+ Post New Thread
Results 1 to 9 of 9
Windows Server 2008 R2 Thread, GPO Problem in Technical; Hi All. For some reason Yesterday we started having major GPO problems. First I noticed that the PC were pulling ...
  1. #1
    Techdw's Avatar
    Join Date
    Jan 2009
    Posts
    151
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    GPO Problem

    Hi All.

    For some reason Yesterday we started having major GPO problems. First I noticed that the PC were pulling over all the old printers from the old server, even though they are setup using GP on the new server, then
    today I am getting this message when doing a GPUpdate and now the GPO are not pulling over for clients.
    Servers -Windows 2008 R2
    Clients Widows 7

    This isthe error

    C:\Users\Administrator.******>gpupdate /force
    Updating Policy...

    User policy could not be updated successfully. The following errors were encount
    ered:

    The processing of Group Policy failed. Windows attempted to read the file \\DOMAIN NAME.local\sysvol\*******.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\g
    pt.ini from a domain controller and was not successful. Group Policy settings ma
    y not be applied until this event is resolved. This issue may be transient and c
    ould be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller
    has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    Computer policy could not be updated successfully. The following errors were enc
    ountered:

    The processing of Group Policy failed. Windows attempted to read the file \\DOMAIN NAME.local\sysvol\*****.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\g
    pt.ini from a domain controller and was not successful. Group Policy settings ma
    y not be applied until this event is resolved. This issue may be transient and c
    ould be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller
    has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.

    To diagnose the failure, review the event log or run GPRESULT /H GPReport.html f
    rom the command line to access information about Group Policy results.


    When I run the gpreport it flags up a red X for:


    Component Name Status Last Process Time
    Group Policy Infrastructure Failed 9/9/2011 8:31:53 AM
    Group Policy Infrastructure failed due to the error listed below.

    The system cannot find the path specified.

    Note: Due to the GP Core failure, none of the other Group Policy components processed their policy. Consequently, status information for the other components is not available.

    Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between 9/9/2011 8:31:52 AM and 9/9/2011 8:31:53 AM.



    Any Help would be great!
    Last edited by Techdw; 9th September 2011 at 10:10 AM.

  2. #2
    Techdw's Avatar
    Join Date
    Jan 2009
    Posts
    151
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I have rebooted all DC's, Checked all services are running. I can find the folder {31B2F340-016D-11D2-945F-00C04FB984F9}
    GPO are not pulling over to client machines at all.

  3. #3

    Join Date
    Mar 2011
    Location
    Coventry
    Posts
    61
    Thank Post
    12
    Thanked 6 Times in 6 Posts
    Rep Power
    8
    Are there any error events for replication on any of the domain controllers (something along the lines of replication failed/paused)?

    Can you ping all of the domain controllers (by FQDN) from the client/clients in question?

  4. #4
    Techdw's Avatar
    Join Date
    Jan 2009
    Posts
    151
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Can ping all servers.

    In Event Vwr, I have this error

    The DFS Replication service failed to contact domain controller to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues.

    Additional Information:
    Error: 160 (One or more arguments are not correct.)


    but nothing else in in there. We havent used DFS
    Last edited by Techdw; 9th September 2011 at 11:59 AM.

  5. #5
    Techdw's Avatar
    Join Date
    Jan 2009
    Posts
    151
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Also this

    The File Replication Service is no longer preventing the computer DC01 from becoming a domain controller. The system volume has been successfully initialized and the Netlogon service has been notified that the system volume is now ready to be shared as SYSVOL.

    Type "net share" to check for the SYSVOL share.

  6. #6

    Join Date
    Mar 2011
    Location
    Coventry
    Posts
    61
    Thank Post
    12
    Thanked 6 Times in 6 Posts
    Rep Power
    8
    In Event Vwr, I have this error

    The DFS Replication service failed to contact domain controller to access configuration information. Replication is stopped. The service will try again during the next configuration polling cycle, which will occur in 60 minutes. This event can be caused by TCP/IP connectivity, firewall, Active Directory Domain Services, or DNS issues.

    Additional Information:
    Error: 160 (One or more arguments are not correct.)
    I would probably be inclined to start looking at DNS for a solution.

    Active directory uses file replication itself as a way of replicating changes to the directory and to the SYSVOL shares. If replication is failing then the chances are that policies will not be updated on all other servers when changes occur.

    take a look at the technet site here for some ways to troubleshoot the first error you posted.

    In particular from the technet page, try nslookup on "yourdomain.local" and check that it returns an IP address of a domain controller.


    The File Replication Service is no longer preventing the computer DC01 from becoming a domain controller. The system volume has been successfully initialized and the Netlogon service has been notified that the system volume is now ready to be shared as SYSVOL.

    Type "net share" to check for the SYSVOL share.
    This event usually appears as a warning (if I remember correctly), and usually isn't something to worry about. Its just information to say that the domain controller is now up and running.

  7. #7
    Techdw's Avatar
    Join Date
    Jan 2009
    Posts
    151
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    OK after some looking around {31B2F340-016D-11D2-945F-00C04FB984F9} is the '' Default Domain Policy '' GPO and I cant access it, if I edit it it says '' Failed to open the GPO. You may not have appropriate right.. Details. The system cannot find the Path specified.

  8. #8
    Techdw's Avatar
    Join Date
    Jan 2009
    Posts
    151
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Just backed up {31B2F340-016D-11D2-945F-00C04FB984F9} which was the domain policy and all looks like its working.

  9. #9

    Join Date
    Mar 2011
    Location
    Coventry
    Posts
    61
    Thank Post
    12
    Thanked 6 Times in 6 Posts
    Rep Power
    8
    Quote Originally Posted by Techdw View Post
    Just backed up {31B2F340-016D-11D2-945F-00C04FB984F9} which was the domain policy and all looks like its working.
    Good good. Glad its all working. Keep an eye on any errors within DSFRS (eventvwr) though as I would hazard a guess that the error originated from there somewhere.

SHARE:
+ Post New Thread

Similar Threads

  1. GPO problem with scripts
    By irsprint in forum Windows Server 2000/2003
    Replies: 9
    Last Post: 11th September 2009, 11:41 AM
  2. Replies: 8
    Last Post: 11th March 2009, 10:16 AM
  3. WSUS gpo problem
    By z4ydi in forum Network and Classroom Management
    Replies: 7
    Last Post: 11th February 2008, 03:12 PM
  4. Problem with GPO after install
    By katem in forum Learning Network Manager
    Replies: 6
    Last Post: 28th November 2007, 03:31 PM
  5. Problem with Proxy settings in GPO
    By tosca925 in forum Windows
    Replies: 9
    Last Post: 18th January 2006, 12:54 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •