Re: Group policy not processing

Howdy!

treaston2 schrieb:
I receive error 1030 from userenv 'Windows cannot query for the list of Group Policy objects. A message that describes the reason for this was previously logged by the policy engine.'

With warning 40961 from lsasrv 'The Security System could not establish a secured connection with the server ldap/pbo-main.millerlegg.com/millerlegg.com@xxxxxxxxxxxxxxx No authentication protocol was available.'

Assuming that your DNS configuration does work across your network: please asure, that your SMB signing configuration for servers and clients do *not* contradict each other. The settings are located at:

CompConf\Windows Settings\Local Policies\Security Options\ :
"Microsoft Network Client: Digitally sign communications (always)"
"Microsoft Network Client: Digitally sign communications (if server agrees)"
"Microsoft Network Server: Digitally sign communications (always)"
"Microsoft Network Server: Digitally sign communications (if client agrees)"

cheers,

Florian
--
Nachwuschsadmin aus dem Süddeutschen/Germany.
eMail: Vorname [bei] frickelsoft [Punkt] net.
.

Relevant Pages

  • Re: disable digital signing
    ... "Microsoft Network Client: Digitally sign communications " ... "Microsoft Network Server: Digitally sign communications ". ...
    (microsoft.public.windows.group_policy)
  • RE: SMBmount conspiracy
    ... My local security policy settings are like this: ... Microsoft network client - digitally sign communications - ... Microsoft network server - digitally sign communications - ...
    (RedHat)
  • RE: SMBmount conspiracy
    ... Local Policies - Security Options - Microsoft network client - digitally ... sign communications - DISABLED ... Local Policies - Security Options - Microsoft network server - digitally ...
    (RedHat)
  • RE: The Infamous 1058 and 1030 Event Viewer Errors
    ... Microsoft Network client: digitally sign communications (if server agress) ... Microsoft Network Server: Digitally Sign communications ...
    (microsoft.public.windows.server.active_directory)
  • The SMBMOUNT plot thickens
    ... Event viewer shows a successful logon by my mount.cifs client ... Microsoft network client - digitally sign communications - ... Microsoft network server - digitally sign communications - ...
    (RedHat)