Re: Group Policy via VPN

Below is a section of the Userenv.log file:

USERENV(438.640) 13:56:57:046 ProcessGPOs: The DC for domain ACME is not
available at startup. retrying
USERENV(438.640) 13:56:57:046 RetryDCContactAtMachineStartup: Failed to
query GpNetworkStartTimeoutPolicyValue with 2, exit.

USERENV(43c.440) 22:37:25:671 UnloadUserProfileP: Didn't unload user profile
<err = 19>

USERENV(43c.628) 00:17:31:447 ProcessGPOs: DSGetDCName failed with 59

I do not know exactly what this means but it is all throughout the
Userenv.log.

Joe



"Darren Mar-Elia" wrote:

Are both computer and user policies failing or just computer? Is the VPN
nailed up the whole time? Also note that when disabling slow link detection,
you need to do it both per user and per computer to affect both. I would
also fire up userenv logging and see what it says.

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related

Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at
http://www.sdmsoftware.com/products.php


"Joe" <Joe@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2712394E-5634-40BE-8787-E7EAF1C646DC@xxxxxxxxxxxxxxxx
Any information would be greatly appreciated:

I have a scenario where a branch office has a couple of Windows XP SP2
clients that connect to HQ via a site-to-site VPN connection. The VPN
connection is working properly and the Windows XP SP2 clients can log into
the domain, properly use name resolution (DNS and WINS) and they are also
getting mapped drives via AD user account properties (home directory).
However, GPOs will not apply to these clients. Everytime I run gpupdate
/force I get an event id 1054, source Userenv stating "Windows cannot not
obtain the domain controller name for your computer network. (An
unexpected
network error has occured). Group Policy processing aborted."

After some research I have disabled GP slow link detection as well as
'Fast
Logon'. I also have associated the ip subnet that these clients belong to
the
appropriate AD site. I have even gone as far as to create a separate OU
and
place the computer and user accounts in that OU and make a "test" GPO but
it
still wouldn't work.

Any feedback would be greatly appreciated.

Thx
Joe

.

Relevant Pages

  • Re: Local Group Policy Not working in Windows 2003
    ... Microsoft MVP (Windows Server System: ... Our local group policy does not work. ... > from NT to Win 2003) Then i tried login in the clients ... > to the clients workstation and nope the group policy ...
    (microsoft.public.windows.group_policy)
  • Unable to use Group policy logon....
    ... We have a new Windows 2003 AD and will be using new Windows XP clients. ... All group policy settings work and are distributed to the clients. ...
    (microsoft.public.windows.server.scripting)
  • Re: 2000 Server with XP Clients -- Policy problem
    ... Is there an idiots guide to setting up Group policy for domain users ... I can do it in Windows 2003 without any problems, ... Open Active Directory Users and Computers ... I see that for Windows XP clients working off a Windows 2000 server one ...
    (microsoft.public.win2000.group_policy)
  • Re: Local Group Policy Not working in Windows 2003
    ... >> I have a windows 2003 server that was upgraded from NT. ... Our local group policy does not work. ... >> to the clients workstation and nope the group policy ...
    (microsoft.public.windows.group_policy)
  • Re: Group Policy not everywhere applied!
    ... >I have a network with WIndows 2000 and Windows XP clients. ... > created a group policy in my AD for users and computers. ... > I have made a few settings for Outlook ...
    (microsoft.public.win2000.group_policy)