+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 17
Windows Server 2008 R2 Thread, GPupdate fails on new PC's in Technical; Hi I'm trying to install 16 Lenovo PC's on my existing Server 2008 r2 network with Win7 Pro x64 Image. ...
  1. #1

    Join Date
    Oct 2009
    Location
    Coalville
    Posts
    54
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    GPupdate fails on new PC's

    Hi
    I'm trying to install 16 Lenovo PC's on my existing Server 2008 r2 network with Win7 Pro x64 Image.

    Everything builds ok but when I go to perform a GPUpdate I get the following message in dos:-

    C:\>gpupdate
    Updating Policy...

    User Policy update has completed successfully.
    Computer policy could not be updated successfully. The following errors were enc
    ountered:

    The processing of Group Policy failed. Windows could not resolve the computer na
    me. This could be caused by one of more of the following:
    a) Name Resolution failure on the current domain controller.
    b) Active Directory Replication Latency (an account created on another domain co
    ntroller has not replicated to the current domain controller).

    To diagnose the failure, review the event log or run GPRESULT /H GPReport.html f
    rom the command line to access information about Group Policy results.

    The GPReport generated reports the following in the Component Status section:-

    Group Policy Infrastructure failed due to the error listed below.

    Access is denied.

    Note: Due to the GP Core failure, none of the other Group Policy components processed their policy. Consequently, status information for the other components is not available.

    Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between 21/08/2012 10:13:57 and 21/08/2012 10:14:01.

    The computers appears ok in AD. I have tried re-imaging using different computer name and I get the same problem

    Any ideas from a desperate techie

  2. #2
    cpjitservices's Avatar
    Join Date
    Jul 2010
    Location
    Hessle
    Posts
    2,490
    Thank Post
    517
    Thanked 290 Times in 266 Posts
    Rep Power
    82
    is DNS working properly ?

  3. #3

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,807
    Thank Post
    517
    Thanked 2,469 Times in 1,913 Posts
    Blog Entries
    24
    Rep Power
    835
    Do the computers appear ok on the DNS server?

  4. #4

    Join Date
    Oct 2009
    Location
    Coalville
    Posts
    54
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Yes everything appears ok.

    I can logon access shared rescource connect to the Internet.

  5. #5

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,807
    Thank Post
    517
    Thanked 2,469 Times in 1,913 Posts
    Blog Entries
    24
    Rep Power
    835
    Quote Originally Posted by TonyMiles View Post
    Yes everything appears ok.

    I can logon access shared rescource connect to the Internet.
    That doesn't confirm the DNS has records for those machines though.

    In the DNS server console, do the computers have A records in place, with the correct IP addresses?

  6. #6
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,662
    Thank Post
    166
    Thanked 220 Times in 203 Posts
    Rep Power
    67
    Are they Thinkcentre Edge machines with Realtek NICs by any chance? Drivers for that card are awful, try enabling the GPO "always wait for network" and Google for the DHCP Media sense reg key that you might also need to disable.

  7. #7

    Join Date
    Oct 2009
    Location
    Coalville
    Posts
    54
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Sorry i'm being a bit thick here if i go into the DNS console and look up the forward lookup zone and click on the domain, I can see the coomputer entries are all there. The nics are Intel 82579LM and I can't see any reference to GPO in their settings

  8. #8
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,662
    Thank Post
    166
    Thanked 220 Times in 203 Posts
    Rep Power
    67
    Good news that they're not Realtek cards so that rules one thing out the equation

  9. #9

    Join Date
    Oct 2009
    Location
    Coalville
    Posts
    54
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I suppose so, althoug i'm still no nearer solving the problem

  10. #10

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,807
    Thank Post
    517
    Thanked 2,469 Times in 1,913 Posts
    Blog Entries
    24
    Rep Power
    835
    Have you tried running dcdiag on one of the machines?

  11. #11

    Join Date
    Oct 2009
    Location
    Coalville
    Posts
    54
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I have just tried it and it failed what does it do? Nslookup reolves ok. I have tried logging onto a shared resource on the effected pc and it wont recognise the name but will connect if I enter the ip address, so it must be DNS not resolving the name.

  12. #12
    cpjitservices's Avatar
    Join Date
    Jul 2010
    Location
    Hessle
    Posts
    2,490
    Thank Post
    517
    Thanked 290 Times in 266 Posts
    Rep Power
    82
    Yep, definitely looks like a DNS issue.

