Re: Intermittant GPO failure to apply
- From: v-chayan@xxxxxxxxxxxxxxxxxxxx ("Charles Yang [MSFT]")
- Date: Mon, 03 Oct 2005 01:32:41 GMT
HI Nick,
Thanks for updates.
MSN will not cause that problem, as I know this kinds of problem should be
caused by the firewall or third party anti-virus software, in the meantime,
could you check on your SBS 2003, does the event 1030 and 1058 still occurs
or not. If only the error 1030 occurs you did not need to anxious about it,
if the problem still occurs on many workstation and impact the network
connection, it should be caused by the firewall is blocked the GPO, if ISA
2004 is applied you need to make sure that IP fragments is not enabled on
the ISA server.
Please feel free to post back, I appreciated your understanding, as the
issue is complexity so we might have to trouble shoot for a little long
time.
Best regards,
Charles Yang (MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "NickC" <NoSpam@xxxxxxxxxxxxxx>
| References: <#0yb8FPlFHA.1608@xxxxxxxxxxxxxxxxxxxx>
<qk#JxlllFHA.3472@xxxxxxxxxxxxxxxxxxxxx>
<u$KSRhnlFHA.1412@xxxxxxxxxxxxxxxxxxxx>
<lF03VAwlFHA.3672@xxxxxxxxxxxxxxxxxxxxx>
<eyM9CI1lFHA.1948@xxxxxxxxxxxxxxxxxxxx>
<3NgMzq8lFHA.3120@xxxxxxxxxxxxxxxxxxxxx>
<bdNyKYNmFHA.940@xxxxxxxxxxxxxxxxxxxxx>
<OUgO7kOmFHA.1232@xxxxxxxxxxxxxxxxxxxx>
<LEzjLcVmFHA.944@xxxxxxxxxxxxxxxxxxxxx>
<eInxpswpFHA.2904@xxxxxxxxxxxxxxxxxxxx>
<frb2Q85pFHA.1208@xxxxxxxxxxxxxxxxxxxxx>
<#SZQAPZqFHA.3540@xxxxxxxxxxxxxxxxxxxx>
<yK#Vz$dqFHA.3800@xxxxxxxxxxxxxxxxxxxxx>
<#ba#kpyrFHA.260@xxxxxxxxxxxxxxxxxxxx>
<QGRcwO1rFHA.1208@xxxxxxxxxxxxxxxxxxxxx>
<#jst677rFHA.2592@xxxxxxxxxxxxxxxxxxxx>
<Kjq00ZbsFHA.3604@xxxxxxxxxxxxxxxxxxxxx>
<eTfXlThsFHA.460@xxxxxxxxxxxxxxxxxxxx>
<IWea9FosFHA.3604@xxxxxxxxxxxxxxxxxxxxx>
<ISy7Ut0sFHA.1204@xxxxxxxxxxxxxxxxxxxxx>
| Subject: Re: Intermittant GPO failure to apply
| Date: Sat, 1 Oct 2005 18:18:45 +0100
| Lines: 1277
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.3790.1830
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| X-RFC2646: Format=Flowed; Original
| Message-ID: <#NV5wwqxFHA.3556@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: host81-130-170-11.in-addr.btopenworld.com 81.130.170.11
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP12.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:157941
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Latest observations:
|
| We have a new workstation, exactly the same as all the others, which does
| not seem to suffer from this problem. The only difference that I can see
is
| that it has not had MSN messenger installed on it! Is there anyway that
MSN
| messenger could be causing these GPO problems?
|
| Nick
|
|
| ""Charles Yang [MSFT]"" <v-chayan@xxxxxxxxxxxxxxxxxxxx> wrote in message
| news:ISy7Ut0sFHA.1204@xxxxxxxxxxxxxxxxxxxxxxxx
| > HI Nick,
| >
| > After checking for your event log, we found the error 1030 and 1058 did
| > not
| > occur every days, it seems just occur accidentally. It seems to be
blocked
| > by the anti-virus software, as I know group policy will updates the
| > client's policy every hours, some time the package might be blocked by
the
| > anti-virus software.
| >
| > As you refer, I checked the userenv log and event log also your group
| > policy. We could not find any relative information relate to this
error,
| > as
| > it did not occur frequently. We may need to monitor it to see if this
| > occur
| > every time, and when it occur does it impact your SBS network
connections.
| >
| > If you still want to know the root cause of this issue, you might have
to
| > contact CSS, as newsgroup might not be suitable to deal with the
| > complexity
| > problem.
| >
| > Thanks for understanding. I am glad to help you.
| >
| >
| >
| > Best regards,
| >
| > Charles Yang (MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > ======================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
| > the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
| > doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > ======================================================
| > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| >
| >
| > =====================================================
| > When responding to posts, please "Reply to Group" via your newsreader so
| > that others may learn and benefit from your issue.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| >
| > --------------------
| > | X-Tomcat-ID: 90461791
| > | References: <#0yb8FPlFHA.1608@xxxxxxxxxxxxxxxxxxxx>
| > <qk#JxlllFHA.3472@xxxxxxxxxxxxxxxxxxxxx>
| > <u$KSRhnlFHA.1412@xxxxxxxxxxxxxxxxxxxx>
| > <lF03VAwlFHA.3672@xxxxxxxxxxxxxxxxxxxxx>
| > <eyM9CI1lFHA.1948@xxxxxxxxxxxxxxxxxxxx>
| > <3NgMzq8lFHA.3120@xxxxxxxxxxxxxxxxxxxxx>
| > <bdNyKYNmFHA.940@xxxxxxxxxxxxxxxxxxxxx>
| > <OUgO7kOmFHA.1232@xxxxxxxxxxxxxxxxxxxx>
| > <LEzjLcVmFHA.944@xxxxxxxxxxxxxxxxxxxxx>
| > <eInxpswpFHA.2904@xxxxxxxxxxxxxxxxxxxx>
| > <frb2Q85pFHA.1208@xxxxxxxxxxxxxxxxxxxxx>
| > <#SZQAPZqFHA.3540@xxxxxxxxxxxxxxxxxxxx>
| > <yK#Vz$dqFHA.3800@xxxxxxxxxxxxxxxxxxxxx>
| > <#ba#kpyrFHA.260@xxxxxxxxxxxxxxxxxxxx>
| > <QGRcwO1rFHA.1208@xxxxxxxxxxxxxxxxxxxxx>
| > <#jst677rFHA.2592@xxxxxxxxxxxxxxxxxxxx>
| > <Kjq00ZbsFHA.3604@xxxxxxxxxxxxxxxxxxxxx>
| > <eTfXlThsFHA.460@xxxxxxxxxxxxxxxxxxxx>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain
| > | Content-Transfer-Encoding: 7bit
| > | From: v-chayan@xxxxxxxxxxxxxxxxxxxx ("Charles Yang [MSFT]")
| > | Organization: Microsoft
| > | Date: Tue, 06 Sep 2005 01:22:42 GMT
| > | Subject: Re: Intermittant GPO failure to apply
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > | Message-ID: <IWea9FosFHA.3604@xxxxxxxxxxxxxxxxxxxxx>
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | Lines: 908
| > | Path: TK2MSFTNGXA01.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:150975
| > | NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
| > |
| > | Hi Nick,
| > |
| > | After checking your group policy, we also need to check your event
log,
| > | could you send me the application log and system event log in event
view
| > | for further research.
