Re: Intermittant GPO failure to apply

Hi Nick,

Thanks for updates.

Before we go any further, please also make sure that you have applied the
hotfix list in KB 872769, it did relate to policy on firewall setting on
Windows XP.

If so, if you create a new group policy on SBS 2003 domain, does the issue
still exist or not?

If the problem still exists, please follow the steps below to gather the
group policy log.

C:\Program Files\Microsoft Integration\Windows Small Business
2003\logs\setup.log.
C:\Program Files\Microsoft Integration\Windows Small Business
2003\logs\sbsmsi-gpmc.log

Please also refer to KB article below to enable this log files and
reproduce the issue then paste the log files:

221833 How to enable user environment debug logging in retail builds of
Windows
http://support.microsoft.com/?id=221833

You can send the log files to my mail box: v-chayan@xxxxxxxxxxxxx


Thanks for your effort. I will be here waiting for your updates.

--------------------
| From: "NickC" <NoSpam@xxxxxxxxxxxxxx>
| References: <#0yb8FPlFHA.1608@xxxxxxxxxxxxxxxxxxxx>
<qk#JxlllFHA.3472@xxxxxxxxxxxxxxxxxxxxx>
| Subject: Re: Intermittant GPO failure to apply
| Date: Mon, 1 Aug 2005 10:06:27 +0100
| Lines: 148
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.3790.1830
| X-RFC2646: Format=Flowed; Original
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| Message-ID: <u$KSRhnlFHA.1412@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: mail.stkittsnevisregistry.net 194.164.85.19
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:140414
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi Charles,
|
| Q842933 has already been applied, if that worked reliably then we
wouldn't
| have a problem! Issue is that half of the time it doesn't get applied
but
| there are no relevant messages in the event logs. I have no idea why
| sometimes it does apply correctly and other times it doesn't.
|
| Nick
|
|
| ""Charles Yang [MSFT]"" <v-chayan@xxxxxxxxxxxxxxxxxxxx> wrote in message
| news:qk%23JxlllFHA.3472@xxxxxxxxxxxxxxxxxxxxxxxx
| > Hi Nick,
| >
| > Welcome to our SBS newsgroup.
| >
| > Issue description:
| >
| > ==============
| >
| > I understand that you encountered some problem that the GPO could not be
| > applied to Windows XP SP2 clients correctly.
| >
| > Analyzing and suggestions:
| >
| > ===============
| >
| > If you want have the Windows XP SP2 client computer in the SBS domain.
| > This
| > issue occurs because Group Policy in Windows Small Business Server 2003
| > disables Windows Firewall for client computers that are running Windows
XP
| > Professional. In order to solve the problem, please applied the hotfix
for
| > Windows XP below:
| >
| > 872769 You cannot configure Windows Firewall settings or Security Center
| > http://support.microsoft.com/?id=872769
| >
| > Please also apply the hotfix below to the SBS 2003:
| >
| > 842933 "The following entry in the [strings] section is too long and has
| > been
| > http://support.microsoft.com/?id=842933
| >
| > ================
| > If the issue still exists, please check the event view on SBS 2003, and
| > paste the error event to newsgroup, so that we can help you isolate the
| > issue more clearly.
| >
| > More info:
| >
| > 873449 Changes to Group Policy behavior after installing Windows XP
| > Service
| > http://support.microsoft.com/?id=873449
| >
| > I appreciate your understanding if you have any further concerns; please
| > feel free to let me know. I am glad to be of any assistance.
| >
| > --------------------
| > | From: "NickC" <NoSpam@xxxxxxxxxxxxxx>
| > | Subject: Intermittant GPO failure to apply
| > | Date: Sat, 30 Jul 2005 11:28:50 +0100
| > | Lines: 18
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.3790.1830
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| > | X-RFC2646: Format=Flowed; Original
| > | Message-ID: <#0yb8FPlFHA.1608@xxxxxxxxxxxxxxxxxxxx>
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | NNTP-Posting-Host: host81-130-64-44.in-addr.btopenworld.com
81.130.64.44
| > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:140023
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | We have a problem on our workstations whereby around half of the time
| > the
| > | GPOs do not apply correctly but running 'GPUpdate /force' always
| > temporarily
| > | fixes the problem. Sometimes I can get all the workstations GPOs
| > working
| > | correctly then a few hours later they start failing without even
| > rebooting!
| > | Sometimes the machine boots and the GPOs are applied even before a
user
| > has
| > | logged on, is that correct? When are GPOs supposed to be applied?
| > |
| > | This manifests itself in Windows Firewall problems when the Firewall
| > | settings Group Policy does not get applied correctly and the Firewall
| > | reverts to its XPsp2 defaults. When that happens I find that the
server
| > | cannot remotely manage these workstations, in fact they can't even be
| > | pinged.
| > |
| > | Any suggestions on how I can diagnose this problem?
| > |
| > | Nick
| > |
| > |
| > |
| >
| >
| >
| > Best regards,
| >
| > Charles Yang (MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > ======================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
| > the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
| > doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > ======================================================
| > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| >
| >
| > =====================================================
| > When responding to posts, please "Reply to Group" via your newsreader so
| > that others may learn and benefit from your issue.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| >
|
|
|



Best regards,

Charles Yang (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

.

Relevant Pages

  • RE: old 5.5 servers
    ... Open the local hard drive containing Windows ... Click to open the "ie7" folder and then click to open the spuninst folder ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.exchange.admin)
  • Re: SBS 2003 Fax Sharepoint Routing
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... reinstall the Windows fax service to test? ... it means that the installation didn''t go ...
    (microsoft.public.windows.server.sbs)
  • RE: Users adding printers
    ... Where is a wonderful article on how to install a printer which is useful ... Deploying Printers to Users or Computers by using Group Policy Print ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: My Documents redirect stopped working on one user profile.
    ... my understanding is that ALL DC's 'send out' Group Policy. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Expand OU you want to configure Folder Redirection and then ...
    (microsoft.public.windows.server.sbs)
  • Re: Some PCs no longer picking up group policise set by SBS
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... >> I understand that the Group Policy does not being applied to some of your ... Do those problematic client workstations locate at the same OU ...
    (microsoft.public.windows.server.sbs)