Re: Policy mismatch, but I don't see it
From: Cary Shultz [A.D. MVP] (cwshultz_at_mvps.org)
Date: 11/03/04
- Next message: Gabe Knuth: "Re: Remove Security Groups"
- Previous message: Gabe Knuth: "Re: Redirect MyDocs after Novell Login"
- In reply to: Steve Stormont: "Re: Policy mismatch, but I don't see it"
- Next in thread: Steve Stormont: "Re: Policy mismatch, but I don't see it"
- Reply: Steve Stormont: "Re: Policy mismatch, but I don't see it"
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 3 Nov 2004 10:16:52 -0500
Steve,
It looks like you are having an issue with the mismatch ( okay, that is
obvious! ). Let's do a really quick test to see where the problem is.
Create a test user account object but do not mail-enable it....just create
the user account object. After a few minutes do you see this user account
object on DC02 and DC03? You should.
Now, open up NotePad and create a very simple .txt file. I usually like to
call it something like 'createdonDC01.txt' and the body of the text is
usually something like "created on DC01 on Wednesday November 03, 2004 at
10:09AM". I put that .txt file in the SYSVOL shared folder of DC01. It
should quickly appear in the SYSVOL shared folders on all of the other
Domain Controllers in the Domain.
Glenn's idea is a good one. I am simply trying to make sure that
replication ( on both sides ) is working. You see, GPOs are actually two
distinct halves: one half lives in Active Directory ( the Group Policy
Container, or GPC ) and the other half lives in the SYSVOL ( the Group
Policy Template, or GPT ). Both are subject to their replication cycles (
the GPC to Active Directory replication and the GPT to FRS replication ).
If there is a problem then I might suggest that you run dcdiag /c /v on all
of the Domain Controllers. This will give us an idea of what is going on.
I suspect that you might have done this already?
HTH,
Cary
"Steve Stormont" <s.stormont@verizon.net> wrote in message
news:Onv1OdawEHA.2572@tk2msftngp13.phx.gbl...
> I did. Now the error that I am getting says:
>
> Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
> Error: apple.omni.imsweb.com - grape.omni.imsweb.com sysvol mismatch
>
> We have 3 domain controllers. The error above is complaining about
one
> of the controllers from the first error and the third domain controller
that
> until now hadn't been involved.
>
> Steve
>
>
> "Glenn L" <the.only(delete)@gmail.com> wrote in message
> news:%23VsJcfWwEHA.4028@TK2MSFTNGP15.phx.gbl...
> > You should make a benign change to the a user policy to hopefully help
the
> > DS SYSVOL version get up to date with the DS version.
> > This will bump the DS version number, which should cause the sysvol
> version
> > to update settings and follow suite with the version number.
> >
> > "Steve Stormont" <s.stormont@verizon.net> wrote in message
> > news:uBcvDbSwEHA.612@TK2MSFTNGP15.phx.gbl...
> > > GPOTool reports that we have a policy mismatch, but I don't see it.
> I
> > > looked at GPT.ini on both servers list this:
> > >
> > > [General]
> > > Version=15466574
> > >
> > > Below are the relevant lines from GPOTool of the two conflicting
> > > servers. I don't see anything different though.
> > >
> > > Steve
> > >
> > > ============================================================
> > > Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
> > > Error: Version mismatch on apple.omni.imsweb.com, DS=20250702,
> > > sysvol=15466574
> > > Error: Version mismatch on stone.omni.imsweb.com, DS=20250702,
> > > sysvol=15466574
> > > Details:
> > > ------------------------------------------------------------
> > > DC: apple.omni.imsweb.com
> > > Friendly name: Default Domain Policy
> > > Created: 1/17/2002 8:58:44 PM
> > > Changed: 10/27/2004 6:56:26 PM
> > > DS version: 309(user) 78(machine)
> > > Sysvol version: 236(user) 78(machine)
> > > Flags: 0
> > > User extensions:
> > >
>
[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4
> >
>
> }][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB9
> 60
> > > 3F}]
> > > Machine extensions:
> > >
>
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3
> >
>
> }{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79
> F8
> > >
>
3A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79
> > >
>
F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{C6DC5466-785A-11D2-84D0-00C04F
> > > B169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
> > > Functionality version: 2
> > > ------------------------------------------------------------
> > > ------------------------------------------------------------
> > > DC: stone.omni.imsweb.com
> > > Friendly name: Default Domain Policy
> > > Created: 1/17/2002 8:58:44 PM
> > > Changed: 10/27/2004 6:59:06 PM
> > > DS version: 309(user) 78(machine)
> > > Sysvol version: 236(user) 78(machine)
> > > Flags: 0
> > > User extensions:
> > >
>
[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4
> >
>
> }][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB9
> 60
> > > 3F}]
> > > Machine extensions:
> > >
>
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3
> >
>
> }{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79
> F8
> > >
>
3A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79
> > >
>
F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{C6DC5466-785A-11D2-84D0-00C04F
> > > B169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
> > > Functionality version: 2
> > >
> > >
> >
> >
>
>
- Next message: Gabe Knuth: "Re: Remove Security Groups"
- Previous message: Gabe Knuth: "Re: Redirect MyDocs after Novell Login"
- In reply to: Steve Stormont: "Re: Policy mismatch, but I don't see it"
- Next in thread: Steve Stormont: "Re: Policy mismatch, but I don't see it"
- Reply: Steve Stormont: "Re: Policy mismatch, but I don't see it"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
