RE: Event ID: 1101 Source: GroupPolicy "Windows could not locate the d

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Hi Bob,
It looks like a replication problem since you have multiple sites, try to
wait for some time to make sure that replication took place and then try
again; while waiting you can try using replmon to check if replication is
going ok or it is facing any problems.

By the way, since all your servers are running Win2k3 R2, why don't you
raise the domain and forest levels to 2003?

Hope it helps...
--
Ziad K. Chafi
MCT, MCTS, MCDBA, MCSE: S, MCDST
CompTIA A+, CompTIA N+,


"Bob" wrote:

Hi All,

I have a single domain with multiple sites. Each site has it's own DC. All
DCs are 2003 R2, with AD running in 2000 native mode. All client PCs are
Vista.

I have started seperating users into OUs per site. Now that I have moved the
users, I am getting the attached Error on the client PCs.

I have checked that Authenticated Users have read permissions on the OU.

What else is required?


Log Name: System
Source: Microsoft-Windows-GroupPolicy
Date: 7/04/2008 12:39:38 PM
Event ID: 1101
Task Category: None
Level: Error
Keywords:
User: DOMAIN\user.name
Computer: HQIT017.domain.local
Description:
The processing of Group Policy failed. Windows could not locate the
directory object OU=NewOU,OU=Users,OU=MyBusiness,DC=domain,DC=local. Group
Policy settings will not be enforced until this event is resolved. View the
event details for more information on this error.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event";>
<System>
<Provider Name="Microsoft-Windows-GroupPolicy" />
<EventID>1101</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>1</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2008-04-07T02:39:38.549Z" />
<EventRecordID>36336</EventRecordID>
<Correlation ActivityID="{D2ABF1E7-8566-46B5-A908-F6759E875313}" />
<Execution ProcessID="1212" ThreadID="3404" />
<Channel>System</Channel>
<Computer>HQIT017.domain.local</Computer>
</System>
<EventData>
<Data Name="SupportInfo1">4</Data>
<Data Name="SupportInfo2">3095</Data>
<Data Name="ProcessingMode">0</Data>
<Data Name="ProcessingTimeInMilliseconds">4430</Data>
<Data Name="ErrorCode">13</Data>
<Data Name="ErrorDescription">The data is invalid. </Data>
<Data Name="DCName">\\SERVERNAME.domain.local</Data>
<Data
Name="DSObjectName">OU=NewOU,OU=Users,OU=MyBusiness,DC=domain,DC=local</Data>
</EventData>
</Event>



.



Relevant Pages

  • RE: Planning q
    ... There are few items you need to consider for planning the migrated Windows 2003 network. ... 5- Resource servers in the entire network and future planning for their avialbility to the users in windows 2003 network. ... About the site replication across multiple sites that is known as Intersite Replication, you may consider the following information. ...
    (microsoft.public.windows.server.active_directory)
  • Re: A.D. Replication through vpn tunneling
    ... I'm inclined to agree with Phillip, at least for multiple sites - but here ... and a T1 or 512K connection is more than adequate to support normal ... replication between 2 servers. ... If you are using RRAS for VPN, ...
    (microsoft.public.windows.server.networking)
  • AD replication - IP site to site encryption?
    ... multiple sites with one DC in each site. ... Replication between DC's will be over IP without a VPN, ... LDAP over SSL via certificates or a hardware VPN solution. ...
    (Focus-Microsoft)
  • Re: A.D. Replication through vpn tunneling
    ... The issue is generally more one of bandwidth rather than> latency, and a T1 or 512K connection is more than adequate to support normal> replication between 2 servers. ... your question is impossible to> answer without knowing a lot more about total traffic demands on your VPN> links. ... I know of several networks where a single forrest/domain> replicates fine over VPN links to multiple sites. ...
    (microsoft.public.windows.server.networking)