GPOStatus


Name: Default Domain Policy
GUID:
{31B2F340-016D-11D2-945F-00C04FB984F9}
GPO Version: 327687
GPO SysVol Version: 65541

Name: Default Domain Controllers Policy
GUID:
{6AC1786C-016F-11D2-945F-00C04fB984F9}
GPO Version: 262165
GPO SysVol Version: 17


"Steven L Umbach" wrote:

> Can you create a new GPO?? If so use it to compare permissions to the two
> default GPO's by going to [in Active Directory Users and Computers]
> system/policies where you will see the guids of the GPO's. Advanced features
> in view will need to be enabled if it is not already. You can right click a
> guid and select properties/security to see and manage security on a GPO. You
> also might try using replmon, add your domain controller to the list of
> monitored servers and check "show Group Policy status" to see what is shown
> there. If you have not done so yet also run the support tool dcdiag. Make
> sure that administrators and system have full control ntfs permissions to
> the full sysvol folder structure and all files and that administrators have
> full control share permissions for sysvol share. --- Steve
>
>
> "Adam" <Adam@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:7AD7E9E8-D06A-4795-8D41-FD85D08EF7A2@xxxxxxxxxxxxxxxx
> > Hi all! I am racking my brain on this problem with a Windows 2003 Standard
> > server. Basically, it was setup fresh by another IT company and this
> > problem
> > never got corrected. I cannot setup permissions and security in the Domain
> > Controller Security Policy or the GPO. I have done and searched every
> > thing
> > on the board that I can find. I have done a lot of things. i was wondering
> > if
> > anyone could HELP!! I do not want to have to redo an entire server this
> > weekend!!
> >
> > Here is everything that I have done! Thanks for any insight to this
> > problem!!
> >
> > NetDiag - ALL PASSED
> >
> > NetBT name test - PASSED
> > [WARNING] You don't have a single interface with the <00> 'Workstation
> > Service', <03> Messenger Service, <20> WINS names defined
> >
> > GPOTOOL:
> > Validating DCs...
> > Error: DC list is empty
> >
> > SysVol: has all correct subfolders and folders associated with GUIDs and
> > domain name
> >
> > Attempted to manually restore the policies
> > Attempted to automatically restore to default policies
> >
> > DCGPOFIX: Unable to read EFS certificates from Registry.pol file of the
> > Default Domain Policy. The error was
> > Configuration information could not be read from the domain controller,
> > either because the machine is unavailable, or access has been denied.
> > The restore failed.
> >
> > Domain Controller Security Policy: Failed to open the Group Policy Object.
> > You may not have approriate rights.
> > Windows cannot find the network path. Verify that the network path is
> > correct and the destination computer is not busy or turned off. If Windows
> > still cannot find the network path, contact your network administrator
> >
> > Event Log errors: 1030 & 1058
> > Windows cannot query for the list of Group Policy objects. Check the event
> > log for possible messages previously logged by the policy engine that
> > describes the reason for this.
> >
> > Windows cannot access the file gpt.ini for GPO
> > CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=executivereports,DC=com.
> > The file must be present at the location
> > <\\executivereports.com\sysvol\executivereports.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>.
> > (Configuration information could not be read from the domain controller,
> > either because the machine is unavailable, or access has been denied. ).
> > Group Policy processing aborted.
> >
> >
> >
>
>
>
.

Relevant Pages

  • Re: Help with GPO problem! PLEASE!!
    ... How do I create a new GPO? ... I am racking my brain on this problem with a Windows 2003 Standard ... >> Configuration information could not be read from the domain controller, ... Failed to open the Group Policy Object. ...
    (microsoft.public.windows.group_policy)
  • Re: Help with GPO problem! PLEASE!!
    ... Can you create a new GPO?? ... If so use it to compare permissions to the two ... > Configuration information could not be read from the domain controller, ... Failed to open the Group Policy Object. ...
    (microsoft.public.windows.group_policy)
  • Group Policy Error
    ... Windows cannot query for the list of Group Policy objects. ... In there it suggests that SP1 get installed on the server. ... The second domain controller ...
    (microsoft.public.windows.server.active_directory)
  • Re: Huh? "Login failure: the user has not been granted the requested logon type at this compute
    ... I'm a pretty experienced Windows user and programmer, ... the user has not been granted the requested logon type ... on the appropriate OU to see the Group Policy for that OU]. ... > administrators' group to the domain controller. ...
    (microsoft.public.security)
  • Re: iNTERACTIVE LOGON welcome screen - make it go away
    ... I created a custom ADM file for these two settings ... and imported it into the GPO under the Computer Administritative templates. ... really great expertise in Group Policy often reply to posts including ... doing a gpupdate on that domain controller which ideally would be the ...
    (microsoft.public.windowsxp.security_admin)