Re: Hang @ Applying Computer Settings/Applying Your Personal Settings
- From: "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx>
- Date: Wed, 12 Oct 2005 00:35:46 -0500
That sounds like a difficult problem to troubleshoot.
You may have done much or all of this already but here is what I would do. I
would run the support tool netdiag on one or two of the troubled computers
and make sure their tcp/ip config is identical with the other computers that
work well as far as preferred dns servers including the order they are in
and then use nslookup to verify that the domain name [mydomain.com] resolves
to the correct IP addresses of the domain controllers. Then I would check
the services via services.msc and security options in Local Security Policy
comparing a problem computer to a known good configuration to see if there
are any discrepancies that you would want to fix and to see if an ipsec
policy is assigned.
I would verify that a problem computer can ping both domain controllers by
name and IP address and that it can access the sysvol share and drill down
to the folder where the Group Policy folder exists to the reg.pol files for
user and machine on both domain controllers which should show in My Network
Places. Gpresult could be used to see what domain controller is used to
apply Group Policy and may be interesting to see if the same domain
controller is used in cases where the hang happens and when not when the
computer/user is in a different OU and that it is the same domain controller
that at least some of the other computers are using. I would also run
netdiag, dcdiag, and gpotool on the two domain controllers just to make sure
all looks well with them and replication of Group Policy. If nothing seems
to help out of desperation I would unjoin one problem computer from the
domain and join it to the domain again to see what happens. --- Steve
"Woolpert" <alert.manager@xxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B1538E2C-8C87-4B48-9FFC-7B486188BF4A@xxxxxxxxxxxxxxxx
> We have about 800 PCs across 25 offices. All are applying policies fine
> and
> very quickly except for about 20. Those 20 were set up all at once due to
> an
> acquisition and clones of the first one that was set up. We have a
> standard
> config image that is used to build up all of our machines, but for these
> 20,
> we used that image to build up one system, sysprep'd it and created an
> image
> which we cloned the remaining systems from. I'm pretty sure something
> went
> wrong in that process but I can't figure out what that would cause these
> 20
> machines, regardless of which office they are in, to take minutes
> (sometimes
> up to 7 or 8) to get past the 'Applying Computer Settings' and also the
> 'Applying Your Personal Settings'.
>
> In my troubleshooting so far, I've:
>
> * Checked the Event Viewer and no SceCli or UserEnv errors
> * Enabled UserEnv verbose logging and can see it taking minutes to process
> the registry portion of the policies
> * Moved machines from one office to another, both working and problem
> machines. The ones that work, work everywhere and the ones that have
> problems
> have problems everywhere
> * Moved their user and computer objects to an OU that doesn't have
> policies
> being applied and they do not hang at either message
> * Created a new policy in that OU that had nothing set and they do not
> hang
> at either message
> * All computer and user objects across our network are running the same
> policies from the same two DCs
>
> I'm at a loss as to what to check next. Thanks for any info or direction
> you can provide.
.
- Follow-Ups:
- Prev by Date: Restricted Groups issue
- Next by Date: Re: RSOP Access denied at 1 of 5 DC's
- Previous by thread: Restricted Groups issue
- Next by thread: Re: Hang @ Applying Computer Settings/Applying Your Personal Setti
- Index(es):
Relevant Pages
|
