RE: Intermittant GPO failure to apply



Hi Nick,

Welcome to our SBS newsgroup.

Issue description:

==============

I understand that you encountered some problem that the GPO could not be
applied to Windows XP SP2 clients correctly.

Analyzing and suggestions:

===============

If you want have the Windows XP SP2 client computer in the SBS domain. This
issue occurs because Group Policy in Windows Small Business Server 2003
disables Windows Firewall for client computers that are running Windows XP
Professional. In order to solve the problem, please applied the hotfix for
Windows XP below:

872769 You cannot configure Windows Firewall settings or Security Center
http://support.microsoft.com/?id=872769

Please also apply the hotfix below to the SBS 2003:

842933 "The following entry in the [strings] section is too long and has
been
http://support.microsoft.com/?id=842933

================
If the issue still exists, please check the event view on SBS 2003, and
paste the error event to newsgroup, so that we can help you isolate the
issue more clearly.

More info:

873449 Changes to Group Policy behavior after installing Windows XP Service
http://support.microsoft.com/?id=873449

I appreciate your understanding if you have any further concerns; please
feel free to let me know. I am glad to be of any assistance.

--------------------
| From: "NickC" <NoSpam@xxxxxxxxxxxxxx>
| Subject: Intermittant GPO failure to apply
| Date: Sat, 30 Jul 2005 11:28:50 +0100
| Lines: 18
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.3790.1830
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| X-RFC2646: Format=Flowed; Original
| Message-ID: <#0yb8FPlFHA.1608@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: host81-130-64-44.in-addr.btopenworld.com 81.130.64.44
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:140023
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| We have a problem on our workstations whereby around half of the time the
| GPOs do not apply correctly but running 'GPUpdate /force' always
temporarily
| fixes the problem. Sometimes I can get all the workstations GPOs working
| correctly then a few hours later they start failing without even
rebooting!
| Sometimes the machine boots and the GPOs are applied even before a user
has
| logged on, is that correct? When are GPOs supposed to be applied?
|
| This manifests itself in Windows Firewall problems when the Firewall
| settings Group Policy does not get applied correctly and the Firewall
| reverts to its XPsp2 defaults. When that happens I find that the server
| cannot remotely manage these workstations, in fact they can't even be
| pinged.
|
| Any suggestions on how I can diagnose this problem?
|
| Nick
|
|
|



Best regards,

Charles Yang (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

.



Relevant Pages

  • RE: Event log Error - Security
    ... Thank you for posting to the SBS Newsgroup. ... computer who is running Windows 2000 or Windows XP? ... A logon type of 3 translates to Network. ...
    (microsoft.public.windows.server.sbs)
  • RE: Windows 2003 Setup fails on component 25 in add or remove prog
    ... > Welcome to SBS newsgroup. ... > I understand that you encountered some problem when running SBS wizard. ... > installation of SBS 2003 setup. ... > Please note that you also need to apply SBS 2003 SP1 not only the Windows ...
    (microsoft.public.windows.server.sbs)
  • RE: DFS & GPO Problems
    ... Thank you for posting in SBS newsgroup. ... DNS Server address is not configured correctly on the affected ... We can also try to disable the Windows Firewall on the problematic ...
    (microsoft.public.windows.server.sbs)
  • RE: Windows 2003 Setup fails on component 25 in add or remove programs
    ... Welcome to SBS newsgroup. ... I understand that you encountered some problem when running SBS wizard. ... installation of SBS 2003 setup. ... Please note that you also need to apply SBS 2003 SP1 not only the Windows ...
    (microsoft.public.windows.server.sbs)
  • RE: Windows 2003 Setup fails on component 25 in add or remove prog
    ... can refer to my suggestion in my previous post apply SBS 2003 SP1. ... 825763 How to configure Internet access in Windows Small Business Server ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)