Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Group Policy not applying to W2k server

Status
Not open for further replies.

waksimus

MIS
Jul 11, 2002
5
AU
We've currently have a domain with NT4 and 2000 servers & 10 DC's. Now we are trying to add a new Windows 2003 file server to the domain which it does without a problem, but we have noticed that the Group Policy hasnt been applied to this server.
In our default policy we have some password policies so this is how we are checking if the policy is being applied to this new 2003 box.

We have checked DNS, log files and cannot find anything unusual. The only two errors in the log files is which is worrying is:

USERENV: 1030
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.

Userenv: 1058
Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=corp,DC=xxxxxx,DC=com. The file must be present at the location <\\corp.xxxxxx.com\sysvol\corp.xxxxxx.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. (Access is denied. ). Group Policy processing aborted.


MS site talks about DFS not running so we have started this but still no go.

Any Ideas??
 
The fact that it is reporting access is denied makes me think that you are dealing with a rights issue and should be looking at that. The 31B... policy is one of the default policies. Make sure that it is there and recreat it if neccessary.

You can download a copy of the recreateDefPol tool from Microsoft. A link for it can be found on this MS KB article.


I hope you find this post helpful. Please let me know if it was.

Regards,

Mark
 
You had the DFS service stopped? Make sure that is started on all domain controllers. Also make sure that the file replication service is started on all DCs.

This could also be a user rights issue. Check the "access this computer from the network" right in the default domain controllers policy.
 
Will try these tips out.

Just as a bit more information, the policys are being applied to all the other W2k member servers, its just this W2k3 box, our first for the domain.

 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top