Re: Group Policy not running across domain.



Yes we are running a DNS server at the remotes sites and the clinet are
configured to look to the local server and then the server at the main office.

I ran the dcdiag and the server failed to connect to the other DC in the
domain. It looks as if the last time file replication ran successfully was
over a year ago. I can connect to the other servers but it seems that the
SYSVOL is not being updated.

"Jorge Silva" wrote:

Hi
Do you have DNS servers on the remote offices?
Are the clients using their local DNS server?
Did you run dcdiag and netdiag from support tools and check for errors?
Check connectivity, FW configuration, DNS configuratio and check if
replication is working.

1- In Event Viewer, click System, and check for any networking-related
messages, such as Netlogon messages, that indicate a network connectivity
issue.
2- At the command prompt, type netdiag, and note any errors. Those errors
usually have to be resolved before Group Policy processing can continue.
3- At the command prompt, type gpupdate, and then check Event Viewer to see
if the Userenv 1053 event is logged again.
4- To verify that the domain controller can be contacted through Domain Name
System (DNS), try to access \\mydomain.com\sysvol\mydomain.com, where
mydomain.com is the fully qualified DNS name of your domain.
5- Verify that you can access the domain controller by using tools such as
the Active Directory Users and Computers snap-in.
6- Check to see whether other computers on your network are having the same
problem.
7- If this computer is a part of a cross-forest domain, verify that the
forest for the user account is currently available and can be contacted by
the computer on which the Group Policy processing failed.
Additonal related Links:
How to troubleshoot RPC Endpoint Mapper errors
http://support.microsoft.com/kb/839880/en-us
Event ID 1053 and 1058 appear in the Application log after you upgrade to
Windows 2000 Server or Windows Server 2003 with Active Directory
http://support.microsoft.com/kb/883271/en-us
EventID.net - Event ID: 1053
http://www.eventid.net/display.asp?eventid=1053&eventno=1584&source=U...

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
"Rustin" <Rustin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:8F9B85A4-1364-4FA2-AA86-0428792CD765@xxxxxxxxxxxxxxxx
I am having a issue with GP across our Domain. We have a main site and
three
remote servers at our off-site offices. If you loggin to any of the off
site
computers/server the GP is not enforced. Also in the event log you will
recieve an Event Error 1030 "Windows cannot query for the list of Group
Policy objects." Below it will be Event ID 1058 "Windows cannot access
the
file gpi.ini for GPO cn={GPO Num} (The system cannot find the path
specified). Group Policy processing aborted."



.



Relevant Pages

  • Re: Cannot get access to router on SBS server
    ... point the DNS server setting to the IP of the SBS ... calling CNetCommit::ValidateFulltimeConnectionProperties. ... Call to Reading web publishing selection returned ok. ...
    (microsoft.public.windows.server.sbs)
  • Re: Client computer internet connection problems
    ... subnet, Default Gateway, correct DNS entry/ies). ... his TCP/IP Configuration settings then he is not going to be able to join ... O*N*L*Y the internal DNS Server IP Address..... ... join the computers to my server domain. ...
    (microsoft.public.windows.server.sbs)
  • Re: Herb Martin...Global Catalog SRV record missing!
    ... Error: Root hints list has invalid root hint server: ... DNS server: 128.63.2.53 ... PTR record query for the ...
    (microsoft.public.windows.server.dns)
  • Re: Cant add further DCs to an existing domain structure
    ... Did you tried it with a fix ip configuration for the server, which most of the time is the better solution for a DC? ... something is "between" the computers. ... RPC server is not available." ...
    (microsoft.public.windows.server.active_directory)
  • [UNIX] Hardening the BIND DNS Server
    ... Hardening the BIND DNS Server ... Your Domain Name Service is the road sign to your systems on the Internet. ...
    (Securiteam)