Re: Help with GPO problem! PLEASE!!

Can you create a new GPO?? If so use it to compare permissions to the two
default GPO's by going to [in Active Directory Users and Computers]
system/policies where you will see the guids of the GPO's. Advanced features
in view will need to be enabled if it is not already. You can right click a
guid and select properties/security to see and manage security on a GPO. You
also might try using replmon, add your domain controller to the list of
monitored servers and check "show Group Policy status" to see what is shown
there. If you have not done so yet also run the support tool dcdiag. Make
sure that administrators and system have full control ntfs permissions to
the full sysvol folder structure and all files and that administrators have
full control share permissions for sysvol share. --- Steve


"Adam" <Adam@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:7AD7E9E8-D06A-4795-8D41-FD85D08EF7A2@xxxxxxxxxxxxxxxx
> Hi all! I am racking my brain on this problem with a Windows 2003 Standard
> server. Basically, it was setup fresh by another IT company and this
> problem
> never got corrected. I cannot setup permissions and security in the Domain
> Controller Security Policy or the GPO. I have done and searched every
> thing
> on the board that I can find. I have done a lot of things. i was wondering
> if
> anyone could HELP!! I do not want to have to redo an entire server this
> weekend!!
>
> Here is everything that I have done! Thanks for any insight to this
> problem!!
>
> NetDiag - ALL PASSED
>
> NetBT name test - PASSED
> [WARNING] You don't have a single interface with the <00> 'Workstation
> Service', <03> Messenger Service, <20> WINS names defined
>
> GPOTOOL:
> Validating DCs...
> Error: DC list is empty
>
> SysVol: has all correct subfolders and folders associated with GUIDs and
> domain name
>
> Attempted to manually restore the policies
> Attempted to automatically restore to default policies
>
> DCGPOFIX: Unable to read EFS certificates from Registry.pol file of the
> Default Domain Policy. The error was
> Configuration information could not be read from the domain controller,
> either because the machine is unavailable, or access has been denied.
> The restore failed.
>
> Domain Controller Security Policy: Failed to open the Group Policy Object.
> You may not have approriate rights.
> Windows cannot find the network path. Verify that the network path is
> correct and the destination computer is not busy or turned off. If Windows
> still cannot find the network path, contact your network administrator
>
> Event Log errors: 1030 & 1058
> Windows cannot query for the list of Group Policy objects. Check the event
> log for possible messages previously logged by the policy engine that
> describes the reason for this.
>
> Windows cannot access the file gpt.ini for GPO
> CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=executivereports,DC=com.
> The file must be present at the location
> <\\executivereports.com\sysvol\executivereports.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>.
> (Configuration information could not be read from the domain controller,
> either because the machine is unavailable, or access has been denied. ).
> Group Policy processing aborted.
>
>
>


.

Relevant Pages

  • Re: Help with GPO problem! PLEASE!!
    ... How do I create a new GPO? ... I am racking my brain on this problem with a Windows 2003 Standard ... >> Configuration information could not be read from the domain controller, ... Failed to open the Group Policy Object. ...
    (microsoft.public.windows.group_policy)
  • GPOStatus
    ... > guid and select properties/security to see and manage security on a GPO. ... I am racking my brain on this problem with a Windows 2003 Standard ... >> Configuration information could not be read from the domain controller, ... Failed to open the Group Policy Object. ...
    (microsoft.public.windows.group_policy)
  • Re: iNTERACTIVE LOGON welcome screen - make it go away
    ... I created a custom ADM file for these two settings ... and imported it into the GPO under the Computer Administritative templates. ... really great expertise in Group Policy often reply to posts including ... doing a gpupdate on that domain controller which ideally would be the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: GPO and Group Policy
    ... There are plenty of explanations of setting Share and NTFS ... Setting Special Permissions are not really any harder (after you do Standard ... You can ONLY LINK a GPO to a 'container', either a Site, Domain, or OU. ... The ONLY way you can use Groups with Group Policy (yes we know it ...
    (microsoft.public.windows.server.active_directory)
  • Re: Win2003 "cannot access the file gpt.ini"
    ... think a certain antivirus program messed the permissions up. ... fine, so we created a new blank GPO, then copied its gpt.ini back to the ... > I have installed Windows Server 2003 as a "first server on the network". ... > Windows cannot query for the list of Group Policy objects. ...
    (microsoft.public.windows.server.setup)