Re: Intermittant GPO failure to apply
- From: "NickC" <NoSpam@xxxxxxxxxxxxxx>
- Date: Mon, 1 Aug 2005 10:06:27 +0100
Hi Charles,
Q842933 has already been applied, if that worked reliably then we wouldn't
have a problem! Issue is that half of the time it doesn't get applied but
there are no relevant messages in the event logs. I have no idea why
sometimes it does apply correctly and other times it doesn't.
Nick
""Charles Yang [MSFT]"" <v-chayan@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:qk%23JxlllFHA.3472@xxxxxxxxxxxxxxxxxxxxxxxx
> Hi Nick,
>
> Welcome to our SBS newsgroup.
>
> Issue description:
>
> ==============
>
> I understand that you encountered some problem that the GPO could not be
> applied to Windows XP SP2 clients correctly.
>
> Analyzing and suggestions:
>
> ===============
>
> If you want have the Windows XP SP2 client computer in the SBS domain.
> This
> issue occurs because Group Policy in Windows Small Business Server 2003
> disables Windows Firewall for client computers that are running Windows XP
> Professional. In order to solve the problem, please applied the hotfix for
> Windows XP below:
>
> 872769 You cannot configure Windows Firewall settings or Security Center
> http://support.microsoft.com/?id=872769
>
> Please also apply the hotfix below to the SBS 2003:
>
> 842933 "The following entry in the [strings] section is too long and has
> been
> http://support.microsoft.com/?id=842933
>
> ================
> If the issue still exists, please check the event view on SBS 2003, and
> paste the error event to newsgroup, so that we can help you isolate the
> issue more clearly.
>
> More info:
>
> 873449 Changes to Group Policy behavior after installing Windows XP
> Service
> http://support.microsoft.com/?id=873449
>
> I appreciate your understanding if you have any further concerns; please
> feel free to let me know. I am glad to be of any assistance.
>
> --------------------
> | From: "NickC" <NoSpam@xxxxxxxxxxxxxx>
> | Subject: Intermittant GPO failure to apply
> | Date: Sat, 30 Jul 2005 11:28:50 +0100
> | Lines: 18
> | X-Priority: 3
> | X-MSMail-Priority: Normal
> | X-Newsreader: Microsoft Outlook Express 6.00.3790.1830
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
> | X-RFC2646: Format=Flowed; Original
> | Message-ID: <#0yb8FPlFHA.1608@xxxxxxxxxxxxxxxxxxxx>
> | Newsgroups: microsoft.public.windows.server.sbs
> | NNTP-Posting-Host: host81-130-64-44.in-addr.btopenworld.com 81.130.64.44
> | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.phx.gbl
> | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:140023
> | X-Tomcat-NG: microsoft.public.windows.server.sbs
> |
> | We have a problem on our workstations whereby around half of the time
> the
> | GPOs do not apply correctly but running 'GPUpdate /force' always
> temporarily
> | fixes the problem. Sometimes I can get all the workstations GPOs
> working
> | correctly then a few hours later they start failing without even
> rebooting!
> | Sometimes the machine boots and the GPOs are applied even before a user
> has
> | logged on, is that correct? When are GPOs supposed to be applied?
> |
> | This manifests itself in Windows Firewall problems when the Firewall
> | settings Group Policy does not get applied correctly and the Firewall
> | reverts to its XPsp2 defaults. When that happens I find that the server
> | cannot remotely manage these workstations, in fact they can't even be
> | pinged.
> |
> | Any suggestions on how I can diagnose this problem?
> |
> | Nick
> |
> |
> |
>
>
>
> Best regards,
>
> Charles Yang (MSFT)
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
>
> ======================================================
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
> When opening a new thread via the web interface, we recommend you check
> the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In
> doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> ======================================================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>
> =====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
.
- Follow-Ups:
- Re: Intermittant GPO failure to apply
- From: "Charles Yang [MSFT]"
- Re: Intermittant GPO failure to apply
- References:
- Intermittant GPO failure to apply
- From: NickC
- RE: Intermittant GPO failure to apply
- From: "Charles Yang [MSFT]"
- Intermittant GPO failure to apply
- Prev by Date: Re: slow logon after SP1 with ISA Server 2004
- Next by Date: RE: GPO has no effect
- Previous by thread: RE: Intermittant GPO failure to apply
- Next by thread: Re: Intermittant GPO failure to apply
- Index(es):
Relevant Pages
|
Loading
