Re: Need Troubleshooting tips for GP deployment failure

pmulvane_at_law.tulane.edu
Date: 01/11/05 

Date: Tue, 11 Jan 2005 08:57:15 -0600

We don't quite understand it either. I was giving the best description
of what has been observed.
With regards to gpresult, it indicates that the correct Policies are
beeing applied, but only a handfull of our PCs are performing in the
way the Policies dictate.

On Mon, 10 Jan 2005 20:15:01 -0800, "Denis Wong @ Hong Kong"
<DenisWongHongKong@discussions.microsoft.com> wrote:

>Don't really quite understand your situation, but have you tried to use
>gpresult to troubleshoot?
>
>HOW TO: Use the Group Policy Results Tool in Windows 2000
>http://support.microsoft.com/kb/321709/EN-US/
>
>br,
>Denis
>
>"pmulvane@law.tulane.edu" wrote:
>
>> We have been rolling out SP2 within our network (+300 PCs) and have
>> run into a hitch with Port exceptions to the firewall that are needed
>> for administrative use. These Windows Firewall Port exceptions are
>> being delivered via Group Policy to some but not all PCs. The PCs that
>> are receiving the Policy settings are not opening the Ports. They are
>> in the Registry as they should be but when the Port Exceptions are
>> checked within the Firewall settings, none are listed.
>>
>>
>>
>> We have checked for ICMP interference (i.e. forwarding disabled or
>> restricted) and this doesn't seem to be the problem. It seems that
>> while some machines are recieving the Port exceptions, none of our PCs
>> are getting the entire Policy package (Default Domain Policy).
>>
>>
>>
>> We have tried all of the suggestions easily obtained through a Google
>> search on the issue with no progress and could use some
>> troubleshooting advice to get this resolved.
>>
>>
>>

Relevant Pages

  • Need Troubleshooting tips for GP deployment failure
    ... We have been rolling out SP2 within our network (+300 PCs) and have ... run into a hitch with Port exceptions to the firewall that are needed ... These Windows Firewall Port exceptions are ... are receiving the Policy settings are not opening the Ports. ...
    (microsoft.public.win2000.group_policy)
  • Re: Group policy not being inherited by clients?!?!
    ... I'm adding the port exceptions in Windows Firewall for Symantec ... What policy are you modifying, or are you creating/linking your own? ...
    (microsoft.public.windows.server.sbs)
  • Re: Rolling back GPO changes
    ... Simplify Group Policy Troubleshooting with the NEW GPExpert Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php ... WOULD STILL ALLOW DOMAIN USERS TO LOG ON TO THEIR pcs AND ALSO THIS NEW GROUP ...
    (microsoft.public.windows.group_policy)
  • Re: "updated" Group Policy Editor for SBS 2003?
    ... In the new policy there is an item to "allow local port exceptions" where ... the "explain" box states that there should also be a "port exceptions ... policy" where inbound port exceptons can be configure by policy rather than ... the SBS group policy editor warns about several entries being ...
    (microsoft.public.windows.server.sbs)
  • Re: Applying user GPO to computers
    ... > to specific COMPUTERS, rather than ... > USERS (there are several PCs which are exempt from this policy)" ie I'd ... Mike Brannigan ...
    (microsoft.public.windows.server.active_directory)