> Such (failure to authenticate and thus load GPOs etc.) is almost
> always a DNS issue but it can be a more direct authentication or
> permission problem.
>
> > I am able to ping, nslookup all systems on the network including the DC
> > without any problems.
>
> This does argue for eliminating DNS as the culprit,
> but let's first say that INTERNAL clients must use
> ONLY the internal DNS servers in their NIC->IP->
> DNS server properties.
>
> How about permissions? Are the install files (the MSI etc.)
> located on a server with Share or NTFS permissions that
> do not allow the XP machines (accounts) to download the
> files?
>
> If you used something like "Authenticated Users-READ" this
> should not be the problem.
>
> Does it really say it "cannot contact the DC" or does it use
> the Server name (for the DC) in the context of trying to
> download the FILES?
>
> There is a difference (the DC doesn't actually have to hold
> the files distributed through the GPO instructions, but the
> key here is to isolate WHAT is failing.)
>
> It sounds like permissions but that seems unlikely to be
> messed up.
>
> --
> Herb Martin
>
>
> >
>
>
>



Relevant Pages

  • Re: Local authentication errors on Windows 2003 Server
    ... Is this server a domain controller?? ... permissions to the share or access this computer from the network user ... The support tool gpresult or whoami will show group membership. ... Unable to open the GPO due to access denied. ...
    (microsoft.public.windows.server.security)
  • Re: WMI Path Problem - DIDNT WORK
    ... but rather let it default to the DNS server ... There are a wide variety of DNS management Samples. ... Check the WMI permissions and make sure that the "Local Administrators" ...
    (microsoft.public.dotnet.languages.vb)
  • RE: Solved: DHCP Client Service cannot start after conficker invaded
    ... These are the only permissions needed to fix this problem. ... Once the server rebooted after changing registry, ... DNS server mostly use secure dynamic updates. ... speicifc details lke what would happen if the DHCP client service ...
    (microsoft.public.windows.server.general)
  • Re: pls Help!! After Trust, cannot access from local to foreign do
    ... Make sure that each DNS server only points to itself under NIC DNS ... authentication, they will use the source domain credentials to login. ... You need to define access by settings permissions on the objects in ...
    (microsoft.public.windows.server.active_directory)
  • Microsoft Secure DNS and Authenticated Users group interdependencies
    ... I would really appreciate anyone who considers themselves DNS experts to take a good look at this post. ... Only if Authenticated Users group has a write access will the record update. ... If the a record is set with default permissions and Authenticated Users has elevated permissions set, after the client's successfully updates the record, the client is added to the ACE with WRITE permissions and Authenticated Users permissions get reset. ...
    (microsoft.public.windows.server.dns)