  13. #13

    Join Date
    Oct 2009
    Location
    Coalville
    Posts
    54
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Ok just ran dcdiag on server and it gave the following results:-
    irectory Server Diagnosis

    Performing initial setup:
    Trying to find home server...
    Home Server = GLENSVR01
    * Identified AD Forest.
    Done gathering initial info.

    Doing initial required tests

    Testing server: Default-First-Site-Name\GLENSVR01
    Starting test: Connectivity
    Message 0x621 not found.
    Got error while checking LDAP and RPC connectivity. Please check your firewall settings.
    ......................... GLENSVR01 failed test Connectivity

    Doing primary tests

    Testing server: Default-First-Site-Name\GLENSVR01
    Skipping all tests, because server GLENSVR01 is not responding to directory service requests.


    Running partition tests on : ForestDnsZones
    Starting test: CheckSDRefDom
    ......................... ForestDnsZones passed test CheckSDRefDom
    Starting test: CrossRefValidation
    ......................... ForestDnsZones passed test CrossRefValidation

    Running partition tests on : DomainDnsZones
    Starting test: CheckSDRefDom
    ......................... DomainDnsZones passed test CheckSDRefDom
    Starting test: CrossRefValidation
    ......................... DomainDnsZones passed test CrossRefValidation

    Running partition tests on : Schema
    Starting test: CheckSDRefDom
    ......................... Schema passed test CheckSDRefDom
    Starting test: CrossRefValidation
    ......................... Schema passed test CrossRefValidation

    Running partition tests on : Configuration
    Starting test: CheckSDRefDom
    ......................... Configuration passed test CheckSDRefDom
    Starting test: CrossRefValidation
    ......................... Configuration passed test CrossRefValidation

    Running partition tests on : Glenfield
    Starting test: CheckSDRefDom
    ......................... Glenfield passed test CheckSDRefDom
    Starting test: CrossRefValidation
    ......................... Glenfield passed test CrossRefValidation

    Running enterprise tests on : Glenfield.Local
    Starting test: LocatorCheck
    ......................... Glenfield.Local passed test LocatorCheck
    Starting test: Intersite
    ......................... Glenfield.Local passed test Intersite
    Last edited by TonyMiles; 21st August 2012 at 03:09 PM.

  14. #14

    Join Date
    Oct 2009
    Location
    Coalville
    Posts
    54
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I've found the fix for the above problem via Microsoft. After appling the fix I re-ran dcdiag again and got the following error message:-

    rting test: SystemLog
    An error event occurred. EventID: 0x40000004
    Time Generated: 08/21/2012 14:08:49
    Event String:
    The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server ks2s-10$. The target name used was cifs/KS2S-10. T
    his indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server princip
    al name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is regi
    stered on, and only registered on, the account used by the server. This error can also happen when the target service is using a differ
    ent password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Pl
    ease ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qu
    alified, and the target domain (GLENFIELD.LOCAL) is different from the client domain (GLENFIELD.LOCAL), check if there are identically
    named server accounts in these two domains, or use the fully-qualified name to identify the server.
    ......................... GLENSVR01 failed test SystemLog
    Starting test: VerifyReferences
    ......................... GLENSVR01 passed test VerifyReferences

    ks2s-10 is 1 of the computers giving me problems. Any suggestions as this is getting abit out of my league?

  15. #15
    Duke5A's Avatar
    Join Date
    Jul 2010
    Posts
    806
    Thank Post
    83
    Thanked 132 Times in 115 Posts
    Blog Entries
    8
    Rep Power
    32
    I ran into this just the other day with a student machine. Trying to ping anything by host name was failing, but when I pinged the local machine by its host name it resolved as an IPV6 address. Going into the adapter properties and unchecking IPV6 support resolved the issue.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Windows 7 Home licenses on new PCs
    By gshaw in forum Windows
    Replies: 20
    Last Post: 25th April 2012, 11:19 PM
  2. Replies: 0
    Last Post: 25th September 2009, 08:28 AM
  3. Any suggestions - drive mapping fails on PC
    By e_g_r in forum Wireless Networks
    Replies: 3
    Last Post: 29th January 2009, 11:50 AM
  4. XP Licences on new PCS
    By raufdean in forum Windows
    Replies: 5
    Last Post: 13th January 2009, 11:38 AM
  5. What steps to follow to launch a Virtual CD on a new PC
    By speckytecky in forum How do you do....it?
    Replies: 0
    Last Post: 8th April 2008, 01:57 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •