Re: GPO Update Problem (SYSVOL access via UNC)
- From: "Charles Jennings" <cejennings_cr@xxxxxxxxx>
- Date: Mon, 12 Sep 2005 07:09:11 -0600
Repost 2
"Charles Jennings" <cejennings_cr@xxxxxxxxx> wrote in message news:...
> Repost
>
> "Charles Jennings" <cejennings_cr@xxxxxxxxx> wrote in message news:...
>>I have a problem that I cannot explain.
>>
>> I have a member server that cannot get its group policy updates.
>>
>> Here is the IPCONFIG of the member server:
>>
>> ********************************************************************************
>> Windows 2000 IP Configuration
>>
>> Host Name . . . . . . . . . . . . : zsjo25ap005
>> Primary DNS Suffix . . . . . . . : corp.mycompany.com
>> Node Type . . . . . . . . . . . . : Hybrid
>> IP Routing Enabled. . . . . . . . : No
>> WINS Proxy Enabled. . . . . . . . : No
>> DNS Suffix Search List. . . . . . : corp.mycompany.com
>> mycompany.com
>>
>> Ethernet adapter Local Area Connection:
>>
>> Connection-specific DNS Suffix . : corp.mycompany.com
>> Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit
>> Ethernet
>> Physical Address. . . . . . . . . : 00-0D-60-D5-8D-0E
>> DHCP Enabled. . . . . . . . . . . : No
>> IP Address. . . . . . . . . . . . : 10.215.129.27
>> Subnet Mask . . . . . . . . . . . : 255.255.255.0
>> Default Gateway . . . . . . . . . : 10.215.129.1
>> DNS Servers . . . . . . . . . . . : 10.215.129.25
>> 10.216.2.41
>> 10.216.2.40
>> Primary WINS Server . . . . . . . : 10.215.129.25
>> Secondary WINS Server . . . . . . : 10.216.2.41
>>
>> Ethernet adapter Local Area Connection 2:
>>
>> Media State . . . . . . . . . . . : Cable Disconnected
>> Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit
>> Ethernet #2
>> Physical Address. . . . . . . . . : 00-0D-60-D5-8D-0F
>> ********************************************************************************
>>
>> Here is the NSLOOKUP for the FQDN of the SYSVOL volumes:
>>
>> ********************************************************************************
>> nslookup corp.mycompany.com
>> Server: zsjo25fp001.corp.mycompany.com
>> Address: 10.215.129.25
>>
>> Name: corp.mycompany.com
>> Addresses: 10.215.129.25, 10.216.2.41, 10.216.2.40
>> ********************************************************************************
>>
>> Here are my PING results using both the Domain Controller's name and the
>> FQDN of the SYSVOL volumes:
>>
>> ********************************************************************************
>> ping zsjo25fp001
>>
>> Pinging Zsjo25fp001.corp.mycompany.com [10.215.129.25] with 32 bytes of
>> data
>> :
>>
>> Reply from 10.215.129.25: bytes=32 time<10ms TTL=128
>> Reply from 10.215.129.25: bytes=32 time<10ms TTL=128
>> Reply from 10.215.129.25: bytes=32 time<10ms TTL=128
>> Reply from 10.215.129.25: bytes=32 time<10ms TTL=128
>>
>> Ping statistics for 10.215.129.25:
>> Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
>> Approximate round trip times in milli-seconds:
>> Minimum = 0ms, Maximum = 0ms, Average = 0ms
>>
>>
>> ping corp.mycompany.com
>>
>> Pinging corp.mycompany.com [10.215.129.25] with 32 bytes of data:
>>
>> Reply from 10.215.129.25: bytes=32 time<10ms TTL=128
>> Reply from 10.215.129.25: bytes=32 time<10ms TTL=128
>> Reply from 10.215.129.25: bytes=32 time<10ms TTL=128
>> Reply from 10.215.129.25: bytes=32 time<10ms TTL=128
>>
>> Ping statistics for 10.215.129.25:
>> Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
>> Approximate round trip times in milli-seconds:
>> Minimum = 0ms, Maximum = 0ms, Average = 0ms
>> ********************************************************************************
>>
>> Now here is where my problem starts. I can access the SYSVOL if I access
>> it
>> using the server's name:
>>
>> ********************************************************************************
>> dir \\zsjo25fp001\sysvol
>> Volume in drive \\zsjo25fp001\sysvol has no label.
>> Volume Serial Number is A8AF-B3F7
>>
>> Directory of \\zsjo25fp001\sysvol
>>
>> 08/05/2004 11:39a <DIR> .
>> 08/05/2004 11:39a <DIR> ..
