Re: GPO problems

Hi Crina,

I found the problem! It was the ISA 2004 firewall client. With the ISA
client, I have it checked for "Enable Web browser automatic configuration".
I'm guessing this is preventing the GPO change? After I unchecked the
option, I get no errors in the Event Viewer and the IE settings were
correctly applied.

I thank you for your links, although I didn't need to go through them, but
it was good information.

Thanks,
Simon


""Crina Li"" <v-crinal@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:7pW$IXW%23FHA.3440@xxxxxxxxxxxxxxxxxxxxxxxx
> Hi Simon
>
> Thank you for posting in SBS newsgroup.
>
> I am sorry for the delayed response due to weekend. Please understand that
> the newsgroups are staffed weekdays by Microsoft Support professionals to
> answer your systems and applications questions. Your understanding is
> greatly appreciated!
>
> From the description, I understand you got error message when you added
> some change to the GP for proxy settings and you received the event 1030.
> If I have misunderstood your concerns, please do not hesitate to let me
> know.
>
> Based on my experience, this issue may be caused by the following problem:
>
> 1. DNS settings and network properties on the server and client computers.
> For example: DNS Server address is not configured correctly on the
> affected
> computer.
> 2. This issue may occur if SMB signing is enabled.
> 3. Server Message Block signing settings on the client computers.
> 4. The TCP/IP NetBIOS Helper service, the Net Logon service, and the
> Remote
> Procedure Call (RPC) service are not started on all computers.
> 5. Distributed File System (DFS) service is not enabled on all computers.
> 6. The contents and the permissions of the Sysvol folder.
> 7. The Bypass traverse checking right is not granted to the required
> groups.
> 8. The domain controllers are in a journal wrap state.
> 9. Run the dfsutil /purgemupcache command.
>
> To check the issue, I suggest that you firstly check if the internal DNS
> Service of SBS is configured to be the DNS server on the problematic
> client
> computer.
>
> Then please disable the SMB signing. For detailed steps, please refer to:
>
> 839499 You cannot open file shares or Group Policy snap-ins when you
> disable
> http://support.microsoft.com/?id=839499
>
> To check the other settings, please refer to the steps in the following
> article:
>
> 887303 Applying Group Policy causes Userenv errors and events to occur on
> your
> http://support.microsoft.com/?id=887303
>
> 842804 Group Policy processing does not work and events 1030 and 1058 are
> http://support.microsoft.com/?id=842804
>
> 888943 Event 1030 and event 1058 may be logged, and you may not be able to
> http://support.microsoft.com/?id=888943
>
> 314494 Group policies are not applied the way you expect; "Event ID 1058"
> and
> http://support.microsoft.com/?id=314494
>
> We can also try to disable the Windows Firewall on the problematic
> computers to see if it helps.
>
> In addition, please make sure you have configured SBS as following:
>
> 1. Leave the Default Gateway of the internal NIC blank.
> 2. Configure both the internal NIC and the external NIC to use the
> internal
> DNS Service as the DNS Server.
> 3. On the DNS Server, create the DNS Forwarder to forward the external DNS
> resolution requests to the ISP's DNS server. See:
>
> 323380 How to configure DNS for Internet access in Windows Server 2003
> http://support.microsoft.com/?id=323380
>
> 4. Strictly followed the instructions in the KB article below to run
> CEICW:
>
> 825763 How to configure Internet access in Windows Small Business Server
> 2003
> http://support.microsoft.com/?id=825763
>
> If the problem still persists, please help me collect the following
> information:
>
> 1. Are there any other error messages on event log?
> 2. Does the issue occur on windows XP SP2 only or other edition?
> 3. Get the Ipconfig/all result on problematic clients and SBS.
> 4. Get the Userenv.log and send it to me at v-crinal@xxxxxxxxxxxxxx
>
> If you have any questions or concerns related to this issue, please do let
> me know.
>
> I appreciate your time and look forward to hearing from you.
>
> Best regards,
>
> Crina Li (MSFT)
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
> When opening a new thread via the web interface, we recommend you check
> the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In
> doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
>
> =====================================================
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> --------------------
> | From: "Newbie" <newbie@xxxxxxxxxxx>
> | Subject: GPO problems
> | Date: Fri, 2 Dec 2005 22:29:18 -0500
> || Newsgroups: microsoft.public.windows.server.sbs
> | |
> | Hi,
> |
> | I recently added some changed to the GP for proxy settings, I can't get
> the
> | information to some computers and I'm getting the following error in the
> | userenv.log:
> |
> | USERENV(260.c78) 22:27:02:564 ProcessGPOs: GetNetworkName failed with
> 10091.
> | USERENV(260.d34) 22:27:02:596 ProcessGPOs: GetGPOInfo failed.
> | USERENV(260.c78) 22:27:03:908 SetRegistryValue: DeleteAllvalues finished
> for
> | SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit.
> | bRegOpSuccess = TRUE, bLoggingOk = TRUE.
> |
> | In Event Viewer, I get this:
> |
> | Event Type: Error
> | Event Source: Userenv
> | Event Category: None
> | Event ID: 1030
> | Date: 02-Dec-2005
> | Time: 10:24:59 PM
> | User: DOMAIN\Simon
> | Computer: SERVER1
> | Description:
> | Windows cannot query for the list of Group Policy objects. A message
> that
> | describes the reason for this was previously logged by the policy
> engine.
> |
> | For more information, see Help and Support Center at
> | http://go.microsoft.com/fwlink/events.asp.
> |
> | Please let me know how I can troubleshoot this? I'm running SBS 2003
> SP1.
> |
> | Thanks,
> | Simon
> |
> |
> |
>


.

Relevant Pages

  • Re: Home to Pro upgrade issues with AD domain
    ... >> computers that when purchased were running XP home. ... >This usually indicates a DNS misconfiguration problem. ... > They should NOT be pointing an an ISP's DNS server. ... and 'Root Hints' ...
    (microsoft.public.windowsxp.network_web)
  • Re: Connect Computer - Not successful after Numerous Attempts
    ... Since that temporary account is used in the migration ... Client LAN connection is now configured to ONLY show ... the SBS server IP as the DNS server. ... Looks like all DNS records are in place as you ...
    (microsoft.public.windows.server.sbs)
  • Re: Linux and SBS
    ... ALL AD clients _must_ only have 'AD Aware' servers as DNS server entries. ... People seem to believe that in the case of setting a 'primary' and 'secondary' DNS server on a client negative queries to the primary will cause fallback to the secondary, ... your DHCP to point to SBS as the first DNS server. ...
    (microsoft.public.windows.server.sbs)
  • Re: Getting Terminal Services to work
    ... In an AD domain all of the workstations need to be using an AD DNS server and no other DNS servers. ... This will allow XP to sort of work with Active Directory but Vista will fail miserably. ... All the computers are on a workgroup "Fred". ...
    (microsoft.public.windows.vista.networking_sharing)
  • Re: Client Cant Join Domain
    ... disassociated from their old profiles both on the servers and on the client ... One other thing that may help is running through the DNS Server Setup Wizard ... >> * PLEASE post all messages and replies in the newsgroups ...
    (microsoft.public.win2000.networking)