| > |
| > | Thanks for understanding, Please send the log files to me.
| > | v-chayan@xxxxxxxxxxxxx
| > |
| > |
| > | Best regards,
| > |
| > | Charles Yang (MSFT)
| > |
| > | Microsoft CSS Online Newsgroup Support
| > |
| > | Get Secure! - www.microsoft.com/security
| > |
| > | ======================================================
| > | This newsgroup only focuses on SBS technical issues. If you have
issues
| > | regarding other Microsoft products, you'd better post in the
| > corresponding
| > | newsgroups so that they can be resolved in an efficient and timely
| > manner.
| > | You can locate the newsgroup here:
| > | http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| > |
| > | When opening a new thread via the web interface, we recommend you
check
| > the
| > | "Notify me of replies" box to receive e-mail notifications when there
| > are
| > | any updates in your thread. When responding to posts via your
| > newsreader,
| > | please "Reply to Group" so that others may learn and benefit from your
| > | issue.
| > |
| > | Microsoft engineers can only focus on one issue per thread. Although
we
| > | provide other information for your reference, we recommend you post
| > | different incidents in different threads to keep the thread clean. In
| > doing
| > | so, it will ensure your issues are resolved in a timely manner.
| > |
| > | For urgent issues, you may want to contact Microsoft CSS directly.
| > Please
| > | check http://support.microsoft.com for regional support phone numbers.
| > |
| > | Any input or comments in this thread are highly appreciated.
| > | ======================================================
| > | This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > |
| > |
| > | =====================================================
| > | When responding to posts, please "Reply to Group" via your newsreader
so
| > | that others may learn and benefit from your issue.
| > | =====================================================
| > |
| > | This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > |
| > | --------------------
| > | | From: "NickC" <NoSpam@xxxxxxxxxxxxxx>
| > | | References: <#0yb8FPlFHA.1608@xxxxxxxxxxxxxxxxxxxx>
| > | <qk#JxlllFHA.3472@xxxxxxxxxxxxxxxxxxxxx>
| > | <u$KSRhnlFHA.1412@xxxxxxxxxxxxxxxxxxxx>
| > | <lF03VAwlFHA.3672@xxxxxxxxxxxxxxxxxxxxx>
| > | <eyM9CI1lFHA.1948@xxxxxxxxxxxxxxxxxxxx>
| > | <3NgMzq8lFHA.3120@xxxxxxxxxxxxxxxxxxxxx>
| > | <bdNyKYNmFHA.940@xxxxxxxxxxxxxxxxxxxxx>
| > | <OUgO7kOmFHA.1232@xxxxxxxxxxxxxxxxxxxx>
| > | <LEzjLcVmFHA.944@xxxxxxxxxxxxxxxxxxxxx>
| > | <eInxpswpFHA.2904@xxxxxxxxxxxxxxxxxxxx>
| > | <frb2Q85pFHA.1208@xxxxxxxxxxxxxxxxxxxxx>
| > | <#SZQAPZqFHA.3540@xxxxxxxxxxxxxxxxxxxx>
| > | <yK#Vz$dqFHA.3800@xxxxxxxxxxxxxxxxxxxxx>
| > | <#ba#kpyrFHA.260@xxxxxxxxxxxxxxxxxxxx>
| > | <QGRcwO1rFHA.1208@xxxxxxxxxxxxxxxxxxxxx>
| > | <#jst677rFHA.2592@xxxxxxxxxxxxxxxxxxxx>
| > | <Kjq00ZbsFHA.3604@xxxxxxxxxxxxxxxxxxxxx>
| > | | Subject: Re: Intermittant GPO failure to apply
| > | | Date: Mon, 5 Sep 2005 13:25:19 +0100
| > | | Lines: 889
| > | | X-Priority: 3
| > | | X-MSMail-Priority: Normal
| > | | X-Newsreader: Microsoft Outlook Express 6.00.3790.1830
| > | | X-RFC2646: Format=Flowed; Original
| > | | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| > | | Message-ID: <eTfXlThsFHA.460@xxxxxxxxxxxxxxxxxxxx>
| > | | Newsgroups: microsoft.public.windows.server.sbs
| > | | NNTP-Posting-Host: mail.stkittsnevisregistry.net 194.164.85.19
| > | | Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP15.phx.gbl
| > | | Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.sbs:150828
| > | | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > | |
| > | | Charles,
| > | |
| > | | GPO backup files and emailed to you.
| > | |
| > | | With regard to the user profiles, I can't help but think that we are
| > | looking
| > | | in the wrong place for this error. When the GPOs work correctly the
| > | machine
| > | | is connected and pingable even before any users have logged on so
that
| > | makes
| > | | me think that this is not related to user accounts, what do you
think?
| > | |
| > | | I have created a new user with roaming profile just like the rest
but
| > | even
| > | | that doesn't have an ntuser.pol file anywhere, maybe roaming
profiles
| > | don't
| > | | have this file? Logging on to a failed machine as the new user
still
| > | | doesn't solve the problem, but log onto a spare machine as any user
| > and
| > | that
| > | | spare machine is ok. This is looking much more like a
| > machine/network
| > | | problem rather than a user account issue.
| > | |
| > | | Nick
| > | |
| > | |
| > | |
| > | | ""Charles Yang [MSFT]"" <v-chayan@xxxxxxxxxxxxxxxxxxxx> wrote in
| > message
| > | | news:Kjq00ZbsFHA.3604@xxxxxxxxxxxxxxxxxxxxxxxx
| > | | > Hi Nick,
| > | | >
| > | | > Thanks for updates.
| > | | >
| > | | > From your description, it seems you could not find the files in
| > | | > administrator's profiles.
| > | | >
| > | | > As I know this should be created when establishing the profiles,
| > could
| > | you
| > | | > test if possible to create a new profiles to see if this issue
still
| > | | > occur,
| > | | > if you want to access other's profiles, you need to grant extra
| > | permission
| > | | > for administrator in the folder redirection policy.
| > | | >
| > | | > In order to make the issue more clear, we need to export all the
| > policy
| > | | > and
| > | | > import to my test machine, so that we can help reproduce the
issue
| > to
| > | see
| > | | > if the we can find some solutions.
