Re: Failure to update domain policy Impersonate a client after authenication

Sounds like either a replication or policy application issue. If the policy
isn't set like that on the DC you checked, but these people are still
getting the old setting, then two things spring to mind:

The DC that they are pulling policy from has an issue with FRS (e.g.
NTFRS_JRNL_WRAP) and SYSVOL is not replicating.

Or

The machine isn't processing GPO due to a network, DNS or other error.

Cached credentials won't cause this but could prove the latter point above.

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net




.

Relevant Pages

  • Re: New GPO Not Recognized by Clients
    ... Running replmon--searching DC's for replication failures yielded no failures. ... SYSVOL portion of the GPO is not replicating to those DCs. ... Script Group Policy Settings with the GPExpert Scripting Toolkit for ... Friendly name: TIS Staff Policy ...
    (microsoft.public.windows.server.active_directory)
  • Re: Custom GPO Version Mismatch
    ... AD replication errors? ... Check out http://www.gpoguy.com -- The Windows Group Policy Information Hub: ... the Windows Group Policy Guide is out from Microsoft Press!!! ... getting any replication errors on those two servers. ...
    (microsoft.public.windows.group_policy)
  • Re: urgent , VSS problem pls help
    ... Default Domain Controllers policy, ... are having problems with replication, it will also affect replicating user ... >> Exchange MVP ... >>> Microsoft Volume Shadow Copy Service. ...
    (microsoft.public.exchange.admin)
  • Re: Path Rules - Enabled Paths sometime are restricted
    ... After careful review of the replication logs in event viewer on Skip, ... GpoTool said all GPO are now consistent on all ... > Check to see if SRP are configured on any other Group Policy including locally ... >> all DC were as expected and DNS records were good. ...
    (microsoft.public.windows.group_policy)
  • Re: Group Policy version in SYSVOL and AD do not match
    ... sometimes they will be out of synch ... You mentioned that you have placed a .txt file in the SYSVOL of one Domain ... What you are checking here is the replication. ... The GPT, or Group Policy Template, resides in the SYSVOL ...
    (microsoft.public.win2000.active_directory)