Upgraded and now Group Policies wont work.

[Whitestar]

Ok, I've just done an inplace upgrade of server 2000 to server 2008 on my test network to find any pitfalls before I do it on my live network.

You can't just upgrade right to server 08, you have to upgrade to server 03 first, which I did following the instructions from Microsoft. That went smoothly and everything was working ok afterwards. I was able to log on to a client machine using a doamin user account and all the correct settings were applied from group policy.

I then upgraded to server 08, again following the instructions from Microsoft and everything went smoothly. But although I could log on to a client machine using a domain user account none of the group poilicy settings were applied.

I have tried disjoing and rejoing to the domain, but that doesn't work.

I have tried creating a brand new policy from scratch, but that doesn't get applied either.

I did raise the forest and domain levels to server 2008, but from what i have read that only affects what server OS you can run on domain controllers.

This is happening on windows 2000 and XP client machines.

Anyone have any ideas?

Mark

[maf_001]

Yeh i used to do alot of 2000 to 2k3 upgrades and this was the most common problem. Did you run adprep /gpprep on all you domian controllers first?

[DMcCoy]

Did you add the old ADM files to the *new* policy? There aren't any on the server anymore. The new admx will only apply to Vista/2008.

[Whitestar]

Originally Posted by maf_001

Yeh i used to do alot of 2000 to 2k3 upgrades and this was the most common problem. Did you run adprep /gpprep on all you domian controllers first?

Yep
I did
adprep /forestprep
adprep /domainprep
adprep /domainprep /gpprep

before upgrading S2k to S03 and before upgrading S03 to S08.

@DMcCoy
No I didnt. I just wanted to test that it wasnt the old policies that were the problem. The only thing i set in the new policy was a proxy server for internet explorer.


It turns out that there's a problem "downloading" the policy settings to the clients. I can navigate to \\Test-Server\SYSVOL\, but when i click on the Test.Network folder I get this error.
"\\Test-Server\SYSVOL\Test.Network is not accessible
The data present in the reparse point buffer is invalid"

I have searched this on google and there seems to be very little info about it.

[maf_001]

when you upgraded did you transfer the 5 roles over to the new server everytime? as you will have had to move to a new box for each step.

[FN-GM]

When you upgraded to 2k8 did the network adapter setting stay the same. I am thinking for some reason it has set the server to use DHCP so the DNS settings on the clients will not be correct.

Z

[Whitestar]

I only have one domain controller which acts as the operations master for all FSMO roles.

EDIT

and yes the network adapter has stayed the same and kept its static settings.

[maf_001]

did it let you just upgrade this domain controller everytime? I have not managed to upgrade any of mine from 2k3 to 2k8?

[FN-GM]

Originally Posted by Whitestar

I only have one domain controller which acts as the operations master for all FSMO roles

But are the IP settings correct? are the clients DNS pointing to the DC?

Z

[Whitestar]

Originally Posted by maf_001

did it let you just upgrade this domain controller everytime? I have not managed to upgrade any of mine from 2k3 to 2k8?

Yep, It went from S03 to S08 without any issues at all.

And yes all the clients DNS are pointing to the DC

[FN-GM]

have you tried creating a new policy in an ou and blocked inheritance?
Do you have loopback setup?

Z

[Whitestar]

Yes I have tried that and no I don't have loopback setup.

[FN-GM]

i doubt this will be it but is the firewall on?

[Whitestar]

hehe, I did think that myself and would have felt very stupid if it was, but no its not on.

[Joe_Pineapples]

What does rsop say when run on the clients?