Re: Policies partially apply

It might help if you can post the whole Event ID. The link below is to a KB
article on troubleshooting Event ID 1202 which may be a good place to start.

http://support.microsoft.com/default.aspx?scid=kb;en-us;324383

The link below is to user comments on Event ID 1085.

http://www.eventid.net/display.asp?eventid=1085&eventno=1412&source=Userenv&phase=1

The settings you mention for kerberos policy apply only to domain
controllers. Group Policy problems are often caused by dns misconfiguration
or otherwise inability of a domain computer to find or contact a domain
controller. Use the support tools netdiag, dcdiag, and gpotool on your
domain controllers to check for health and proper configuration and use
netdiag and gpresult on domain computers. If everything checks out OK and
everything else works correctly including Group Policy it could be one of
those quirks of sometimes seeing unexplained Event ID's [which seem to
happen most with XP computers in W2K domains] yet everything works fine that
will mostly be an annoyance in the logs. --- Steve

http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B291382 -- AD
DNS FAQ.

"Job" <Job@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2E731CF7-A17E-44A4-BEA7-C114F69F3B15@xxxxxxxxxxxxxxxx
>I always get an error with my all Windows XP Professionnal (service pack2)
> clients which apply the computer policies from an AD Windows 2000 Server
> (service pack 4.
> The following error appear in all application eventlog clients :
>
> Type Warning
> Source : SceCli
> ID :1202
>
> following by
>
> Type : Error
> Source : Userenv
> ID :1085
>
> When I look at the policies which has been apply regarding to those that
> must be, I see that in Computer Configuration \Windows Settings \Security
> Settings \ Account Policies/Kerberos Policy \Policy like Enforce user
> logon
> restrictions, Maximum lifetime for service ticket and so on are not apply.
> And when I see on the client, those policies are not applicable. Why ?
> I use GPMC interface to view where the error is located and it is
> indicated
> that the Computer Configuration \Component status \ Security contains an
> invalid parameters.
> How to know which ?
> Thanks for your support,
> Job
>
>
>
>
>


.

Relevant Pages

  • Re: Group policy replication between domains
    ... If I have multiple domains in one single forest, ... policies in one domain to be applied to clients in all domains in the ... forest - to what DC`s do my policies replicate to? ... do the clients apply the group policy? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group policy replication between domains
    ... If I have multiple domains in one single forest, ... policies in one domain to be applied to clients in all domains in the ... forest - to what DC`s do my policies replicate to? ... the clients apply the group policy? ...
    (microsoft.public.windows.server.active_directory)
  • Group policy replication between domains
    ... If I have multiple domains in one single forest, ... policies in one domain to be applied to clients in all domains in the ... forest - to what DC`s do my policies replicate to? ... the clients apply the group policy? ...
    (microsoft.public.windows.server.active_directory)
  • RE: Active Directory OU User Group Policy
    ... Have you run a GPresult on the clients to see what policies they receive? ... Try doing a group policy result calculation from there. ... > setting users' group policy on a created OU. ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to configure a Group Policy for a OU of computers?
    ... There are two elements to Group Policy - computer configuration and user ... Gpresult can also help troubleshoot Group Policy issues. ... I create the Group Policies for different labs.But ...
    (microsoft.public.win2000.security)