| > | | >
| > | | > Backup all the group policy:
| > | | >
| > | | > 1. Right click group policy objects in the server management.
| > | | > 2. Choose backup all
| > | | > 3. Send the files to me v-chayan@xxxxxxxxxxxxx( this should be a
| > folder
| > | | > and
| > | | > a files, please send it together)
| > | | >
| > | | > We appreciate your understanding.
| > | | >
| > | | >
| > | | >
| > | | > Best regards,
| > | | >
| > | | > Charles Yang (MSFT)
| > | | >
| > | | > Microsoft CSS Online Newsgroup Support
| > | | >
| > | | > Get Secure! - www.microsoft.com/security
| > | | >
| > | | > ======================================================
| > | | > This newsgroup only focuses on SBS technical issues. If you have
| > issues
| > | | > regarding other Microsoft products, you'd better post in the
| > | corresponding
| > | | > newsgroups so that they can be resolved in an efficient and timely
| > | manner.
| > | | > You can locate the newsgroup here:
| > | | > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| > | | >
| > | | > When opening a new thread via the web interface, we recommend you
| > check
| > | | > the
| > | | > "Notify me of replies" box to receive e-mail notifications when
| > there
| > | are
| > | | > any updates in your thread. When responding to posts via your
| > | newsreader,
| > | | > please "Reply to Group" so that others may learn and benefit from
| > your
| > | | > issue.
| > | | >
| > | | > Microsoft engineers can only focus on one issue per thread.
Although
| > we
| > | | > provide other information for your reference, we recommend you
post
| > | | > different incidents in different threads to keep the thread
clean.
| > In
| > | | > doing
| > | | > so, it will ensure your issues are resolved in a timely manner.
| > | | >
| > | | > For urgent issues, you may want to contact Microsoft CSS directly.
| > | Please
| > | | > check http://support.microsoft.com for regional support phone
| > numbers.
| > | | >
| > | | > Any input or comments in this thread are highly appreciated.
| > | | > ======================================================
| > | | > This posting is provided "AS IS" with no warranties, and confers
no
| > | | > rights.
| > | | >
| > | | >
| > | | > =====================================================
| > | | > When responding to posts, please "Reply to Group" via your
| > newsreader
| > so
| > | | > that others may learn and benefit from your issue.
| > | | > =====================================================
| > | | >
| > | | > This posting is provided "AS IS" with no warranties, and confers
no
| > | | > rights.
| > | | >
| > | | > --------------------
| > | | > | From: "NickC" <NoSpam@xxxxxxxxxxxxxx>
| > | | > | References: <#0yb8FPlFHA.1608@xxxxxxxxxxxxxxxxxxxx>
| > | | > <qk#JxlllFHA.3472@xxxxxxxxxxxxxxxxxxxxx>
| > | | > <u$KSRhnlFHA.1412@xxxxxxxxxxxxxxxxxxxx>
| > | | > <lF03VAwlFHA.3672@xxxxxxxxxxxxxxxxxxxxx>
| > | | > <eyM9CI1lFHA.1948@xxxxxxxxxxxxxxxxxxxx>
| > | | > <3NgMzq8lFHA.3120@xxxxxxxxxxxxxxxxxxxxx>
| > | | > <bdNyKYNmFHA.940@xxxxxxxxxxxxxxxxxxxxx>
| > | | > <OUgO7kOmFHA.1232@xxxxxxxxxxxxxxxxxxxx>
| > | | > <LEzjLcVmFHA.944@xxxxxxxxxxxxxxxxxxxxx>
| > | | > <eInxpswpFHA.2904@xxxxxxxxxxxxxxxxxxxx>
| > | | > <frb2Q85pFHA.1208@xxxxxxxxxxxxxxxxxxxxx>
| > | | > <#SZQAPZqFHA.3540@xxxxxxxxxxxxxxxxxxxx>
| > | | > <yK#Vz$dqFHA.3800@xxxxxxxxxxxxxxxxxxxxx>
| > | | > <#ba#kpyrFHA.260@xxxxxxxxxxxxxxxxxxxx>
| > | | > <QGRcwO1rFHA.1208@xxxxxxxxxxxxxxxxxxxxx>
| > | | > | Subject: Re: Intermittant GPO failure to apply
| > | | > | Date: Fri, 2 Sep 2005 14:05:08 +0100
| > | | > | Lines: 660
| > | | > | X-Priority: 3
| > | | > | X-MSMail-Priority: Normal
| > | | > | X-Newsreader: Microsoft Outlook Express 6.00.3790.1830
| > | | > | X-RFC2646: Format=Flowed; Original
| > | | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| > | | > | Message-ID: <#jst677rFHA.2592@xxxxxxxxxxxxxxxxxxxx>
| > | | > | Newsgroups: microsoft.public.windows.server.sbs
| > | | > | NNTP-Posting-Host: host81-130-111-181.in-addr.btopenworld.com
| > | | > 81.130.111.181
| > | | > | Path:
| > TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
| > | | > | Xref: TK2MSFTNGXA01.phx.gbl
| > microsoft.public.windows.server.sbs:150216
| > | | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > | | > |
| > | | > | Thanks Charles, see inline below:
| > | | > |
| > | | > | > The default setting of these GPO is "not defined" for all the
| > policy
| > | | > | > below:
| > | | > | >
| > | | > | > Network Client digitally sign communications (always)
| > | | > | > Network Client digitally sign communications (if server
| > agrees)
| > | | > | > Network Server digitally sign communications (always)
| > | | > | > Network Server digitally sign communications (if client
| > agrees)
| > | | > |
| > | | > | Are you sure that the defaults for _both_ the 'Default Domain
| > Policy'
| > | | > and
| > | | > | 'Default Domain Controllers Policy' are not defined, before I
| > changed
| > | | > them I
| > | | > | noted that a couple of them were set to Enabled, unfortunately I
| > | didn't
| > | | > note
| > | | > | exactly which ones they were.
| > | | > |
| > | | > |
| > | | > | > In addition, have you tried my steps in previous reply, I will
| > also
| > | | > post
| > | | > | > here:
| > | | > | >
| > | | > | > As you referred, you have enabled the roaming profiles and
| > folder
| > | | > | > redirection on SBS domain. Also in your userenv log we found
it
| > | still
| > | | > | > refer
| > | | > | > to the same problem in ntuser.pol, by default this files will
be
| > | | > recreate
| > | | > | > when logon the domain again, it seems the files is corrupt
and
| > the
| > | | > | > registry
| > | | > | > is not correct.
| > | | > | >
| > | | > | > Please temporally delete that files or rename the files to
see
| > if
| > | the
| > | | > | > issue
| > | | > | > can be clear. If you using roaming profiles, please check it
on
| > the
| > | | > | > server.
| > | | > |
| > | | > | Cannot find any NTUser.pol files anywhere; none on workstations,
| > none
| > | in
| > | | > the
| > | | > | shared Profiles directory on the Server, none in the redirected
| > | | > MyDocuments
| > | | > | directory on the server!
| > | | > |
| > | | > | By the way I noticed that Administrator does not have access to
| > the
| > | | > profiles
| > | | > | directory, each user directory in there is owned by the user, I
| > had
| > to
| > | | > take
| > | | > | ownership as administrator to be able to look in there for these
| > | | > ntuser.pol
| > | | > | files.
| > | | > |
| > | | > | Nick
| > | | > |
| > | | > |
| > | | > | >
| > | | > | > More info:
| > | | > | >
| > | | > | > 269378 Differences in the User Profiles in Windows
| > | | > | > http://support.microsoft.com/?id=269378
| > | | > | >
| > | | > | >
| > | | > | > Hope the above information helpful.
| > | | > | >
| > | | > | >
| > | | > | >
| > | | > | > Best regards,
| > | | > | >
| > | | > | > Charles Yang (MSFT)
| > | | > | >
| > | | > | > Microsoft CSS Online Newsgroup Support
| > | | > | >
| > | | > | > Get Secure! - www.microsoft.com/security
| > | | > | >
| > | | > | > ======================================================
| > | | > | > This newsgroup only focuses on SBS technical issues. If you
have
| > | | > issues
| > | | > | > regarding other Microsoft products, you'd better post in the
| > | | > corresponding
| > | | > | > newsgroups so that they can be resolved in an efficient and
| > timely
| > | | > manner.
| > | | > | > You can locate the newsgroup here:
| > | | > | >
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| > | | > | >
| > | | > | > When opening a new thread via the web interface, we recommend
| > you
| > | | > check
| > | | > | > the
| > | | > | > "Notify me of replies" box to receive e-mail notifications
when
| > | there
| > | | > are
| > | | > | > any updates in your thread. When responding to posts via your
| > | | > newsreader,
| > | | > | > please "Reply to Group" so that others may learn and benefit
| > from
| > | your
| > | | > | > issue.
| > | | > | >
| > | | > | > Microsoft engineers can only focus on one issue per thread.
| > | Although
| > | | > we
| > | | > | > provide other information for your reference, we recommend you
| > post
| > | | > | > different incidents in different threads to keep the thread
| > clean.
| > | In
| > | | > | > doing
| > | | > | > so, it will ensure your issues are resolved in a timely
manner.
| > | | > | >
| > | | > | > For urgent issues, you may want to contact Microsoft CSS
| > directly.
| > | | > Please
| > | | > | > check http://support.microsoft.com for regional support phone
| > | numbers.
| > | | > | >
| > | | > | > Any input or comments in this thread are highly appreciated.
| > | | > | > ======================================================
| > | | > | > This posting is provided "AS IS" with no warranties, and
confers
| > no
| > | | > | > rights.
| > | | > | >
| > | | > | >
| > | | > | > =====================================================
| > | | > | > When responding to posts, please "Reply to Group" via your
| > | newsreader
| > | | > so
| > | | > | > that others may learn and benefit from your issue.
| > | | > | > =====================================================
| > | | > | >
| > | | > | > This posting is provided "AS IS" with no warranties, and
confers
| > no
| > | | > | > rights.
| > | | > | >
| > | | > | > --------------------
| > | | > | > | From: "NickC" <NoSpam@xxxxxxxxxxxxxx>
| > | | > | > | References: <#0yb8FPlFHA.1608@xxxxxxxxxxxxxxxxxxxx>
| > | | > | > <qk#JxlllFHA.3472@xxxxxxxxxxxxxxxxxxxxx>
| > | | >| > <u$KSRhnlFHA.1412@xxxxxxxxxxxxxxxxxxxx>
| > | | > | > <lF03VAwlFHA.3672@xxxxxxxxxxxxxxxxxxxxx>
| > | | > | > <eyM9CI1lFHA.1948@xxxxxxxxxxxxxxxxxxxx>
| > | | > | > <3NgMzq8lFHA.3120@xxxxxxxxxxxxxxxxxxxxx>
| > | | > | > <bdNyKYNmFHA.940@xxxxxxxxxxxxxxxxxxxxx>
| > | | > | > <OUgO7kOmFHA.1232@xxxxxxxxxxxxxxxxxxxx>
| > | | > | > <LEzjLcVmFHA.944@xxxxxxxxxxxxxxxxxxxxx>
| > | | > | > <eInxpswpFHA.2904@xxxxxxxxxxxxxxxxxxxx>
| > | | > | > <frb2Q85pFHA.1208@xxxxxxxxxxxxxxxxxxxxx>
| > | | > | > <#SZQAPZqFHA.3540@xxxxxxxxxxxxxxxxxxxx>
| > | | > | > <yK#Vz$dqFHA.3800@xxxxxxxxxxxxxxxxxxxxx>
| > | | > | > | Subject: Re: Intermittant GPO failure to apply
| > | | > | > | Date: Thu, 1 Sep 2005 20:21:32 +0100
| > | | > | > | Lines: 465
| > | | > | > | X-Priority: 3
| > | | > | > | X-MSMail-Priority: Normal
| > | | > | > | X-Newsreader: Microsoft Outlook Express 6.00.3790.1830
| > | | > | > | X-RFC2646: Format=Flowed; Original
| > | | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| > | | > | > | Message-ID: <#ba#kpyrFHA.260@xxxxxxxxxxxxxxxxxxxx>
| > | | > | > | Newsgroups: microsoft.public.windows.server.sbs
| > | | > | > | NNTP-Posting-Host: host81-130-59-23.in-addr.btopenworld.com
| > | | > 81.130.59.23
| > | | > | > | Path:
| > | | > TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP11.phx.gbl
| > | | > | > | Xref: TK2MSFTNGXA01.phx.gbl
| > | | > microsoft.public.windows.server.sbs:150019
| > | | > | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > | | > | > |
| > | | > | > | Hi Charles,
| > | | > | > |
| > | | > | > | As the SMB signing doesn't seem to make any difference I
would
| > | like
| > | | > to
| > | | > | > set
| > | | > | > | them back to their defaults. Could you tell me what the
| > default
| > | | > | > settings
| > | | > | > | were for the 'Default Domain Policy' and 'Default Domain
| > | Controllers
| > | | > | > Policy'
| > | | > | > | GPOs for:
| > | | > | > | Network Client digitally sign communications (always)
| > | | > | > | Network Client digitally sign communications (if server
| > | agrees)
| > | | > | > | Network Server digitally sign communications (always)
| > | | > | > | Network Server digitally sign communications (if client
| > | agrees)
| > | | > | > |
| > | | > | > | Thanks,
| > | | > | > | Nick
| > | | > | > |
| > | | > | > | ""Charles Yang [MSFT]"" <v-chayan@xxxxxxxxxxxxxxxxxxxx>
wrote
| > in
| > | | > message
| > | | > | > | news:yK%23Vz$dqFHA.3800@xxxxxxxxxxxxxxxxxxxxxxxx
| > | | > | > | > Hi Nick,
| > | | > | > | >
| > | | > | > | > Thanks for updates.
| > | | > | > | >
| > | | > | > | > I will waiting for your results, as I mentioned we could
not
| > | | > | > troubleshoot
| > | | > | > | > the root cause of this problem via newsgroup, it might be
a
| > | | > complex
| > | | > | > | > problem, as I referred many factors might blocked the GPO
| > | updates,
| > | | > | > | > firewall
| > | | > | > | > anti-virus software or SMB signing.
| > | | > | > | >
| > | | > | > | > Sorry for inconvenience, and thanks for your efforts.
| > | | > | > | >
| > | | > | > | >
| > | | > | > | >
| > | | > | > | > Best regards,
| > | | > | > | >
| > | | > | > | > Charles Yang (MSFT)
| > | | > | > | >
| > | | > | > | > Microsoft CSS Online Newsgroup Support
| > | | > | > | >
| > | | > | > | > Get Secure! - www.microsoft.com/security
| > | | > | > | >
| > | | > | > | > ======================================================
| > | | > | > | > This newsgroup only focuses on SBS technical issues. If
you
| > have
| > | | > | > issues
| > | | > | > | > regarding other Microsoft products, you'd better post in
the
| > | | > | > corresponding
| > | | > | > | > newsgroups so that they can be resolved in an efficient
and
| > | timely
| > | | > | > manner.
| > | | > | > | > You can locate the newsgroup here:
| > | | > | > | >
| > | http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| > | | > | > | >
| > | | > | > | > When opening a new thread via the web interface, we
| > recommend
| > | you
| > | | > | > check
| > | | > | > | > the
| > | | > | > | > "Notify me of replies" box to receive e-mail notifications
| > when
| > | | > there
| > | | > | > are
| > | | > | > | > any updates in your thread. When responding to posts via
| > your
| > | | > | > newsreader,
| > | | > | > | > please "Reply to Group" so that others may learn and
benefit
| > | from
| > | | > your
| > | | > | > | > issue.
| > | | > | > | >
| > | | > | > | > Microsoft engineers can only focus on one issue per
thread.
| > | | > Although
| > | | > | > we
| > | | > | > | > provide other information for your reference, we recommend
| > you
| > | | > post
| > | | > | > | > different incidents in different threads to keep the
thread
| > | clean.
| > | | > In
| > | | > | > | > doing
| > | | > | > | > so, it will ensure your issues are resolved in a timely
| > manner.
| > | | > | > | >
| > | | > | > | > For urgent issues, you may want to contact Microsoft CSS
| > | directly.
| > | | > | > Please
| > | | > | > | > check http://support.microsoft.com for regional support
| > phone
| > | | > numbers.
| > | | > | > | >
| > | | > | > | > Any input or comments in this thread are highly
appreciated.
| > | | > | > | > ======================================================
| > | | > | > | > This posting is provided "AS IS" with no warranties, and
| > | confers
| > | | > no
| > | | > | > | > rights.
| > | | > | > | >
| > | | > | > | >
| > | | > | > | > =====================================================
| > | | > | > | > When responding to posts, please "Reply to Group" via your
| > | | > newsreader
| > | | > | > so
| > | | > | > | > that others may learn and benefit from your issue.
| > | | > | > | > =====================================================
| > | | > | > | >
| > | | > | > | > This posting is provided "AS IS" with no warranties, and
| > | confers
| > | | > no
| > | | > | > | > rights.
| > | | > | > | >
| > | | > | > | > --------------------
| > | | > | > | > | From: "NickC" <NoSpam@xxxxxxxxxxxxxx>
| > | | > | > | > | References: <#0yb8FPlFHA.1608@xxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > <qk#JxlllFHA.3472@xxxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > <u$KSRhnlFHA.1412@xxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > <lF03VAwlFHA.3672@xxxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > <eyM9CI1lFHA.1948@xxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > <3NgMzq8lFHA.3120@xxxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > <bdNyKYNmFHA.940@xxxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > <OUgO7kOmFHA.1232@xxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > <LEzjLcVmFHA.944@xxxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > <eInxpswpFHA.2904@xxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > <frb2Q85pFHA.1208@xxxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > | Subject: Re: Intermittant GPO failure to apply
| > | | > | > | > | Date: Thu, 25 Aug 2005 17:40:34 +0100
| > | | > | > | > | Lines: 305
| > | | > | > | > | X-Priority: 3
| > | | > | > | > | X-MSMail-Priority: Normal
| > | | > | > | > | X-Newsreader: Microsoft Outlook Express 6.00.3790.1830
| > | | > | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| > | | > | > | > | X-RFC2646: Format=Flowed; Original
| > | | > | > | > | Message-ID: <#SZQAPZqFHA.3540@xxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > | Newsgroups: microsoft.public.windows.server.sbs
| > | | > | > | > | NNTP-Posting-Host: 194.164.85.19
| > | | > | > | > | Path:
| > | | > | >
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP14.phx.gbl
| > | | > | > | > | Xref: TK2MSFTNGXA01.phx.gbl
| > | | > | > microsoft.public.windows.server.sbs:147801
| > | | > | > | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > | | > | > | > |
| > | | > | > | > | Hi Charles,
| > | | > | > | > |
| > | | > | > | > | Disabling the rename administrator account GPO and
others
| > | didn't
| > | | > | > seem
| > | | > | > to
| > | | > | > | > | help so have now re-enabled them.
| > | | > | > | > |
| > | | > | > | > | All SMB signing GPO settings are now set to disabled so
| > will
| > | | > wait
| > | | > | > and
| > | | > | > | > see
| > | | > | > | > | what effect that has (must remember to reboot the
server a
| > few
| > | | > | > times).
| > | | > | > | > |
| > | | > | > | > | Workstations do indeed have Trend Micro CSM for SMB
| > remotely
| > | | > | > installed
| > | | > | > | > and
| > | | > | > | > | updating from the SBS server. Problem is these
| > workstations
| > | are
| > | | > all
| > | | > | > | > live
| > | | > | > | > so
| > | | > | > | > | I cannot safely leave virus checking disabled. Do you
| > have
| > | any
| > | | > more
| > | | > | > | > | information about this possible Trend Micro problem?
| > | | > | > | > |
| > | | > | > | > | UPHClean is installed and reports the following error
but
| > I
| > | | > can't
| > | | > | > see
| > | | > | > | > how
| > | | > | > | > to
| > | | > | > | > | identify which application is actually causing this:
| > | | > | > | > | The following handles opened in user profile hive
| > | | > | > | > <DOMAINNAME>\<username>
| > | | > | > | > | (S-1-5-21-3513629081-3873135916-3088626867-1364) are
| > | preventing
| > | | > the
| > | | > | > | > profile
| > | | > | > | > | from unloading:
| > | | > | > | > | svchost.exe (888)
| > | | > | > | > | HKCU (0x3a0)
| > | | > | > | > |
| > | | > | > | > |
| > | | > | > | > | Regards,
| > | | > | > | > | Nick
| > | | > | > | > |
| > | | > | > | > |
| > | | > | > | > |
| > | | > | > | > | Hi,
| > | | > | > | > |
| > | | > | > | > | Thanks for updates.
| > | | > | > | > |
| > | | > | > | > | From the information you gave to me, we can not identify
| > the
| > | | > root
| > | | > | > cause,
| > | | > | > | > | have you try my suggestion in my last reply, I would
like
| > to
| > | | > paste
| > | | > | > them
| > | | > | > | > | again:
| > | | > | > | > |
| > | | > | > | > |
| > | | > | > | > | FYI:
| > | | > | > | > |
| > | | > | > | > | What I means about Trend is to disable it on the client
| > | computer
| > | | > if
| > | | > | > you
| > | | > | > | > | have also deploy it on client computer, as I know there
is
| > | some
| > | | > | > problem
| > | | > | > | > on
| > | | > | > | > | this software if you deploy it on client computer.
| > | | > | > | > |
| > | | > | > | > | As this is an intermittent issue, so it might need some
| > time
| > | to
| > | | > | > | > | troubleshoot. in my previous reply, I suggest you
disable
| > all
| > | | > the
| > | | > | > SMB
| > | | > | > | > | signing on both client computer and server, please also
| > make
| > | | > sure
| > | | > | > that
| > | | > | > | > you
| > | | > | > | > | have disable all the SMB signing on the group policy.
You
| > can
| > | | > refer
| > | | > | > to
| > | | > | > | > the
| > | | > | > | > | article below to disable it.
| > | | > | > | > |
| > | | > | > | > | Please refer to the following link to disable the SMB
| > signing
| > | to
| > | | > see
| > | | > | > if
| > | | > | > | > the
| > | | > | > | > | slow network access issue will be resolved:
| > | | > | > | > | http://www.smallbizserver.net/Default.aspx?tabid=98
| > | | > | > | > |
| > | | > | > | > | I appreciate your effort on this issue.
| > | | > | > | > |
| > | | > | > | > |
| > | | > | > | > |
| > | | > | > | > | Best regards,
| > | | > | > | > |
| > | | > | > | > | Charles Yang (MSFT)
| > | | > | > | > |
| > | | > | > | > |
| > | | > | > | > | ""Charles Yang [MSFT]"" <v-chayan@xxxxxxxxxxxxxxxxxxxx>
| > wrote
| > | in
| > | | > | > message
| > | | > | > | > | news:frb2Q85pFHA.1208@xxxxxxxxxxxxxxxxxxxxxxxx
| > | | > | > | > | > Hi,
| > | | > | > | > | >
| > | | > | > | > | > Thanks for updates.
| > | | > | > | > | >
| > | | > | > | > | > From the information you gave to me, we can not
identify
| > the
| > | | > root
| > | | > | > | > cause,
| > | | > | > | > | > have you try my suggestion in my last reply, I would
| > like
| > to
| > | | > paste
| > | | > | > | > them
| > | | > | > | > | > again:
| > | | > | > | > | >
| > | | > | > | > | >
| > | | > | > | > | > FYI:
| > | | > | > | > | >
| > | | > | > | > | > What I means about Trend is to disable it on the
client
| > | | > computer
| > | | > | > if
| > | | > | > | > you
| > | | > | > | > | > have also deploy it on client computer, as I know
there
| > is
| > | | > some
| > | | > | > | > problem
| > | | > | > | > on
| > | | > | > | > | > this software if you deploy it on client computer.
| > | | > | > | > | >
| > | | > | > | > | > As this is an intermittent issue, so it might need
some
| > | time
| > | | > to
| > | | > | > | > | > troubleshoot. in my previous reply, I suggest you
| > disable
| > | all
| > | | > the
| > | | > | > SMB
| > | | > | > | > | > signing on both client computer and server, please
also
| > make
| > | | > sure
| > | | > | > that
| > | | > | > | > you
| > | | > | > | > | > have disable all the SMB signing on the group policy.
| > You
| > | can
| > | | > | > refer
| > | | > | > to
| > | | > | > | > the
| > | | > | > | > | > article below to disable it.
| > | | > | > | > | >
| > | | > | > | > | > Please refer to the following link to disable the SMB
| > | signing
| > | | > to
| > | | > | > see
| > | | > | > | > if
| > | | > | > | > | > the
| > | | > | > | > | > slow network access issue will be resolved:
| > | | > | > | > | > http://www.smallbizserver.net/Default.aspx?tabid=98
| > | | > | > | > | >
| > | | > | > | > | > I appreciate your effort on this issue.
| > | | > | > | > | >
| > | | > | > | > | >
| > | | > | > | > | >
| > | | > | > | > | > Best regards,
| > | | > | > | > | >
| > | | > | > | > | > Charles Yang (MSFT)
| > | | > | > | > | >
| > | | > | > | > | > Microsoft CSS Online Newsgroup Support
| > | | > | > | > | >
| > | | > | > | > | > Get Secure! - www.microsoft.com/security
| > | | > | > | > | >
| > | | > | > | > | > ======================================================
| > | | > | > | > | > This newsgroup only focuses on SBS technical issues.
