Re: Intermittant GPO failure to apply

Charles,

What about the UserEnv errors: 'GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.' do these actually indicate real GPO
errors or does everyone get these?

Also what about the UPHClean errors how do I determine what is causing
these?

Thanks,
Nick


""Charles Yang [MSFT]"" <v-chayan@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:yK%23Vz$dqFHA.3800@xxxxxxxxxxxxxxxxxxxxxxxx
> Hi Nick,
>
> Thanks for updates.
>
> I will waiting for your results, as I mentioned we could not troubleshoot
> the root cause of this problem via newsgroup, it might be a complex
> problem, as I referred many factors might blocked the GPO updates,
> firewall
> anti-virus software or SMB signing.
>
> Sorry for inconvenience, and thanks for your efforts.
>
>
>
> Best regards,
>
> Charles Yang (MSFT)
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
>
> ======================================================
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
> When opening a new thread via the web interface, we recommend you check
> the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In
> doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> ======================================================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>
> =====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> --------------------
> | From: "NickC" <NoSpam@xxxxxxxxxxxxxx>
> | References: <#0yb8FPlFHA.1608@xxxxxxxxxxxxxxxxxxxx>
> <qk#JxlllFHA.3472@xxxxxxxxxxxxxxxxxxxxx>
> <u$KSRhnlFHA.1412@xxxxxxxxxxxxxxxxxxxx>
> <lF03VAwlFHA.3672@xxxxxxxxxxxxxxxxxxxxx>
> <eyM9CI1lFHA.1948@xxxxxxxxxxxxxxxxxxxx>
> <3NgMzq8lFHA.3120@xxxxxxxxxxxxxxxxxxxxx>
> <bdNyKYNmFHA.940@xxxxxxxxxxxxxxxxxxxxx>
> <OUgO7kOmFHA.1232@xxxxxxxxxxxxxxxxxxxx>
> <LEzjLcVmFHA.944@xxxxxxxxxxxxxxxxxxxxx>
> <eInxpswpFHA.2904@xxxxxxxxxxxxxxxxxxxx>
> <frb2Q85pFHA.1208@xxxxxxxxxxxxxxxxxxxxx>
> | Subject: Re: Intermittant GPO failure to apply
> | Date: Thu, 25 Aug 2005 17:40:34 +0100
> | Lines: 305
> | X-Priority: 3
> | X-MSMail-Priority: Normal
> | X-Newsreader: Microsoft Outlook Express 6.00.3790.1830
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
> | X-RFC2646: Format=Flowed; Original
> | Message-ID: <#SZQAPZqFHA.3540@xxxxxxxxxxxxxxxxxxxx>
> | Newsgroups: microsoft.public.windows.server.sbs
> | NNTP-Posting-Host: 194.164.85.19
> | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP14.phx.gbl
> | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:147801
> | X-Tomcat-NG: microsoft.public.windows.server.sbs
> |
> | Hi Charles,
> |
> | Disabling the rename administrator account GPO and others didn't seem to
> | help so have now re-enabled them.
> |
> | All SMB signing GPO settings are now set to disabled so will wait and
> see
> | what effect that has (must remember to reboot the server a few times).
> |
> | Workstations do indeed have Trend Micro CSM for SMB remotely installed
> and
> | updating from the SBS server. Problem is these workstations are all
> live
> so
> | I cannot safely leave virus checking disabled. Do you have any more
> | information about this possible Trend Micro problem?
> |
> | UPHClean is installed and reports the following error but I can't see
> how
> to
> | identify which application is actually causing this:
> | The following handles opened in user profile hive
> <DOMAINNAME>\<username>
> | (S-1-5-21-3513629081-3873135916-3088626867-1364) are preventing the
> profile
> | from unloading:
> | svchost.exe (888)
> | HKCU (0x3a0)
> |
> |
> | Regards,
> | Nick
> |
> |
> |
> | Hi,
> |
> | Thanks for updates.
> |
> | From the information you gave to me, we can not identify the root cause,
> | have you try my suggestion in my last reply, I would like to paste them
> | again:
> |
> |
> | FYI:
> |
> | What I means about Trend is to disable it on the client computer if you
> | have also deploy it on client computer, as I know there is some problem
> on
> | this software if you deploy it on client computer.
> |
> | As this is an intermittent issue, so it might need some time to
> | troubleshoot. in my previous reply, I suggest you disable all the SMB
> | signing on both client computer and server, please also make sure that
> you
> | have disable all the SMB signing on the group policy. You can refer to
> the
> | article below to disable it.
> |
> | Please refer to the following link to disable the SMB signing to see if
> the
> | slow network access issue will be resolved:
> | http://www.smallbizserver.net/Default.aspx?tabid=98
> |
> | I appreciate your effort on this issue.
> |
> |
> |
> | Best regards,
> |
> | Charles Yang (MSFT)
> |
> |
> | ""Charles Yang [MSFT]"" <v-chayan@xxxxxxxxxxxxxxxxxxxx> wrote in message
> | news:frb2Q85pFHA.1208@xxxxxxxxxxxxxxxxxxxxxxxx
> | > Hi,
> | >
> | > Thanks for updates.
> | >
> | > From the information you gave to me, we can not identify the root
> cause,
> | > have you try my suggestion in my last reply, I would like to paste
> them
> | > again:
> | >
> | >
> | > FYI:
> | >
> | > What I means about Trend is to disable it on the client computer if
> you
> | > have also deploy it on client computer, as I know there is some
> problem
> on
> | > this software if you deploy it on client computer.
> | >
> | > As this is an intermittent issue, so it might need some time to
> | > troubleshoot. in my previous reply, I suggest you disable all the SMB
> | > signing on both client computer and server, please also make sure that
> you
> | > have disable all the SMB signing on the group policy. You can refer to
> the
> | > article below to disable it.
> | >
> | > Please refer to the following link to disable the SMB signing to see
> if
> | > the
> | > slow network access issue will be resolved:
> | > http://www.smallbizserver.net/Default.aspx?tabid=98
> | >
> | > I appreciate your effort on this issue.
> | >
> | >
> | >
> | > Best regards,
> | >
> | > Charles Yang (MSFT)
> | >
> | > Microsoft CSS Online Newsgroup Support
> | >
> | > Get Secure! - www.microsoft.com/security
> | >
> | > ======================================================
> | > This newsgroup only focuses on SBS technical issues. If you have
> issues
> | > regarding other Microsoft products, you'd better post in the
> corresponding
> | > newsgroups so that they can be resolved in an efficient and timely
> manner.
> | > You can locate the newsgroup here:
> | > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
> | >
> | > When opening a new thread via the web interface, we recommend you
> check
> | > the
> | > "Notify me of replies" box to receive e-mail notifications when there
> are
> | > any updates in your thread. When responding to posts via your
> newsreader,
> | > please "Reply to Group" so that others may learn and benefit from your
> | > issue.
> | >
> | > Microsoft engineers can only focus on one issue per thread. Although
> we
> | > provide other information for your reference, we recommend you post
> | > different incidents in different threads to keep the thread clean. In
> | > doing
> | > so, it will ensure your issues are resolved in a timely manner.
> | >
> | > For urgent issues, you may want to contact Microsoft CSS directly.
> Please
> | > check http://support.microsoft.com for regional support phone numbers.
> | >
> | > Any input or comments in this thread are highly appreciated.
> | > ======================================================
