+ Post New Thread
Results 1 to 13 of 13
Windows 7 Thread, Group policy error in Technical; Heya, I'm having problems with our group policy on a couple of batches of machines, i've imaged them and haven't ...
  1. #1
    Pyroman's Avatar
    Join Date
    Sep 2007
    Posts
    1,200
    Thank Post
    433
    Thanked 140 Times in 105 Posts
    Rep Power
    72

    Group policy error

    Heya,

    I'm having problems with our group policy on a couple of batches of machines, i've imaged them and haven't sysprepped as i believe win 7 recreates SIDs automatically and i was told i didn't need to sysprep. My issue is that on the base image i called the machine XYZ, i've then imaged them and changed the computer names to class1-1 class1-2 etc. then i do a GPUPDATE/FORCE and get the error below. If you then do the GPRESULT /H GPReport.html it says computer name : XYZ rather than what i've changed it to. Any ideas?


    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation. All rights reserved.

    C:\Users\user>
    C:\Users\user>gpupdate /force
    Updating Policy...

    User Policy update has completed successfully.

    The following warnings were encountered during user policy processing:

    The Group Policy Client Side Extension Folder Redirection was unable to apply on
    e or more settings because the changes must be processed before system startup o
    r user logon. The system will wait for Group Policy processing to finish complet
    ely before the next startup or logon for this user, and this may result in slow
    startup and boot performance.
    Computer policy could not be updated successfully. The following errors were enc
    ountered:

    The processing of Group Policy failed. Windows could not resolve the computer na
    me. This could be caused by one of more of the following:
    a) Name Resolution failure on the current domain controller.
    b) Active Directory Replication Latency (an account created on another domain co
    ntroller has not replicated to the current domain controller).

    To diagnose the failure, review the event log or run GPRESULT /H GPReport.html f
    rom the command line to access information about Group Policy results.

  2. #2

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,712
    Thank Post
    144
    Thanked 548 Times in 492 Posts
    Rep Power
    149
    From my experience, where sysprep could be avoided in XP, it's absolutely essential for a properly working domain PC on Windows 7. I had no end of problems trying to get around it with the first W7 machines, so I gave in and did it properly. It means things like Sophos, GP etc all work nicely. I still have to wipe out the WSUS settings on the imaged machines with a GPO which resets the registry settings though.

  3. Thanks to 3s-gtech from:

    Pyroman (6th November 2012)

  4. #3
    Pyroman's Avatar
    Join Date
    Sep 2007
    Posts
    1,200
    Thank Post
    433
    Thanked 140 Times in 105 Posts
    Rep Power
    72
    Quote Originally Posted by 3s-gtech View Post
    From my experience, where sysprep could be avoided in XP, it's absolutely essential for a properly working domain PC on Windows 7. I had no end of problems trying to get around it with the first W7 machines, so I gave in and did it properly. It means things like Sophos, GP etc all work nicely. I still have to wipe out the WSUS settings on the imaged machines with a GPO which resets the registry settings though.
    See i got told exactly the opposite, i HAD to sysprep in XP but win 7 was so advanced that i didn't need to!

  5. #4
    Pyroman's Avatar
    Join Date
    Sep 2007
    Posts
    1,200
    Thank Post
    433
    Thanked 140 Times in 105 Posts
    Rep Power
    72
    and now i'm being thick, can you post a link to sysprep download for W7?

  6. #5

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,109
    Thank Post
    1,367
    Thanked 2,374 Times in 1,671 Posts
    Rep Power
    703
    Here I deploy images straight to Win 7 machines with nothing done to them. I have done about 250 machines like this and never had any issues. I did sysprep the machine that I used for the image though.

  7. Thanks to witch from:

    Pyroman (6th November 2012)

  8. #6
    Norphy's Avatar
    Join Date
    Jan 2006
    Location
    Harpenden
    Posts
    2,242
    Thank Post
    50
    Thanked 274 Times in 212 Posts
    Blog Entries
    6
    Rep Power
    113
    Quote Originally Posted by Pyroman View Post
    and now i'm being thick, can you post a link to sysprep download for W7?
    You don't need one, sysprep is located at c:\windows\system32\sysprep

  9. Thanks to Norphy from:

    Pyroman (6th November 2012)

  10. #7
    Pyroman's Avatar
    Join Date
    Sep 2007
    Posts
    1,200
    Thank Post
    433
    Thanked 140 Times in 105 Posts
    Rep Power
    72
    Thanks, i shall try and see if it works, the weird thing is that i have a bunch of dell machines that are set up in exactly the same way with no sysprep and they work fine, it's just these 2 batches of PCs that are weird. I must've missed something somewhere when setting them up but for the life of me i can't work out what?!

  11. #8
    Pyroman's Avatar
    Join Date
    Sep 2007
    Posts
    1,200
    Thank Post
    433
    Thanked 140 Times in 105 Posts
    Rep Power
    72
    Welll..... i sysprepped the machine ans still exactly the same problem :-(

  12. #9
    Jamo's Avatar
    Join Date
    Jan 2009
    Posts
    1,349
    Thank Post
    66
    Thanked 175 Times in 147 Posts
    Rep Power
    60
    The first warning you get is related to you having either logon/startup scripts or software installation policices attached to the workstation. You cannot run these policies without restarting so that is all that means so its nothing to worry about. Not seen the second error before though?

    Have you tried pinging the DNS servers? and pinging the workstation from the DCs? Could be DNS related errors, usually duplicate DNS entries in the system, or an old DNS entry taking up the IP of the current imaged workstation.

  13. Thanks to Jamo from:

    Pyroman (6th November 2012)

  14. #10
    Pyroman's Avatar
    Join Date
    Sep 2007
    Posts
    1,200
    Thank Post
    433
    Thanked 140 Times in 105 Posts
    Rep Power
    72
    Quote Originally Posted by Jamo View Post
    The first warning you get is related to you having either logon/startup scripts or software installation policices attached to the workstation. You cannot run these policies without restarting so that is all that means so its nothing to worry about. Not seen the second error before though?

    Have you tried pinging the DNS servers? and pinging the workstation from the DCs? Could be DNS related errors, usually duplicate DNS entries in the system, or an old DNS entry taking up the IP of the current imaged workstation.
    Yeah the first error i'm not too worried about as it seems to be appling the user GPO, staff & kids can get to their files/shares atc. I first noticed the problem because printers wern't deploying. if you do add printer you can see them on the server and add them no problem but they won't go in automatically like they do on the rest of the machines. I was told there was a DNS error in town but i can't see how that should affect only half the machines not all of them. I can ping the DNS server from the machine as it's our local DC and i can ping the machine from the server with both i can ping using IP address AND the computer/server name

  15. #11
    Dom_'s Avatar
    Join Date
    Dec 2008
    Posts
    1,009
    Thank Post
    151
    Thanked 138 Times in 115 Posts
    Rep Power
    56
    Was the original image previously added to the domain (before you took an image of it)?

    I've seen this same problem where I did it by accident, had to start over with a fresh install.

  16. Thanks to Dom_ from:

    Pyroman (6th November 2012)

  17. #12
    Pyroman's Avatar
    Join Date
    Sep 2007
    Posts
    1,200
    Thank Post
    433
    Thanked 140 Times in 105 Posts
    Rep Power
    72
    Quote Originally Posted by Dom_ View Post
    Was the original image previously added to the domain (before you took an image of it)?

    I've seen this same problem where I did it by accident, had to start over with a fresh install.
    I don't think so because i have a large bit of paper above my desk saying "DO NOT ADD MACHINES TO DOMAIN IN IMAGE" but it was the 6th batch of machines, i was tired, so i could well have done.

    Below is the error within the gpresult.html

    -------------------------------------------------------------------------

    Component Status
    Component Name Status Last Process Time
    Group Policy Infrastructure Failed 06/11/2012 13:29:01
    Group Policy Infrastructure failed due to the error listed below.

    Access is denied.

    Note: Due to the GP Core failure, none of the other Group Policy components processed their policy. Consequently, status information for the other components is not available.

    Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between 06/11/2012 13:28:57 and 06/11/2012 13:29:01.
    Last edited by Pyroman; 6th November 2012 at 01:55 PM.

  18. #13
    Jamo's Avatar
    Join Date
    Jan 2009
    Posts
    1,349
    Thank Post
    66
    Thanked 175 Times in 147 Posts
    Rep Power
    60
    Are you domain controllers replicating correctly?

    I have always used MDT its quite a bit easier once its set up!

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 5
    Last Post: 8th February 2012, 09:38 AM
  2. Group Policy Error 1085
    By Admiral208 in forum Windows
    Replies: 10
    Last Post: 22nd September 2011, 12:55 PM
  3. Replies: 2
    Last Post: 13th August 2008, 12:24 AM
  4. Group Policy Management & Runtime Error
    By thegrassisgreener in forum Windows
    Replies: 8
    Last Post: 11th January 2008, 11:54 AM
  5. Group Policy error 1091 - Heeellllpppp
    By ajbritton in forum Windows
    Replies: 1
    Last Post: 10th April 2006, 03:13 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •