+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 18
Windows Server 2008 Thread, GP error in Technical; I'm trying to write a new policy for redirecting staff documents etc. but I'm getting an error and the policy ...
  1. #1
    leco's Avatar
    Join Date
    Nov 2006
    Location
    West Yorkshire
    Posts
    2,026
    Thank Post
    595
    Thanked 125 Times in 119 Posts
    Rep Power
    41

    GP error

    I'm trying to write a new policy for redirecting staff documents etc. but I'm getting an error and the policy is not being applied. (See attached for details) I'm not sure what I should do about it.

  2. #2
    leco's Avatar
    Join Date
    Nov 2006
    Location
    West Yorkshire
    Posts
    2,026
    Thank Post
    595
    Thanked 125 Times in 119 Posts
    Rep Power
    41
    I ran RSoP on the server to try to identify the issue. The following users cannot be found - IWAM_Server and IUSR_Server. I am assuming that the second bit of the name (Server) is the name of the containing server, is that right? These may have been deleted when uninstalling and clearing Exchange.

    Question: What do I now need to do as this error is on the Default Domain Controller policy? I need some help here as I'm way out of my depth and comfort zone. I've learnt an awful lot since my new DC crashed and burned but now feeling the heat as the new term looms.

    ps if there are any mods/admins around this thread should more correctly now be in the Windows Server 2008 forum, as the DC under investigation is not R2. Thanks
    Last edited by leco; 22nd August 2010 at 03:27 PM. Reason: added ps

  3. #3

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,103
    Thank Post
    1,357
    Thanked 2,316 Times in 1,629 Posts
    Rep Power
    693
    Moved the thread but can't help with the issue I'm afraid.
    What makes you think that the missing users are causing the error?

  4. #4
    leco's Avatar
    Join Date
    Nov 2006
    Location
    West Yorkshire
    Posts
    2,026
    Thank Post
    595
    Thanked 125 Times in 119 Posts
    Rep Power
    41
    Thanks Witch. The event viewer prompted me to look for Cannot Find Users, which listed IWAM and IUSR. It went on to give instructions for finding which policy these lost users were in. Hence Default Domain Controller policy. In RSoP the parts of the Policy that are affected are shown with a red cross against them. I could just remove them from the Policy but I'm not sure what they do exactly. Like I said slightly out of my depth here and sadly my external support is on holiday

  5. #5
    mb2k01's Avatar
    Join Date
    Jan 2007
    Posts
    1,128
    Thank Post
    189
    Thanked 227 Times in 193 Posts
    Rep Power
    92
    It's a pure guess as I've never had anything like this before, but it looks like some corruption or misconfiguration of the TerminalServer-server policy.
    Do you have a backup of that adml file that you can restore to?
    If not, could you remove any links to it and create a new polcicy from scratch?

  6. #6

    Join Date
    Jul 2009
    Location
    leeds
    Posts
    12
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    I agree with mb2k01, the adm template appears to have got messed up. Go to group policy and look under the administrative templates section and see if it is there, if not you will need to add it back in and look at what settings have been changed. Removing an admin template doesnt undo any settings and you will need the original template to amend those settings in group policy. The alternative is to create another policy and disable that one.

  7. #7
    leco's Avatar
    Join Date
    Nov 2006
    Location
    West Yorkshire
    Posts
    2,026
    Thank Post
    595
    Thanked 125 Times in 119 Posts
    Rep Power
    41
    Quote Originally Posted by mb2k01 View Post
    It's a pure guess as I've never had anything like this before, but it looks like some corruption or misconfiguration of the TerminalServer-server policy.
    Do you have a backup of that adml file that you can restore to?
    If not, could you remove any links to it and create a new polcicy from scratch?
    Any backup I might have had went with the loss of the original Master DC and other machines. Completely new territory for me here so could you be kind and give me instructions on exactly what to do please?

  8. #8
    leco's Avatar
    Join Date
    Nov 2006
    Location
    West Yorkshire
    Posts
    2,026
    Thank Post
    595
    Thanked 125 Times in 119 Posts
    Rep Power
    41
    Quote Originally Posted by littlehoughton View Post
    I agree with mb2k01, the adm template appears to have got messed up. Go to group policy and look under the administrative templates section and see if it is there, if not you will need to add it back in and look at what settings have been changed. Removing an admin template doesnt undo any settings and you will need the original template to amend those settings in group policy. The alternative is to create another policy and disable that one.
    Which admin template am I looking for in which branch of Group Policy? Given that I think this is the default domain controller policy how do I know what has been or should be set on it?

  9. #9
    mb2k01's Avatar
    Join Date
    Jan 2007
    Posts
    1,128
    Thank Post
    189
    Thanked 227 Times in 193 Posts
    Rep Power
    92
    Quote Originally Posted by leco View Post
    Any backup I might have had went with the loss of the original Master DC and other machines. Completely new territory for me here so could you be kind and give me instructions on exactly what to do please?
    The error message seems to suggest it is just the Terminal Server policy at fault (unless you get multiple error messages with different adml names?)
    It might be that it is applied at domain level, but doesn't look like it is the "domain policy".

    What Server OS are you running?
    Last edited by mb2k01; 22nd August 2010 at 08:07 PM.

  10. #10
    leco's Avatar
    Join Date
    Nov 2006
    Location
    West Yorkshire
    Posts
    2,026
    Thank Post
    595
    Thanked 125 Times in 119 Posts
    Rep Power
    41
    I don't think I've got a Terminal Server policy, well not one that I've made anyway. I guess that doesn't necessarily mean there isn't one though. I've looked at the domain controller policy which is where the red crosses are. This server is running 2008, there is another DC that's still on 2003, which is I think the named server in the Cannot find message. Thanks, I'll have a look when I get to work in the morning.

  11. #11
    mb2k01's Avatar
    Join Date
    Jan 2007
    Posts
    1,128
    Thank Post
    189
    Thanked 227 Times in 193 Posts
    Rep Power
    92
    On your 2008 server go to Administrative Tools > Group Policy Management. When it opens you familiar(ish) AD tree down the left hand side. Expand your domain and click on the Group Policy Objects folder, you shoudl then see a list of every policy for your domain. If you notice the TerminalServer policy in there, click on it and it will show you the OU's that it is linked to. From there it is your choice whether you choose to delete, disable or unlink from the individual OU's to test/see whether it gets rid of your errors

  12. #12
    leco's Avatar
    Join Date
    Nov 2006
    Location
    West Yorkshire
    Posts
    2,026
    Thank Post
    595
    Thanked 125 Times in 119 Posts
    Rep Power
    41
    A terminal server policy is not listed.

  13. #13

    Join Date
    Jul 2009
    Location
    leeds
    Posts
    12
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    You will need to check each policy in your GPMC, adm templates are irrelevant to the policy name so you need to check what adm templates you have under each administrative templates in your GP's. You can right click and select add/remove tempates and see if you can spot the adm template or alternatively do a search for *.adm templates or look in %systemroot%\inf or the adm template may already be added just dig under that administrative template branch. Also adm templates do not replicate around your domain controllers so if you manage your GP's from multiple servers you will have to search each one. It is best to designate a server you will use for adding templates then they are all in one place. Also you can usually spot when something is a miss with admin templates when looking at the settings in each GP via the GPMC, under the administrative template section if it cannot read the settings from a adm there is usually a GUID instead of what it should read in plain English.

  14. Thanks to littlehoughton from:

    leco (23rd August 2010)

  15. #14
    leco's Avatar
    Join Date
    Nov 2006
    Location
    West Yorkshire
    Posts
    2,026
    Thank Post
    595
    Thanked 125 Times in 119 Posts
    Rep Power
    41
    I did as far as I recall, consolidate all the .adms into a central store. Unfortunately this was on the now defunct Master DC. However, I think I copied them all to the 2008 server also. I'll do a search tomorrow and see what I can find. Thanks

  16. #15

    Join Date
    Dec 2009
    Posts
    261
    Thank Post
    6
    Thanked 29 Times in 27 Posts
    Rep Power
    14
    Do you have the PolicyDefinitions folder

    normally located \\FQDN\SYSVOL\FQDN\policies

    For some reason on our 2008 box it created a folder at this location called PolicyUpdates.....and we had loads of errors with GPO's under we created the missing definitions folder

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. [MS Office - 2003] WordTalk - "System Error &H80004005 (-2147467259). Unspecified error"
    By Darryl_Wilcox in forum Office Software
    Replies: 7
    Last Post: 1st April 2010, 02:36 PM
  2. Replies: 1
    Last Post: 10th November 2009, 10:37 AM
  3. error: 26 - Error Locating Server/Instance Specified
    By Strotzyl in forum Wireless Networks
    Replies: 4
    Last Post: 14th March 2009, 02:46 PM
  4. Replies: 0
    Last Post: 10th October 2008, 12:10 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •