Re: problem with replication of GPO
- From: patman <patman@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 27 Feb 2006 02:43:27 -0800
Hello Ace,
i tried others tests:
test 1:
create a new GPO on DC2 and see if it replicates on DC1.
in fact it is created in DC1 sysvol share and not on DC2.
i can see the policy with the console but nothing appears in the sysvol
share of DC2.
i have 2 others DC (DC3 and DC4) and they act like DC2. a new policy is only
created on DC1.
test 2:
on DC1 the version of the GPO for Default domain controller policy
is 102 on the sysvol share and 51 in the sysvol directory.
on DC2, DC3, DC4 the version for both sysvol share and sysvol directory is 51.
i tried to modify this GPO on DC2. the change is made but the version in
DC2, DC3, DC4 (in the GPT.ini file) is the same. on DC1 the version changed
to 65669.
we could think about a permission problem but i verified.
test3:
i created a different user on each DC and wait for replication.
everything is ok for replication.
There is one event that could be possibly the cause of this proble of
creation/replication of GPO: one day, all our user disappeared suddenly and
we had to restore them with arcvserv 2000 (forcing the version). to be able
to restore
we had to modifiy the sysvol directory's name and recreate it completly.
it is an event but i don't think it is the reason of the problem even if it
is not
recommended to restore on an empty space.
no need of ipconfig.
everything is ok on the dns resolution.
just one thing to notice: DC1 has 7 ip adress but is well resoluted
by other DCs (replication is fine).
--
Patrick.
"Ace Fekay [MVP]" wrote:
In news:BEA274AF-68D4-48CF-A16E-4ABDE2BEFC49@xxxxxxxxxxxxx,.
patman <patman@xxxxxxxxxxxxxxxxxxxxxxxxx> stated, which I commented on
below:
hello,
i have 2 DC in an windows 2000 active directory (DC1 & DC2).
when i create a new GPO with DC1 it is made in its sysvol share but
nowhere else.
not in its personnal Sysvol directory neither in the sysvol share of
DC2.
when i do a gpotool it says that it can't access to the one on DC2
(normal because it is not present).
i just verified the rights for all directories and it seems fine.
does someone has any idea of the problem ?
thank you in advance..
Can you post an (unedited) ipconfig /all please from both DCs? That
configuration info will give us a better starting point to diagnose this.
Also, if there are any Event log errors, please post the Event ID #s.
--
Ace
This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.
Having difficulty reading or finding responses to your post?
Instead of the website you're using, I suggest to use OEx (Outlook Express
or any other newsreader), and configure a news account, pointing to
news.microsoft.com. This is a direct link to the Microsoft Public
Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
to easily find, track threads, cross-post, sort by date, poster's name,
watched threads or subject.
It's easy:
How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164
Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Directory Services
Microsoft Certified Trainer
Assimilation Imminent. Resistance is Futile
Infinite Diversities in Infinite Combinations
"Very funny Scotty. Now, beam down my clothes."
The only thing in life is change. Anything more is a blackhole consuming
unnecessary energy.
- References:
- Re: problem with replication of GPO
- From: Ace Fekay [MVP]
- Re: problem with replication of GPO
- Prev by Date: Re: Restoring Active Directory domain
- Next by Date: upgrade NT 4.0 to Windows 2000 AD
- Previous by thread: Re: problem with replication of GPO
- Next by thread: Re: LDP Bind and permissions
- Index(es):
Relevant Pages
|
