Windows 2003R2 Group Policy Errors
- From: "gary.shelton@xxxxxxxxx" <gary.shelton@xxxxxxxxx>
- Date: Tue, 30 Oct 2007 21:44:17 -0000
Hello,
I've been struggling with an issue regarding the replication of Group
Policy from our oldest domain controller to other domain controllers.
All servers are running Windows 2003 R2 32-bit standard edition. Our
Group Policy was working fine for several months, and then we began
having an issue, with the following two messages appearing every five
minutes in the Application Event Log on our DC:
1) Windows cannot access the file gpt.ini for GPO
CN={number},CN=Policies,CN=System,DC=companyname,DC=local. The file
must be present at the location < \\companyname\sysvol\companyname
\Policies\{number}\gpt.ini>. (Access is denied. ). Group Policy
processing aborted.
2) Windows cannot query for the list of Group Policy objects. Check
the event log for possible messages previously logged by the policy
engine that describes the reason for this.
I double-checked the SYSVOL share, and the GP referenced was actually
in place on both servers, and the permissions seemed correct. No
matter what I did, I couldn't get rid of this error, and group policy
wasn't being used on any of the workstations connected to the domain.
In the end, I demoted the second domain controller and removed it from
the domain. Once I had only one domain controller present, the
messages stopped, and the workstations were once again under the
effects of the Group Policy.
I then proceeded to set up another server using Windows 2003 R2, using
a different computer name. Once I promoted it to DC status, I once
again began to receive the same errors. The only way to stop these
errors was to demote and remove the new domain controller.
I really don't like running with one domain controller - we're using
Exchange 2003, and it seems like I've been having login issues with
Outlook 2007/Exchange 2003 since the move to one DC - Now, certain
users are asked for usernames and password when connecting to the
exchange server via Outlook 2007. Does anyone have any ideas on the
group policy troubles? I've tried googling for info, but my search
terms aren't up to snuff or I don't know how to phrase the problem, as
I haven't been able to turn anything up yet.
I've seen the MS KB article on a possible solution for Outlook/
Exchange, which is fine, but I would like to once again have two
domain controllers running, and group policy working between them.
Thanks,
gary
.
- Prev by Date: Re: mycompany.local question
- Next by Date: Re: Domain users vs. users
- Previous by thread: Nltest.exe Errors
- Next by thread: frsevent error after promoting to a domain controller
- Index(es):
Relevant Pages
|
