+ Post New Thread
Results 1 to 8 of 8
Windows 7 Thread, User Group Policies not applying in Technical; Hi everyone Having a problem with Group Policy on some of our curriculum machines at the moment. When anyone logs ...
  1. #1
    jlucas's Avatar
    Join Date
    Jan 2009
    Location
    Cornwall
    Posts
    125
    Thank Post
    13
    Thanked 15 Times in 9 Posts
    Rep Power
    14

    User Group Policies not applying

    Hi everyone

    Having a problem with Group Policy on some of our curriculum machines at the moment.
    When anyone logs on (administrator/teacher/student) the User side of Group Policy seems to fail.

    It doesn't seem to be happening to all machines or a specific set of users.

    When logging onto an affected machine it takes around 10 minutes to complete the log on (usually about 20seconds), and the user will have no proxy settings or restrictions.

    Group Policy preferences seem to be applying as they were getting network drives.

    The client log files don't seem particularly helpful, in Application I get:

    The winlogon notification subscriber <GPClient> took 481 second(s) to handle the notification event (Logon).

    When digging down into the GroupPolicy Operational log I get a few more errors:

    The LDAP call to connect and bind to Active Directory completed.
    curric-server1.domain.sch.uk
    The call failed after 240148 milliseconds.

    Group Policy failed to discover the Domain Controller details in 481388 milliseconds.

    Error: Failed to register for connectivity notification. Error code 0x4CE.

    I'm having trouble finding anything specific regarding these errors, hoping someone else here has a bit more experience and might be able to help me!
    If anyone needs any more info or anything else I shall be watching this thread.

    Edit: When running gpresult on a machine it gives "The user %User% does not have RSOP data"

    Thanks
    James.
    Last edited by jlucas; 2nd October 2012 at 11:15 AM.

  2. #2
    Ergo's Avatar
    Join Date
    Sep 2012
    Location
    Nottingham
    Posts
    111
    Thank Post
    16
    Thanked 26 Times in 25 Posts
    Rep Power
    9
    @jlucas from the sounds of that error message the server which the client machine is trying to connect to is ignoring the connection request to the LDAP database. In my experience this kind of thing happens when
    - the server the client is trying to connect to is not longer a domain controller
    - the server the client is trying to connect to is busy and cannot deal with the number of requests it is receiving
    - there is a network error preventing the client connection from reaching the server

    I hope these suggestions help.

    Regards,

    David

  3. #3
    Darylrese's Avatar
    Join Date
    Sep 2010
    Location
    Portsmouth
    Posts
    422
    Thank Post
    10
    Thanked 7 Times in 6 Posts
    Rep Power
    9
    We get a very simular error and sometimes takes upto 40mins for users to logon!!

  4. #4

    ZeroHour's Avatar
    Join Date
    Dec 2005
    Location
    Edinburgh, Scotland
    Posts
    5,705
    Thank Post
    904
    Thanked 1,321 Times in 803 Posts
    Blog Entries
    1
    Rep Power
    445
    I would stop the firewall service first (or set to manual) unless you have already done that as windows could be preventing access if it thinks the network configuration has changed.
    In the event log is the nic coming up properly?

  5. #5
    jlucas's Avatar
    Join Date
    Jan 2009
    Location
    Cornwall
    Posts
    125
    Thank Post
    13
    Thanked 15 Times in 9 Posts
    Rep Power
    14
    @Ergo - Yes some sort of network/connection problem was the conclusion I was coming to.
    @ZeroHour - Firewalls are turned off as standard on the domain. Services are running but the firewall is disabled. Can't see any problems with the NIC on any of the 3 DCs or the clients.

    Thanks for your help so far guys.

  6. #6
    jlucas's Avatar
    Join Date
    Jan 2009
    Location
    Cornwall
    Posts
    125
    Thank Post
    13
    Thanked 15 Times in 9 Posts
    Rep Power
    14
    Just bumping this thread with more info. So far I have:

    Re-imaged the machine.
    Re-written (re-made) the group policies from scratch.
    Made new machine and new user accounts in AD.
    Moved the machines to a different switch (changed for one in a working room)

    I'm starting to despair a bit!

    I'm open to any ideas no matter how weird or out there!

    Edit: Group Policy is now not giving any errors and is pulling down all correct settings (folder re-direction/restrictions/etc) except for the proxy.

    Proxy is ticked but the box is blank.

    Doesn't give any errors in Event Viewer, keeps telling me everything executed successfully!!

    Thanks
    James
    Last edited by jlucas; 9th October 2012 at 12:10 PM.

  7. #7
    dhoward_westexetc's Avatar
    Join Date
    May 2008
    Location
    Exeter, Devon
    Posts
    223
    Thank Post
    46
    Thanked 21 Times in 17 Posts
    Rep Power
    16
    Quote Originally Posted by jlucas View Post
    Just bumping this thread with more info. So far I have:

    Re-imaged the machine.
    Re-written (re-made) the group policies from scratch.
    Made new machine and new user accounts in AD.
    Moved the machines to a different switch (changed for one in a working room)

    I'm starting to despair a bit!

    I'm open to any ideas no matter how weird or out there!

    Edit: Group Policy is now not giving any errors and is pulling down all correct settings (folder re-direction/restrictions/etc) except for the proxy.

    Proxy is ticked but the box is blank.

    Doesn't give any errors in Event Viewer, keeps telling me everything executed successfully!!

    Thanks
    James
    I had the same thing.

    Make a separate GPO just with the proxy settings and add that to the top of the list - worked for me!

  8. #8
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,475
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52
    Hi

    Have the machine come from the same image?
    Have you turned in verbose logging.
    Have you done a gpresult on the client
    Have you done a group policy modeling in in group policy?
    Have you checked your dns try nslookups?
    If you are running windows 7 is ip6 disabled
    Is rss and autotunneling disabled if using windows 7
    Is there anything in the event logs of the servers?
    Are your domain controller replicating try a repadmin /showrepl
    Have you tried a rsop.msc on the client

    You might have a corrupt policy.

    Richard

SHARE:
+ Post New Thread

Similar Threads

  1. Group Policy not applying
    By ricki in forum Windows
    Replies: 6
    Last Post: 30th April 2010, 04:36 PM
  2. group policy not applying
    By bart21 in forum Windows
    Replies: 4
    Last Post: 20th April 2010, 07:45 PM
  3. Group Policy not applying
    By Maximus in forum Wireless Networks
    Replies: 10
    Last Post: 4th June 2008, 10:51 PM
  4. Replies: 20
    Last Post: 12th November 2007, 04:55 PM
  5. Group Policy not applying
    By edie209 in forum Windows
    Replies: 18
    Last Post: 27th September 2006, 07:48 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •