Re: Group Policy not applying to one user account



In news:1158941944.977820.140400@xxxxxxxxxxxxxxxxxxxxxxxxxxx,
K.J. 44 <Holleran.Kevin@xxxxxxxxx> typed:
Strangely, after removing and readding the computer to the domain (for
the second time) solved this problem.... I have no idea what caused
it but is seems to be working now. Thanks for your help and support.

You're welcome - I presume you used /connectcomputer, right? You need to, or
a lot of stuff be funky.

I still recommend disabling 'computer browser' on *all* clients.



Lanwench [MVP - Exchange] wrote:
In news:1158763002.711516.266460@xxxxxxxxxxxxxxxxxxxxxxxxxxxx,
K.J. 44 <Holleran.Kevin@xxxxxxxxx> typed:
Well, I had to put this on hold due to some other pressing issues,
but its definitely time to solve this now. The user is fine
logging into other computers and other users logging into her
laptop experience issues. So it seems to be something to do with
the computer account.

In the event logs I see a system errors such as

Event ID: 8003

The master browser has received a server announcement from the
computer COMPUTERNAME that believes that it is the master browser
for the domain on transport NetBT_Tcpip_{1BB56C56-FF9C-49. The
master browser is stopping or an election is being forced.

Got WINS?
I tend to stop & disable the computer browser service on all domain
computers, via group policy.


and Application Log Errors:

Event ID 1053
Windows cannot determine the user or computer name. (The specified
user does not exist. ). Group Policy processing aborted.

Unedited ipconfig /all from the server & this client might help
here....


Event 112:

Failed to perform redirection of folder My Documents. The files for
the redirected folder could not be moved to the new location. The
folder is configured to be redirected to <\\SERVER PATH>. Files
were being moved from <LOCAL PATH> to <\\SERVER PATH>. The
following error occurred while copying <LOCAL PATH> to <\\SERVER
PATH>:
The security descriptor structure is invalid.

That's an odd one - what is the actual path for both source and
destination? I can't see any reason for concealing this information
in a newsgroup post.


Any ideas welcome.

Thanks.




Lanwench [MVP - Exchange] wrote:
In news:1158333424.243322.106240@xxxxxxxxxxxxxxxxxxxxxxxxxxxx,
K.J. 44 <Holleran.Kevin@xxxxxxxxx> typed:
Hi,
I have been having trouble with one user. Just this one user is
not having group policy applied to her! This is strange. I have
removed and readded the computer to the domain twice

Before you did that, did you check to see whether:

a) the problem followed the user when she logged into another
computer and
b) the problem stopped when another user logged into her computer

?

and deleted and recreated
the user account. She can access the domain (shared resources)
but none of the logon scripts or group policy objects are working!

Did you look in the event logs on the workstation? That's where I'd
start. Check to make sure DNS is configured properly in that
computer's ipconfig /all.... only the SBS server's IP should be
listed in any domain computer/server's ip configuration. No public
DNS server IPs.

You can also run:

rsop.msc
and

gpresult (in a command prompt)

on the problem workstation.


I decided to try to run the modeling on the account and I got the
following error:

"THe wizard was unable to generate the Group Policy data due to
the error listed below.

No mapping between account names and security IDs was done. "

That does not seem to be a good thing....

How can this be corrected? I already deleted and recreated the
account.

Thank you very much.



.



Relevant Pages

  • Re: Group Policy not applying to one user account
    ... the second time) solved this problem.... ... So it seems to be something to do with the computer account. ... The master browser has received a server announcement from the ... Group Policy processing aborted. ...
    (microsoft.public.windows.server.sbs)
  • Re: Group Policy not applying to one user account
    ... other computers and other users logging into her laptop experience ... So it seems to be something to do with the computer account. ... The master browser has received a server announcement from the ... Group Policy processing aborted. ...
    (microsoft.public.windows.server.sbs)
  • Re: Unable to login to SBS Server
    ... Error 0x534 occurs when a user account in one or more Group Policy ... contact an administrator in the domain to perform ... Les Connor [SBS MVP] ...
    (microsoft.public.windows.server.sbs)
  • Re: Unable to login to SBS Server
    ... Error 0x534 occurs when a user account in one or more Group Policy objects ... administrator in the domain to perform the following actions: ... Remove unresolved accounts from Group Policy ... Les Connor [SBS MVP] ...
    (microsoft.public.windows.server.sbs)
  • Re: Master Browser server announcement ?
    ... account called owner in XP Pro. ... I cannot access the Owner account to delete it of to limit it's ... Master Browser and an election is being forced. ...
    (microsoft.public.windowsxp.security_admin)