Re: Path Rules - Enabled Paths sometime are restricted

Next time that it happens try running the Resultant Set of Policy mmc snapin
on that computer and check to see if the rules for SRP are coming from the
GPO you expect. You also could use the support tool gpresult to do much of
the same and it will also show the last time that GP was applied and from
what domain controller. Also look in Event Viewer system and application
logs to see if anything helpful is reported there and run the support tool
netdiag to see if any problems are found with dns, dc discovery, or
trust/secure channel. Since you are experiencing problems with inconsistent
application of Group Policy I would also run netdiag, dcdiag, and gpotool on
your domain controllers and verify that dns is correct for your domain per
the link below. Make sure that you NEVER list an ISP dns server as a
preferred dns server for any domain computer. The support tools are on the
install disk in the support/tools folder where you run the setup program
there to install them as a group. --- Steve

http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B291382 --- DNS
FAQ for Active Directory

"Kirk Miller" <UCanSendemailtothefollowing-kirk@xxxxxxxxx> wrote in message
news:1F9210A5-286A-4716-8DBA-ABE8EA4949BB@xxxxxxxxxxxxxxxx
>I have a problem where programs which are enabled via Path rules sometimes
> will still be blocked. The paths are correct and work 80% of the time,
> but
> sometimes you will click and receive the restricted message. Somtimes it
> happens to IE, sometimes to an FTP program, sometimes something else.
> Doing
> a GPUpdate/force/reboot solves the problem.... but it might crop up later.
>
> I have seen this problem on both 16 bit and 32 bit applicatiosns. What
> should I look for?
>
> Thanks!


.

Relevant Pages

  • Remote Branch DC wont Replicate With Corporate DC
    ... Active Directory could not resolve the following DNS host name of the source ... domain controller to an IP address. ... 'Event' is not recognized as an internal or external command, ... operable program or batch file. ...
    (microsoft.public.windows.server.dns)
  • RPC Endpoint Mapper Error
    ... We are adding our first Windows 2003 Domain Controller to a Windows ... I checked DNS entries with articles from Microsoft on ... PASS - All the DNS entries for DC are registered on DNS server ... List of NetBt transports currently bound to the Redir ...
    (microsoft.public.win2000.active_directory)
  • Re: Replication event errors
    ... PASS - All the DNS entries for DC are registered on DNS server ... But as a test I manually added a dns alias for Domain controller: ... Active Directory failed to construct a mutual authentication service ... computer name of the source domain controller. ...
    (microsoft.public.windows.server.active_directory)
  • Re: the system cannot log you on now because the domain <domain>is not available
    ... What I would suggest trying, at least temporarily, is to open Domain Controller ... The other main concern is that dns is configured correctly for the whole domain. ... controllers running dns with the AD domain zone and NEVER an ISP dns server anywhere ... > event log showed teh failed attempts at locating the DC. ...
    (microsoft.public.windows.server.networking)
  • WINDOWS RAPLICATION ISSUE
    ... All location singapore,kuwait,doha having Local DNS SERVER with AD ... But I am able to connect head officr DC by using active directory domains & ... 1)The local domain controller could not connect with the following domain ... Source domain controller address: ...
    (microsoft.public.windows.server.active_directory)