Re: Can a GPO apply after a cached login?



I have discovered that the issue lies with the Novell client that is on our
build. I removed it and everything works as it should.

I just need to work out what in the Novell client is mucking things up.

Cheers


Aidan

"Aidan" wrote:

I have asked a friend who works in another company to try this.

Reboot his computer without network cable attached
Login
After a few mins, attach the network cable
do a gpupdate /force

His works OK......mine does not

I have compared the output of SET and discovered that whilst his
LOGONSERVER=\\SERVERNAME

mine is
LOGONSERVER=\\LOCALMACHINENAME

Any ideas why this would be?

Thanks

Aidan


"Aidan" wrote:

I have enabled verbose logging of userenv and forced a group policy update
targeting only the user

The log file displays
RefreshPolicyEX: Entering with force refresh 0
RefreshPolicyEX: Failed to open event with 2

Still at a loss here

"Aidan" wrote:

When logged in with a cached account, the RSOP error message states that
Group Policy Infrastructure has failed.

Group policy infrastructure failed due to the error listed below. The
specified domain either does not exist of could not be contacted.

Note: Due to the GP Core Failure, none of the other Group Policy components
processed their policy. Consquently, status information for the other
components is not available.

Any ideas?



"Darren Mar-Elia" wrote:

A cached login is not an issue in an of itself as long as the user connects
to the VPN at some point and the DC becomes available. Are you trying a
gpupdate /force before you run RSOP? Keep in mind that once you connect to
the VPN, a background GP refresh may take up to 120 minutes to occur
normally, depending upon when the last refresh attempt was. Also, what does
the red X actually say in the error properties?

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related

Simplify Group Policy Troubleshooting with the NEW GPExpert Troubleshooting
Pak 1.0 at http://www.sdmsoftware.com/products.php




"Aidan" <Aidan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1BA05AAE-DAC0-4B8C-954F-26E0FA10EDDF@xxxxxxxxxxxxxxxx
I take the point regarding Folder redirection.....my stupidity :) Thats not
a
big issue, the rest of the policies failing to apply is..:(

When running with a cached login the RSOP fails. The computer
configuration
is OK but the User Configuration has a red X beside it.

GPresult reports back stating that it identifies the OU that the user is
in.

Any ideas?

Thanks

Aidan




"Mark Heitbrink [MVP]" wrote:

Hi,

Aidan schrieb:
The group policies which are missing/not applying are user policies.
Most
notable is the omission of the Folder redirection / proxy settings and
our
'locked down' user settings. They are all part of our 'standard user
policy'.

If you are running a rsop.msc and you take a look inside the properties,
are any GPO filtered?

I have tried the ICMP test and the client passed without any issues. A
steady reply from a DC.
Often our machines are built with the user not moved to the OU at which
the
policy applies until the machine is fully deployed. I would have hoped
that
the policies would apply upon their next login after the policy refresh
I have tried the disable slow link just incase although I did try this
before.
Is there anything else you could suggest that I try?

What happens, after running a gpupdate /force manually?

Mark
--
Mark Heitbrink - MVP Windows Server - Group Policy

Homepage: www.gruppenrichtlinien.de - deutsch
Blog: gpupdate.spaces.live.com - english


.



Relevant Pages

  • Re: Group Policy is refreshing, but not working
    ... That policies are processed correctly make sure that on all domain machines only domain internal DNS servers are used, no ip addresses from external DNS servers like your ISP's. ... group is manually removed from a client's local administrators group, ... I checked the group policy refresh interval and it's set for 30 ...
    (microsoft.public.windows.group_policy)
  • RE: Default applying time for new GPOs
    ... To change the policy refresh interval setting, ... Controllers Group Policy object, which is linked to the Domain Controllers ... gpudate.exe using syntax gpupdate /force you can force reapplying all gpo ...
    (microsoft.public.windows.group_policy)
  • Re: Default applying time for new GPOs
    ... > Controllers Group Policy object, which is linked to the Domain Controllers ... The Group Policy Refresh Interval for Computers ... > gpudate.exe using syntax gpupdate /force you can force reapplying all gpo ...
    (microsoft.public.windows.group_policy)
  • Re: Can a GPO apply after a cached login?
    ... "Aidan" wrote: ... RefreshPolicyEX: ... Group policy infrastructure failed due to the error listed below. ... When running with a cached login the RSOP fails. ...
    (microsoft.public.windows.group_policy)
  • User Group Policy not applying after uninstall of Novell Client
    ... A Windows 2000 domain with several OU's. ... removing the Novell client to see what happens. ... the User settings of Group Policy do not apply. ... The Computer settings are applying just fine. ...
    (microsoft.public.win2000.group_policy)

Loading