>> 08/05/2004 11:39a <JUNCTION> corp.mycompany.com
>> 0 File(s) 0 bytes
>> 3 Dir(s) 3,102,724,096 bytes free
>> ********************************************************************************
>>
>> But, I cannot access the SYSVOL if I use the FQDN UNC path:
>>
>> ********************************************************************************
>> dir \\corp.mycompany.com\sysvol
>> The system cannot find the path specified.
>>
>> ********************************************************************************
>>
>> Here is my supporting documentation when I do a SECEDIT /REFRESHPOLICY
>> MACHINE_POLICY /ENFORCE
>>
>> UserEnv Debug log:
>> ********************************************************************************
>> USERENV(100.840) 07:43:57:839 LibMain: Process Name:
>> C:\WINNT\system32\secedit.exe
>> USERENV(100.840) 07:43:57:854 RefreshPolicy: Entering with 1
>> USERENV(100.840) 07:43:57:854 RefreshPolicy: Leaving.
>> USERENV(f4.3b8) 07:43:57:854 ProcessGPOs:
>> USERENV(f4.3b8) 07:43:57:870 ProcessGPOs:
>> USERENV(f4.3b8) 07:43:57:870 ProcessGPOs: Starting computer Group Policy
>> processing...
>> USERENV(f4.3b8) 07:43:57:870 ProcessGPOs:
>> USERENV(f4.3b8) 07:43:57:870 ProcessGPOs:
>> USERENV(f4.3b8) 07:43:57:870 EnterCriticalPolicySection: Machine critical
>> section has been claimed. Handle = 0x334
>> USERENV(f4.3b8) 07:43:57:870 ProcessGPOs: Machine role is 2.
>> USERENV(f4.3b8) 07:43:57:870 PingComputer: PingBufferSize set as 2048
>> USERENV(f4.3b8) 07:43:57:870 PingComputer: First time: 0
>> USERENV(f4.3b8) 07:43:57:870 PingComputer: Fast link. Exiting.
>> USERENV(f4.3b8) 07:43:57:917 ProcessGPOs: User name is:
>> CN=ZSJO25AP005,OU=Servers,OU=MY OU,DC=corp,DC=mycompany,DC=com, Domain
>> name
>> is: CORP
>> USERENV(f4.3b8) 07:43:57:917 ProcessGPOs: Domain controller is:
>> \\zsjo25fp001.corp.mycompany.com Domain DN is corp.mycompany.com
>> USERENV(f4.3b8) 07:43:57:917 ProcessGPOs: Calling GetGPOInfo for normal
>> policy mode
>> USERENV(f4.3b8) 07:43:57:917 GetGPOInfo:
>> ********************************
>> USERENV(f4.3b8) 07:43:57:917 GetGPOInfo: Entering...
>> USERENV(f4.3b8) 07:43:57:933 GetGPOInfo: Server connection established.
>> USERENV(f4.3b8) 07:43:57:933 GetGPOInfo: Bound successfully.
>> USERENV(f4.3b8) 07:43:57:933 SearchDSObject: Searching <OU=Servers,OU=MY
>> OU,DC=corp,DC=mycompany,DC=com>
>> USERENV(f4.3b8) 07:43:57:933 SearchDSObject: Found GPO(s):
>> <[LDAP://cn={AC8C0163-3893-4568-87C8-C38D7E5396AE},cn=policies,cn=system,DC=corp,DC=mycompany,DC=com;0][LDAP://cn={684F8C4F-9D59-4BE4-B8F3-2C610B6BD8C3},cn=policies,cn=system,DC=corp,DC=mycompany,DC=com;0]>
>> USERENV(f4.3b8) 07:43:57:933 ProcessGPO: ==============================
>> USERENV(f4.3b8) 07:43:57:933 ProcessGPO: Deferring search for
>> <LDAP://cn={AC8C0163-3893-4568-87C8-C38D7E5396AE},cn=policies,cn=system,DC=corp,DC=mycompany,DC=com>
>> USERENV(f4.3b8) 07:43:57:933 ProcessGPO: ==============================
>> USERENV(f4.3b8) 07:43:57:933 ProcessGPO: Deferring search for
>> <LDAP://cn={684F8C4F-9D59-4BE4-B8F3-2C610B6BD8C3},cn=policies,cn=system,DC=corp,DC=mycompany,DC=com>
>> USERENV(f4.3b8) 07:43:57:933 SearchDSObject: Searching <OU=MY
>> OU,DC=corp,DC=mycompany,DC=com>
>> USERENV(f4.3b8) 07:43:57:933 SearchDSObject: Found GPO(s):
