administrator account on laptop not renamed by GPO

[humbletech99]

I recently renamed both the domain administrator account and the local administrator account on all the machines in the 2003 AD domain by using the default domain GPO.

This worked fine except for one, my laptop, which is an XP Pro and wasn't on for a while.

Now I find the laptop still has the old administrator account and I've tried to do gpupdate but it's still not working.

I have rebooted several times.

Any ideas why the administrator account is not getting renamed by policy?

 

[ArizonaGeek]

Just checking the basics but is your laptop part of the OU getting the GPO? Check gpresult and see if you are even getting the GPO. Have you tried gpupdate /force to see if it will force the update? Got any virus scan/firewall software preventing the GPO from being seen?

Cheers
Rob

The answer is always "PEBKAC!

 

[IllogicallyLogical]

You could also run the Resultant Set of Policy console (Start >Run >type rsop.msc). Is there an exclamation mark or anything showing up beside Computer Configuration or User Configuration? If so right-click, select Properties, and click on the Error Information tab and see if there is an explanation of any errors. Also check the Event Viewer to see if any errors are showing up there as well.

Joey
A+, Network+, MCP

 

[humbletech99]

tried all that.

Turns out there is an error in the logs about not being able to determine the computer name and then gpo processing is aborted. M$ says this is cos of dns (we use static Bind), and yes the laptop is not in dns, but neither are all the other laptops in the same OU and they applied the policy...

 

[humbletech99]

that showed the old policy. Policy processing failed so it didn't get updated.

I removed and rejoined the domain. This fixed it.