If
| > you
| > | | > have
| > | | > | > | > issues
| > | | > | > | > | > regarding other Microsoft products, you'd better post
in
| > the
| > | | > | > | > corresponding
| > | | > | > | > | > newsgroups so that they can be resolved in an
efficient
| > and
| > | | > timely
| > | | > | > | > manner.
| > | | > | > | > | > You can locate the newsgroup here:
| > | | > | > | > | >
| > | | > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| > | | > | > | > | >
| > | | > | > | > | > When opening a new thread via the web interface, we
| > | recommend
| > | | > you
| > | | > | > | > check
| > | | > | > | > | > the
| > | | > | > | > | > "Notify me of replies" box to receive e-mail
| > notifications
| > | | > when
| > | | > | > there
| > | | > | > | > are
| > | | > | > | > | > any updates in your thread. When responding to posts
via
| > | your
| > | | > | > | > newsreader,
| > | | > | > | > | > please "Reply to Group" so that others may learn and
| > benefit
| > | | > from
| > | | > | > your
| > | | > | > | > | > issue.
| > | | > | > | > | >
| > | | > | > | > | > Microsoft engineers can only focus on one issue per
| > thread.
| > | | > | > Although
| > | | > | > | > we
| > | | > | > | > | > provide other information for your reference, we
| > recommend
| > | you
| > | | > | > post
| > | | > | > | > | > different incidents in different threads to keep the
| > thread
| > | | > clean.
| > | | > | > In
| > | | > | > | > | > doing
| > | | > | > | > | > so, it will ensure your issues are resolved in a
timely
| > | | > manner.
| > | | > | > | > | >
| > | | > | > | > | > For urgent issues, you may want to contact Microsoft
CSS
| > | | > directly.
| > | | > | > | > Please
| > | | > | > | > | > check http://support.microsoft.com for regional
support
| > | phone
| > | | > | > numbers.
| > | | > | > | > | >
| > | | > | > | > | > Any input or comments in this thread are highly
| > appreciated.
| > | | > | > | > | > ======================================================
| > | | > | > | > | > This posting is provided "AS IS" with no warranties,
and
| > | | > confers
| > | | > | > no
| > | | > | > | > | > rights.
| > | | > | > | > | >
| > | | > | > | > | >
| > | | > | > | > | > =====================================================
| > | | > | > | > | > When responding to posts, please "Reply to Group" via
| > your
| > | | > | > newsreader
| > | | > | > | > so
| > | | > | > | > | > that others may learn and benefit from your issue.
| > | | > | > | > | > =====================================================
| > | | > | > | > | >
| > | | > | > | > | > This posting is provided "AS IS" with no warranties,
and
| > | | > confers
| > | | > | > no
| > | | > | > | > | > rights.
| > | | > | > | > | >
| > | | > | > | > | > --------------------
| > | | > | > | > | > | From: "NickC" <NoSpam@xxxxxxxxxxxxxx>
| > | | > | > | > | > | References: <#0yb8FPlFHA.1608@xxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > | > <qk#JxlllFHA.3472@xxxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > | > <u$KSRhnlFHA.1412@xxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > | > <lF03VAwlFHA.3672@xxxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > | > <eyM9CI1lFHA.1948@xxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > | > <3NgMzq8lFHA.3120@xxxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > | > <bdNyKYNmFHA.940@xxxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > | > <OUgO7kOmFHA.1232@xxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > | > <LEzjLcVmFHA.944@xxxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > | > | Subject: Re: Intermittant GPO failure to apply
| > | | > | > | > | > | Date: Mon, 22 Aug 2005 12:17:58 +0100
| > | | > | > | > | > | Lines: 120
| > | | > | > | > | > | X-Priority: 3
| > | | > | > | > | > | X-MSMail-Priority: Normal
| > | | > | > | > | > | X-Newsreader: Microsoft Outlook Express
6.00.3790.1830
| > | | > | > | > | > | X-MimeOLE: Produced By Microsoft MimeOLE
| > V6.00.3790.1830
| > | | > | > | > | > | X-RFC2646: Format=Flowed; Original
| > | | > | > | > | > | Message-ID: <eInxpswpFHA.2904@xxxxxxxxxxxxxxxxxxxx>
| > | | > | > | > | > | Newsgroups: microsoft.public.windows.server.sbs
| > | | > | > | > | > | NNTP-Posting-Host: mail.stkittsnevisregistry.net
| > | | > 194.164.85.19
| > | | > | > | > | > | Path:
| > | | > | > | >
| > TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
| > | | > | > | > | > | Xref: TK2MSFTNGXA01.phx.gbl
| > | | > | > | > microsoft.public.windows.server.sbs:146589
| > | | > | > | > | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > | | > | > | > | > |
| > | | > | > | > | > | Hi Charles,
| > | | > | > | > | > |
| > | | > | > | > | > |
| > | | > | > | > | > |
| > | | > | > | > | > | UPHClean now installed and logging the following
| > errors:
| > | | > | > | > | > |
| > | | > | > | > | > |
| > | | > | > | > | > |
| > | | > | > | > | > | Event Type: Information
| > | | > | > | > | > |
| > | | > | > | > | > | Event Source: UPHClean
| > | | > | > | > | > |
| > | | > | > | > | > | Event Category: None
| > | | > | > | > | > |
| > | | > | > | > | > | Event ID: 1501
| > | | > | > | > | > |
| > | | > | > | > | > | Date: 18/08/2005
| > | | > | > | > | > |
| > | | > | > | > | > | Time: 16:32:11
| > | | > | > | > | > |
| > | | > | > | > | > | User: <DOMAINNAME>\<username>
| > | | > | > | > | > |
| > | | > | > | > | > | Computer: <DOMAINNAME>5
| > | | > | > | > | > |
| > | | > | > | > | > | Description:
| > | | > | > | > | > |
| > | | > | > | > | > |
| > | | > | > | > | > |
| > | | > | > | > | > | The following handles opened in user profile hive
| > | | > | > | > | > <DOMAINNAME>\<username>
| > | | > | > | > | > | (S-1-5-21-3513629081-3873135916-3088626867-1364) are
| > | | > preventing
| > | | > | > the
| > | | > | > | > | > profile
| > | | > | > | > | > | from unloading:
| > | | > | > | > | > |
| > | | > | > | > | > |
| > | | > | > | > | > |
| > | | > | > | > | > | svchost.exe (888)
| > | | > | > | > | > |
| > | | > | > | > | > | HKCU (0x3a0)
| > | | > | > | > | > |
| > | | > | > | > | > |
| > | | > | > | > | > |
| > | | > | > | > | > |
| > | | > | > | > | > |
| > | | > | > | > | > |
| > | | > | > | > | > | How can I tell what application is causing this?
| > | | > | > | > | > |
| > | | > | > | > | > | Thanks,
| > | | > | > | > | > | Nick
| > | | > | > | > | > |
| > | | > | > | > | > |
| > | | > | > | > | > | ""Charles Yang [MSFT]""
| > <v-chayan@xxxxxxxxxxxxxxxxxxxx>
| > | | > wrote
| > | | > in
| > | | > | > | > message
| > | | > | > | > | > | news:LEzjLcVmFHA.944@xxxxxxxxxxxxxxxxxxxxxxxx
| > | | > | > | > | > | > HI NICK,
| > | | > | > | > | > | >
| > | | > | > | > | > | > Thanks for quickly updates.
| > | | > | > | > | > | >
| > | | > | > | > | > | > After researching the error 1517, I found it might
| > | relate
| > | | > to
| > | | > | > group
| > | | > | > | > | > policy
| > | | > | > | > | > | > is not update, you can refer to my suggestion
below:
| > | | > | > | > | > | >
| > | | > | > | > | > | > Many system and service processes do work on
behalf
| > of
| > | | > users.
| > | | > | > | > When
| > | | > | > | > | > the
| > | | > | > | > | > | > work is done the system or service process is
| > | responsible
| > | | > for
| > | | > | > | > | > releasing
| > | | > | > | > | > | > handles it has to the user profile hive. If this
is
| > not
| > | | > done
| > | | > | > by
| > | | > | > | > the
| > | | > | > | > | > | > service as the user logs off the profile cannot be
| > | | > unloaded.
| > | | > | > | > | > | >
| > | | > | > | > | > | > This problem in code can be caused by improper
| > coding
| > | | > either
| > | | > | > in
| > | | > | > | > | > Microsoft
| > | | > | > | > | > | > software or 3rd party software (e.g. printer
| > drivers,
| > | | > virus
| > | | > | > | > scanner
| > | | > | > | > | > | > service, etc). With the information provided by
the
| > | | > system
| > | | > | > there
| > | | > | > | > is
| > | | > | > | > | > no
| > | | > | > | > | > | > way
| > | | > | > | > | > | > to find out what software needs to be corrected to
| > allow
| > | | > | > profiles
| > | | > | > | > to
| > | | > | > | > | > | > unload.
| > | | > | > | > | > | >
| > | | > | > | > | > | > Why we use UPHCLEAN
| > | | > | > | > | > | > ====================
| > | | > | > | > | > | > In the past these issues have been fixed by code
| > | changes
| > | | > to
| > | | > | > | > release
| > | | > | > | > | > the
| > | | > | > | > | > | > registry handle. The disadvantage of this
approach
| > is
| > | | > that
| > | | > in
| > | | > | > | > many
| > | | > | > | > | > cases
| > | | > | > | > | > | > multiple issues (different code paths) are
causing
| > the
| > | | > | > profiles
| > | | > | > to
| > | | > | > | > not
| > | | > | > | > | > | > unload. Unless all problem code paths are fixed
| > | profiles
| > | | > do
| > | | > | > not
| > | | > | > | > | > unload.
| > | | > | > | > | > | >
| > | | > | > | > | > | > The concept of UPHClean is to deal with these the
| > same
| > | way
| > | | > the
| > | | > | > | > | > operating
| > | | > | > | > | > | > system deals with other resource issues: when a
task
| > is
| > | | > done
| > | | > | > | > resources
| > | | > | > | > | > | > (memory, handles, etc) are automatically
reclaimed.
| > | | > UPHClean
| > | | > | > | > | > | > accomplishesthis simply by monitoring for users to
| > log
| > | off
| > | | > and
| > | | > | > | > | > verifying
| > | | > | > | > | > | > that unused resources are reclaimed. If they are
| > not
| > it
| > | | > | > reclaims
| > | | > | > | > the
| > | | > | > | > | > | > resource and logsits action. This approach is
| > superior
| > | as
| > | | > it
| > | | > | > | > works
| > | | > | > | > | > for
| > | | > | > | > | > | > any
| > | | > | > | > | > | > known reason that profiles do not unload and also
| > will
| > | | > keep
| > | | > | > | > working
| > | | > | > | > to
| > | | > | > | > | > | > address new unknown issues.
| > | | > | > | > | > | >
| > | | > | > | > | > | > Another advantage to UPHClean is that no computer
| > | restart
| > | | > is
| > | | > | > | > required
| > | | > | > | > | > to
| > | | > | > | > | > | > install it or remove it (except on Windows NT 4).
| > You
| > | can
| > | | > | > install
| > | | > | > | > and
| > | | > | > | > | > | > remove UPHClean to find out whether it helps with
a
| > | | > profile
| > | | > | > unload
| > | | > | > | > | > problem
| > | | > | > | > | > | > or not. You can do this without having to worry
| > about
| > | | > what
| > | | > | > | > hotfix,
| > | | > | > | > | > | > service
| > | | > | > | > | > | > pack, feature pack, etc has been installed. Set
it
| > and
| > | | > forget
| > | | > | > is
| > | | > | > | > the
| > | | > | > | > | > goal
| > | | > | > | > | > | > ofUPHClean.
| > | | > | > | > | > | >
| > | | > | > | > | > | > By default UPHClean takes action to allow
profiles
| > to
| > | | > unload.
| > | | > | > You
| > | | > | > | > can
| > | | > | > | > | > | > choose to have UPHClean only report what
processes
| > it
| > | | > finds
| > | | > | > | > preventing
| > | | > | > | > | > | > profiles from unloading. To do this, install
| > UPHClean
| > | and
| > | | > use
| > | | > | > the
| > | | > | > | > | > | > registry
| > | | > | > | > | > | > editor to set:
| > | | > | > | > | > | >
| > | | > | > | > | > | >
| > | | > | > | >
| > | | >
| > HKLM\System\CurrentControlSet\Services\UPHClean\Parameters\REPORT_ONLY
| > | | > | > | > | > to
| > | | > | > | > | > | > 1
| > | | > | > | > | > | >
| > | | > | > | > | > | > 837115 Troubleshooting profile unload issues
| > | | > | > | > | > | > http://support.microsoft.com/?id=837115
| > | | > | > | > | > | >
| > | | > | > | > | > | > If possible please perform my steps above and
paste
| > any
| > | | > | > progress
| > | | > | > | > to
| > | | > | > | > | > | > newsgroup, thanks for your effort in this issue.
| > | | > | > | > | > | >
| > | | > | > | > | > | >
| > | | > | > | > | > | >
| > | | > | > | > | > | > Best regards,
| > | | > | > | > | > | >
| > | | > | > | > | > | > Charles Yang (MSFT)
| > | | > | > | > | > | >
| > | | > | > | > | > | > Microsoft CSS Online Newsgroup Support
| > | | > | > | > | > | >
| > | | > | > | > | > |
| > | | > | > | > | > |
| > | | > | > | > | > |
| > | | > | > | > | >
| > | | > | > | > |
| > | | > | > | > |
| > | | > | > | > |
| > | | > | > | >
| > | | > | > |
| > | | > | > |
| > | | > | > |
| > | | > | >
| > | | > |
| > | | > |
| > | | > |
| > | | >
| > | |
| > | |
| > | |
| > |
| > |
| >
|
|
|
.
- References:
- Re: Intermittant GPO failure to apply
- From: NickC
- Re: Intermittant GPO failure to apply
- Prev by Date: RE: Exchange issues
- Next by Date: Re: Wierd e-mail
- Previous by thread: Re: Intermittant GPO failure to apply
- Next by thread: Re: Intermittant GPO failure to apply
- Index(es):
Relevant Pages
|
Loading