>> <[LDAP://cn={0BF734CA-1E8C-4351-A97E-2B2A76B8B1E8},cn=policies,cn=system,DC=corp,DC=mycompany,DC=com;0][LDAP://cn={A4A65CCE-BAFF-494C-BACE-329B080FBB96},cn=policies,cn=system,DC=corp,DC=mycompany,DC=com;0][LDAP://CN={67538E3E-149C-4C7D-8CD7-711268D2BCF5},CN=Policies,CN=System,DC=corp,DC=mycompany,DC=com;0]>
>> USERENV(f4.3b8) 07:43:57:948 ProcessGPO: ==============================
>> USERENV(f4.3b8) 07:43:57:948 ProcessGPO: Deferring search for
>> <LDAP://cn={0BF734CA-1E8C-4351-A97E-2B2A76B8B1E8},cn=policies,cn=system,DC=corp,DC=mycompany,DC=com>
>> USERENV(f4.3b8) 07:43:57:948 ProcessGPO: ==============================
>> USERENV(f4.3b8) 07:43:57:948 ProcessGPO: Deferring search for
>> <LDAP://cn={A4A65CCE-BAFF-494C-BACE-329B080FBB96},cn=policies,cn=system,DC=corp,DC=mycompany,DC=com>
>> USERENV(f4.3b8) 07:43:57:948 ProcessGPO: ==============================
>> USERENV(f4.3b8) 07:43:57:948 ProcessGPO: Deferring search for
>> <LDAP://CN={67538E3E-149C-4C7D-8CD7-711268D2BCF5},CN=Policies,CN=System,DC=corp,DC=mycompany,DC=com>
>> USERENV(f4.3b8) 07:43:57:948 SearchDSObject: <OU=MY
>> OU,DC=corp,DC=mycompany,DC=com> has the Block From Above attribute set
>> USERENV(f4.3b8) 07:43:57:948 SearchDSObject: Searching
>> <DC=corp,DC=mycompany,DC=com>
>> USERENV(f4.3b8) 07:43:57:948 SearchDSObject: Found GPO(s):
>> <[LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=corp,DC=mycompany,DC=com;0]>
>> USERENV(f4.3b8) 07:43:57:948 ProcessGPO: ==============================
>> USERENV(f4.3b8) 07:43:57:948 AddGPO: GPO will not be added to the list
>> since the Block flag is set and this GPO is not in enforce mode.
>> USERENV(f4.3b8) 07:43:57:948 ProcessGPO: Deferring search for
>> <LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=corp,DC=mycompany,DC=com>
>> USERENV(f4.3b8) 07:43:58:026 GetGPOInfo: Leaving with 0
>> USERENV(f4.3b8) 07:43:58:042 GetGPOInfo:
>> ********************************
>> USERENV(f4.3b8) 07:43:58:042 ProcessGPOs: GetGPOInfo failed.
>> USERENV(f4.3b8) 07:43:58:073 LeaveCriticalPolicySection: Critical section
>> 0x334 has been released.
>> USERENV(f4.3b8) 07:43:58:073 ProcessGPOs: Computer Group Policy has been
>> applied.
>> USERENV(f4.3b8) 07:43:58:089 ProcessGPOs: Leaving with 0.
>> USERENV(f4.3b8) 07:43:58:089 GPOThread: Next refresh will happen in 101
>> minutes
>> ********************************************************************************
>>
>> *** Netdiag /v will be sent as a reply to this post for
>> size reasons.
>>
>> ********************************************************************************
>>
>> OK - So I have bombarded this post with all the information that I can
>> think
>> of, I only hope someone can help.
>>
>> I have tried the following to see if I could fix the problem short of
>> re-installation of this server:
>> Remove the machine from the domain and add it back.
>> Remove the machine from the domain, change the SID (using Symantec
>> ghstwalk.exe) and add it back.
>> Try the machine with DHCP assigned IP settings
>> Try removing TCP/IP from the adapters and add TCP/IP back
>> Delete all entries in WINS and DNS and do and IPCONFIG /FLUSHDNS ....
>> IPCONFIG /REGISTERDNS
>> I am completely lost on this.....
>>
>> Any help would be appreciated.
>>
>
>
.
- Prev by Date: silly mistake: denied admins access to management console by group policy
- Next by Date: Re: GPO Update Problem (SYSVOL access via UNC)
- Previous by thread: Re: GPO Update Problem (SYSVOL access via UNC)
- Next by thread: Re: GPO Update Problem (SYSVOL access via UNC)
- Index(es):
Relevant Pages
|