> | > This posting is provided "AS IS" with no warranties, and confers no
> | > rights.
> | >
> | >
> | > =====================================================
> | > When responding to posts, please "Reply to Group" via your newsreader
> so
> | > that others may learn and benefit from your issue.
> | > =====================================================
> | >
> | > This posting is provided "AS IS" with no warranties, and confers no
> | > rights.
> | >
> | > --------------------
> | > | From: "NickC" <NoSpam@xxxxxxxxxxxxxx>
> | > | References: <#0yb8FPlFHA.1608@xxxxxxxxxxxxxxxxxxxx>
> | > <qk#JxlllFHA.3472@xxxxxxxxxxxxxxxxxxxxx>
> | > <u$KSRhnlFHA.1412@xxxxxxxxxxxxxxxxxxxx>
> | > <lF03VAwlFHA.3672@xxxxxxxxxxxxxxxxxxxxx>
> | > <eyM9CI1lFHA.1948@xxxxxxxxxxxxxxxxxxxx>
> | > <3NgMzq8lFHA.3120@xxxxxxxxxxxxxxxxxxxxx>
> | > <bdNyKYNmFHA.940@xxxxxxxxxxxxxxxxxxxxx>
> | > <OUgO7kOmFHA.1232@xxxxxxxxxxxxxxxxxxxx>
> | > <LEzjLcVmFHA.944@xxxxxxxxxxxxxxxxxxxxx>
> | > | Subject: Re: Intermittant GPO failure to apply
> | > | Date: Mon, 22 Aug 2005 12:17:58 +0100
> | > | Lines: 120
> | > | X-Priority: 3
> | > | X-MSMail-Priority: Normal
> | > | X-Newsreader: Microsoft Outlook Express 6.00.3790.1830
> | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
> | > | X-RFC2646: Format=Flowed; Original
> | > | Message-ID: <eInxpswpFHA.2904@xxxxxxxxxxxxxxxxxxxx>
> | > | Newsgroups: microsoft.public.windows.server.sbs
> | > | NNTP-Posting-Host: mail.stkittsnevisregistry.net 194.164.85.19
> | > | Path:
> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
> | > | Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windows.server.sbs:146589
> | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
> | > |
> | > | Hi Charles,
> | > |
> | > |
> | > |
> | > | UPHClean now installed and logging the following errors:
> | > |
> | > |
> | > |
> | > | Event Type: Information
> | > |
> | > | Event Source: UPHClean
> | > |
> | > | Event Category: None
> | > |
> | > | Event ID: 1501
> | > |
> | > | Date: 18/08/2005
> | > |
> | > | Time: 16:32:11
> | > |
> | > | User: <DOMAINNAME>\<username>
> | > |
> | > | Computer: <DOMAINNAME>5
> | > |
> | > | Description:
> | > |
> | > |
> | > |
> | > | The following handles opened in user profile hive
> | > <DOMAINNAME>\<username>
> | > | (S-1-5-21-3513629081-3873135916-3088626867-1364) are preventing the
> | > profile
> | > | from unloading:
> | > |
> | > |
> | > |
> | > | svchost.exe (888)
> | > |
> | > | HKCU (0x3a0)
> | > |
> | > |
> | > |
> | > |
> | > |
> | > |
> | > | How can I tell what application is causing this?
> | > |
> | > | Thanks,
> | > | Nick
> | > |
> | > |
> | > | ""Charles Yang [MSFT]"" <v-chayan@xxxxxxxxxxxxxxxxxxxx> wrote in
> message
> | > | news:LEzjLcVmFHA.944@xxxxxxxxxxxxxxxxxxxxxxxx
> | > | > HI NICK,
> | > | >
> | > | > Thanks for quickly updates.
> | > | >
> | > | > After researching the error 1517, I found it might relate to group
> | > policy
> | > | > is not update, you can refer to my suggestion below:
> | > | >
> | > | > Many system and service processes do work on behalf of users.
> When
> | > the
> | > | > work is done the system or service process is responsible for
> | > releasing
> | > | > handles it has to the user profile hive. If this is not done by
> the
> | > | > service as the user logs off the profile cannot be unloaded.
> | > | >
> | > | > This problem in code can be caused by improper coding either in
> | > Microsoft
> | > | > software or 3rd party software (e.g. printer drivers, virus
> scanner
> | > | > service, etc). With the information provided by the system there
> is
> | > no
> | > | > way
> | > | > to find out what software needs to be corrected to allow profiles
> to
> | > | > unload.
