+ Post New Thread
Page 1 of 3 123 LastLast
Results 1 to 15 of 36
Windows Thread, Cannot Access group policy objects in Technical; When forcing an update in for group policy through cmd.. i check the event viewer after it has finished updating ...
  1. #1
    timbo343's Avatar
    Join Date
    Dec 2005
    Location
    Leeds/York area, North Yorkshire
    Posts
    2,991
    Thank Post
    287
    Thanked 274 Times in 195 Posts
    Rep Power
    116

    Cannot Access group policy objects

    When forcing an update in for group policy through cmd.. i check the event viewer after it has finished updating and i see an error message..
    Error SceCli
    Security policy cannot be propagated. Cannot access the template. Error code = -536870656.
    \\Domain\sysvol\Domain\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.

    Ive had a look at
    http://support.microsoft.com/?kbid=258296

    done what it has said but still no joy.. any one beable to help me out

    Tim

  2. #2

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Cannot Access group policy objects

    Is replication functioning?

  3. #3
    timbo343's Avatar
    Join Date
    Dec 2005
    Location
    Leeds/York area, North Yorkshire
    Posts
    2,991
    Thank Post
    287
    Thanked 274 Times in 195 Posts
    Rep Power
    116

    Re: Cannot Access group policy objects

    seems to be

  4. #4

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,343
    Thank Post
    624
    Thanked 1,584 Times in 1,421 Posts
    Rep Power
    414

    Re: Cannot Access group policy objects

    What tests have you done to check it is?

    Ben

  5. #5
    timbo343's Avatar
    Join Date
    Dec 2005
    Location
    Leeds/York area, North Yorkshire
    Posts
    2,991
    Thank Post
    287
    Thanked 274 Times in 195 Posts
    Rep Power
    116

    Re: Cannot Access group policy objects

    well looking at the policies on other servers

  6. #6

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Cannot Access group policy objects

    Run dcdiag on your DC's. Check the event log for errors and warnings.

  7. #7
    timbo343's Avatar
    Join Date
    Dec 2005
    Location
    Leeds/York area, North Yorkshire
    Posts
    2,991
    Thank Post
    287
    Thanked 274 Times in 195 Posts
    Rep Power
    116

    Re: Cannot Access group policy objects

    Test results ::

    Domain Controller Diagnosis

    Performing initial setup:
    Done gathering initial info.

    Doing initial required tests

    Testing server: Default-First-Site-Name\SETH
    Starting test: Connectivity
    ......................... SETH passed test Connectivity

    Doing primary tests

    Testing server: Default-First-Site-Name\SETH
    Starting test: Replications
    ......................... SETH passed test Replications
    Starting test: NCSecDesc
    Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
    Replicating Directory Changes All
    access rights for the naming context:
    CN=Schema,CN=Configuration,DC=shs,DC=com
    Error BUILTIN\Administrators doesn't have
    Replicating Directory Changes All
    access rights for the naming context:
    CN=Schema,CN=Configuration,DC=shs,DC=com
    Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
    Replicating Directory Changes All
    access rights for the naming context:
    CN=Configuration,DC=shs,DC=com
    Error BUILTIN\Administrators doesn't have
    Replicating Directory Changes All
    access rights for the naming context:
    CN=Configuration,DC=shs,DC=com
    ......................... SETH failed test NCSecDesc
    Starting test: NetLogons
    ......................... SETH passed test NetLogons
    Starting test: Advertising
    ......................... SETH passed test Advertising
    Starting test: KnowsOfRoleHolders
    ......................... SETH passed test KnowsOfRoleHolders
    Starting test: RidManager
    ......................... SETH passed test RidManager
    Starting test: MachineAccount
    ......................... SETH passed test MachineAccount
    Starting test: Services
    ......................... SETH passed test Services
    Starting test: ObjectsReplicated
    ......................... SETH passed test ObjectsReplicated
    Starting test: frssysvol
    ......................... SETH passed test frssysvol
    Starting test: frsevent
    ......................... SETH passed test frsevent
    Starting test: kccevent
    ......................... SETH passed test kccevent
    Starting test: systemlog
    ......................... SETH passed test systemlog
    Starting test: VerifyReferences
    ......................... SETH passed test VerifyReferences

    Running partition tests on : Schema
    Starting test: CrossRefValidation
    ......................... Schema passed test CrossRefValidation
    Starting test: CheckSDRefDom
    ......................... Schema passed test CheckSDRefDom

    Running partition tests on : Configuration
    Starting test: CrossRefValidation
    ......................... Configuration passed test CrossRefValidation
    Starting test: CheckSDRefDom
    ......................... Configuration passed test CheckSDRefDom

    Running partition tests on : shs
    Starting test: CrossRefValidation
    ......................... shs passed test CrossRefValidation
    Starting test: CheckSDRefDom
    ......................... shs passed test CheckSDRefDom

    Running enterprise tests on : shs.com
    Starting test: Intersite
    ......................... shs.com passed test Intersite
    Starting test: FsmoCheck
    ......................... shs.com passed test FsmoCheck

  8. #8

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Cannot Access group policy objects

    There you go then. Your replication is broken.

  9. #9
    timbo343's Avatar
    Join Date
    Dec 2005
    Location
    Leeds/York area, North Yorkshire
    Posts
    2,991
    Thank Post
    287
    Thanked 274 Times in 195 Posts
    Rep Power
    116

    Re: Cannot Access group policy objects

    ok how do i fix it??

  10. #10

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Cannot Access group policy objects

    You need to find out where it's failing first. What does the Replication event log say?

  11. #11
    timbo343's Avatar
    Join Date
    Dec 2005
    Location
    Leeds/York area, North Yorkshire
    Posts
    2,991
    Thank Post
    287
    Thanked 274 Times in 195 Posts
    Rep Power
    116

    Re: Cannot Access group policy objects

    first of all.. dont want to sound thick but how do i find the log ??

  12. #12
    timbo343's Avatar
    Join Date
    Dec 2005
    Location
    Leeds/York area, North Yorkshire
    Posts
    2,991
    Thank Post
    287
    Thanked 274 Times in 195 Posts
    Rep Power
    116

    Re: Cannot Access group policy objects

    might have found it
    Ntfrs

  13. #13

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Cannot Access group policy objects

    1) Login to DC
    2) Run Event Viewer
    3) Select 'File Replication Service'

  14. #14
    timbo343's Avatar
    Join Date
    Dec 2005
    Location
    Leeds/York area, North Yorkshire
    Posts
    2,991
    Thank Post
    287
    Thanked 274 Times in 195 Posts
    Rep Power
    116

    Re: Cannot Access group policy objects

    ok thanks... got this every morning...
    One hades dc:
    source: NtFrs
    Following is the summary of warnings and errors encountered by File Replication Service while polling the Domain Controller Hades.shs.com for FRS replica set configuration information.

    On seth dc:
    The File Replication Service has enabled replication from ISIS to SETH for c:\windows\sysvol\domain after repeated retries.


    On isis dc:

    The File Replication Service is having trouble enabling replication from SETH to ISIS for c:\windows\sysvol\domain using the DNS name seth.shs.com. FRS will keep retrying.
    Following are some of the reasons you would see this warning.

    [1] FRS can not correctly resolve the DNS name seth.shs.com from this computer.
    [2] FRS is not running on seth.shs.com.
    [3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.

    This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.

  15. #15

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Cannot Access group policy objects

    Ok, does your primary DNS IP as setup on your DC's point at the other DC or itself?

SHARE:
+ Post New Thread
Page 1 of 3 123 LastLast

Similar Threads

  1. Group policy
    By pedster666 in forum Hardware
    Replies: 5
    Last Post: 27th February 2008, 10:03 AM
  2. group policy
    By kevin_lane in forum How do you do....it?
    Replies: 2
    Last Post: 27th July 2007, 12:17 PM
  3. Group Policy
    By jman167 in forum Windows
    Replies: 1
    Last Post: 28th June 2007, 10:27 PM
  4. Group Policy
    By faza in forum Wireless Networks
    Replies: 27
    Last Post: 5th July 2006, 06:34 AM
  5. Group Policy
    By faza in forum Windows
    Replies: 15
    Last Post: 23rd May 2006, 09:39 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •