Group Policy not applying 1

[edie209]

My group polies have stopped working, when i say stopped working what I mean is new settings are not being implemented. I noticed this the other day when I had to change to a new proxy address.

I have run GPResult and according to that all policies are being applied. So I created a new policy that just changed the desktop and applied it to a group of users, when I logged on as one of these users the desktop change did not happen I tried gpupdate still nothing changed. Although when I ran GPResult again it tells me the policy has been applied.

Is there anything I may have missed? or another tool I can use check my setup.

 

[porkchopexpress]

I'll make sure i don't take more than 20 seconds to comply then ;-)

 

[edie209]

Good morning porkchopexpress I have set a machine up with a static ip address and pointed at the windows DNS server and still no policies are working

 

[porkchopexpress]

Your Active Directory server will need to be pointing to this DNS server as well.

Typically in an Active Directory domain the first domain controller in the domain will also have DNS installed and will point to itself for DNS resolution.

http://support.microsoft.com/default.aspx?scid=kb;en-us;323380

e.g.

Server with Active Directory and DNS

192.168.0.2
255.255.252.0
192.168.0.1 (Gateway)

192.168.0.2 (DNS server)

Can you run NETDIAG on your DC and post the log, just the basic test icnore teh -v switch for now.

http://www.computerperformance.co.uk/w2k3/utilities/windows_netdiag.htm#Download_DCDiag_

 

[porkchopexpress]

Also take a read of this document.

http://support.microsoft.com/default.aspx?scid=kb;en-us;825036

 

[porkchopexpress]

Be carefull at this point as these settings are pretty critical to the correct working of your domain.


Who instlled the new DNS server and why did they point all of your workstations to the Linux DNS box did they specify a reason?

 

[edie209]

This is the results of the NETDIAG

We had TS installed two weeks ago by a company and they use the linux server to enable certain fetures on the network, but basically its acting as a gateway to our network but it is also handing out DCHP, DNS and acting as an internal proxy so we can filter internet usage.


C:\Documents and Settings\Administrator>NETDIAG

.....................................

Computer Name: VANGUARD
DNS Host Name: vanguard.parkside.AREA.ESABLISHMENT.uk
System info : Microsoft Windows Server 2003 R2 (Build 3790)
Processor : x86 Family 15 Model 4 Stepping 3, GenuineIntel
List of installed hotfixes :
KB890046
KB893756
KB896358
KB896422
KB896424
KB896428
KB898715
KB899587
KB899588
KB899589
KB899591
KB900725
KB901017
KB901214
KB902400
KB904706
KB905414
KB905915
KB908519
KB910437
KB911564
KB911927
KB912919
KB913446
Q147222


Netcard queries test . . . . . . . : Passed

 

[porkchopexpress]

The netdiag log seems to be short of info there should be a Per interface results: section as well with IP config info.

To be honest i would ring the company and tell them that your DNS is not configured properly anymore and this is affecting your group policy application that previously worked.
I wouldn't recommend changing much else as they may not support your setup if you do. From what you have told me It's almost certainly their doing that created the issue so they should sort it.

 

[edie209]

Thanks porkchopexpress I have just spoken to them and yes i get the it must have been a problem before we set up our software ETC, so I guess I am enteing into a battle with them now.

Maybe I should give them 20 seconds to comply ;-)

 

[porkchopexpress]

I would imagine that your setup should be:

Windows DC with DNS installed

All XP PC's point to this for DNS

Then the Windows DNS server forwards any internet requests to a caching DNS server on the Linux proxy.

 

[edie209]

Hey guess what I did all the changes you mentioned earlier domian controller pointing to itself etc and a pc has just pulled a policy so that must have been the problem, will check more but it looks like you sussed the problem.

A very big thankyou

 

[porkchopexpress]

No probs.

I would keep an eye on things and make sure that your internet filtering on the Linux box continues to work correctly.