> | > | >
> | > | > Why we use UPHCLEAN
> | > | > ====================
> | > | > In the past these issues have been fixed by code changes to
> release
> | > the
> | > | > registry handle. The disadvantage of this approach is that in
> many
> | > cases
> | > | > multiple issues (different code paths) are causing the profiles to
> not
> | > | > unload. Unless all problem code paths are fixed profiles do not
> | > unload.
> | > | >
> | > | > The concept of UPHClean is to deal with these the same way the
> | > operating
> | > | > system deals with other resource issues: when a task is done
> resources
> | > | > (memory, handles, etc) are automatically reclaimed. UPHClean
> | > | > accomplishesthis simply by monitoring for users to log off and
> | > verifying
> | > | > that unused resources are reclaimed. If they are not it reclaims
> the
> | > | > resource and logsits action. This approach is superior as it
> works
> | > for
> | > | > any
> | > | > known reason that profiles do not unload and also will keep
> working
> to
> | > | > address new unknown issues.
> | > | >
> | > | > Another advantage to UPHClean is that no computer restart is
> required
> | > to
> | > | > install it or remove it (except on Windows NT 4). You can install
> and
> | > | > remove UPHClean to find out whether it helps with a profile unload
> | > problem
> | > | > or not. You can do this without having to worry about what
> hotfix,
> | > | > service
> | > | > pack, feature pack, etc has been installed. Set it and forget is
> the
> | > goal
> | > | > ofUPHClean.
> | > | >
> | > | > By default UPHClean takes action to allow profiles to unload. You
> can
> | > | > choose to have UPHClean only report what processes it finds
> preventing
> | > | > profiles from unloading. To do this, install UPHClean and use the
> | > | > registry
> | > | > editor to set:
> | > | >
> | > | >
> HKLM\System\CurrentControlSet\Services\UPHClean\Parameters\REPORT_ONLY
> | > to
> | > | > 1
> | > | >
> | > | > 837115 Troubleshooting profile unload issues
> | > | > http://support.microsoft.com/?id=837115
> | > | >
> | > | > If possible please perform my steps above and paste any progress
> to
> | > | > newsgroup, thanks for your effort in this issue.
> | > | >
> | > | >
> | > | >
> | > | > Best regards,
> | > | >
> | > | > Charles Yang (MSFT)
> | > | >
> | > | > Microsoft CSS Online Newsgroup Support
> | > | >
> | > |
> | > |
> | > |
> | >
> |
> |
> |
>


.

Relevant Pages

  • Re: Intermittant GPO failure to apply
    ... This problem should relate to SMB signing, as we checked it on our SBS test ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: Active Sync OMA http/1.1 500 error
    ... > use Basic Authentication for these three VD, disable SSL Windows ... > Microsoft CSS Online Newsgroup Support ... > This newsgroup only focuses on SBS technical issues. ... > | But by disabling it my OWA stopped to work. ...
    (microsoft.public.windows.server.sbs)
  • RE: OT: Group Policy for Winxp
    ... automatic search for network printer and folders through GP. ... thank you for using Microsoft newsgroup. ... >>Can someone please point me in the direction of disabling the function ...
    (microsoft.public.windows.server.sbs)
  • RE: domain controller security policy disabled
    ... I'd like to give you some information about SMB signing. ... Group Policy Error Message When Appropriate Sysvol Contents Are Missing ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Intermittant GPO failure to apply
    ... Thanks for updates. ... Microsoft CSS Online Newsgroup Support ... | Disabling the rename administrator account GPO and others didn't seem to ...
    (microsoft.public.windows.server.sbs)