+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 22
Windows Thread, Room not following policies correctly in Technical; I have recently done a change to the way pupil accounts are set up. They used to be a set ...
  1. #1

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,090
    Thank Post
    511
    Thanked 2,308 Times in 1,784 Posts
    Blog Entries
    24
    Rep Power
    803

    Room not following policies correctly

    I have recently done a change to the way pupil accounts are set up.

    They used to be a set of folders which were redirected to and local profiles only. Now I have a mandatory profile which they all use.

    This works 100% fine on every computer in our school except one of our IT suites.

    For some reason this room is not applying the (duplicate of the old policy, without the redirection settings) group policy. Why would this be?

    I have tried deleting local profiles from the computers but this makes no difference.

    Cheers
    Tony

  2. #2
    Quackers's Avatar
    Join Date
    Jan 2006
    Posts
    1,276
    Thank Post
    39
    Thanked 134 Times in 110 Posts
    Rep Power
    51

    Re: Room not following policies correctly

    They have not got loopback policy enabled have they?

  3. #3

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,800
    Thank Post
    110
    Thanked 582 Times in 503 Posts
    Blog Entries
    1
    Rep Power
    223

    Re: Room not following policies correctly

    Run the GPMC with modelling and results wizards. Compare and contrast. Also follow up any errors the reports find directly.

    Run netdiag on the clients.

  4. #4
    timbo343's Avatar
    Join Date
    Dec 2005
    Location
    Leeds/York area, North Yorkshire
    Posts
    2,772
    Thank Post
    251
    Thanked 220 Times in 168 Posts
    Rep Power
    87

    Re: Room not following policies correctly

    you could always try re-joining the computers back to the domain. Its a long shot tho

  5. #5

    Join Date
    Aug 2005
    Location
    London
    Posts
    3,144
    Thank Post
    113
    Thanked 518 Times in 447 Posts
    Blog Entries
    2
    Rep Power
    121

    Re: Room not following policies correctly

    have you looked in the event log on the machines? We sometimes find that machines fail to apply policies.

    Look in the application log for event 1704 - "Security policy in the Group policy objects has been applied successfully." You should see about 1 per day; if they're not there then you'll probably find you've got event 1202 showing a failure to apply. The MS article http://support.microsoft.com/kb/324383 gives lots of info on this but a quick thing to try is repairing the security database - at a prompt on the machine run
    esentutl /p /o c:\WINDOWS\security\Database\secedit.sdb
    and then force an update:
    gpupdate /force
    - you'll probably need to reboot and then check the event logs again.

    If it is a problem with the secedit database then you can fix it on a batch of machines by using psexec (from http://www.microsoft.com/technet/sys...s/default.mspx) - just write a batch file with a series of

    psexec \\computer1 esentutl /p /o c:\WINDOWS\security\Database\secedit.sdb
    psexec \\computer2 esentutl /p /o c:\WINDOWS\security\Database\secedit.sdb
    psexec \\computer3 esentutl /p /o c:\WINDOWS\security\Database\secedit.sdb

    etc.

    Steve

  6. #6

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,582
    Thank Post
    107
    Thanked 761 Times in 592 Posts
    Rep Power
    179

    Re: Room not following policies correctly

    They aren't just looking at cached copies of the old profiles are they? Run delprof over them.

  7. #7

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,090
    Thank Post
    511
    Thanked 2,308 Times in 1,784 Posts
    Blog Entries
    24
    Rep Power
    803

    Re: Room not following policies correctly

    Well it isn't the security database and the policies are applying according to the event viewer.

    It also isn't the profiles as I have delproffed them all.

    I have also tried re-joining to the domain.

    The last thing for me to do is build a new image and reimage the lot of em I suppose.

  8. #8

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,800
    Thank Post
    110
    Thanked 582 Times in 503 Posts
    Blog Entries
    1
    Rep Power
    223

    Re: Room not following policies correctly

    Can you post the output from netdiag when run from one of the affected clients?

  9. #9
    tscnmuk's Avatar
    Join Date
    Jan 2007
    Location
    Lincolnshire
    Posts
    216
    Thank Post
    5
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Room not following policies correctly

    That's probabaly a little extream but I have been there and done that myself. The most frustrating thing in the world when your policies aren't applying correctly but there appears to be no reason for it. Good luck and I hope you find the solution before having to reimage them all.

    Tom

  10. #10

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,090
    Thank Post
    511
    Thanked 2,308 Times in 1,784 Posts
    Blog Entries
    24
    Rep Power
    803

    Re: Room not following policies correctly

    Netdiag won't run - 'The procedure entry point DnsGetPrimaryDomainName_UTF8 could not be located ini the dynamic library DNSAPI.dll'

    I think there is something wrong with WMI on the machines, amongst other things...

  11. #11

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,800
    Thank Post
    110
    Thanked 582 Times in 503 Posts
    Blog Entries
    1
    Rep Power
    223

    Re: Room not following policies correctly

    Your attempting to use the W2k version of Netdiag on XP/W2K3. Don't do that. It doesn't work. Use the version from the XP support tools or the 2k3 server cd. Or just download it from Microsoft.

  12. #12

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,090
    Thank Post
    511
    Thanked 2,308 Times in 1,784 Posts
    Blog Entries
    24
    Rep Power
    803

    Re: Room not following policies correctly

    I have installed the support tools for XP and it is not there. I'll have a look on the 2k3 cd.

  13. #13

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,800
    Thank Post
    110
    Thanked 582 Times in 503 Posts
    Blog Entries
    1
    Rep Power
    223

    Re: Room not following policies correctly

    Here's a download URL if you haven't found your copy yet.

    http://www.microsoft.com/downloads/d...displaylang=en

  14. #14

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,090
    Thank Post
    511
    Thanked 2,308 Times in 1,784 Posts
    Blog Entries
    24
    Rep Power
    803

    Re: Room not following policies correctly

    Ok, tried with that version and get a similar error 'The procedure entry point DnsNetworkInformation_CreateFromFAZ cold not be located in the dynamic link library DNSAPI.dll' - this is the one from the 2k3 cd.

    The XP Support tools pack didn't install netdiag... (Unless I was just installing an update or something?)

  15. #15

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,800
    Thank Post
    110
    Thanked 582 Times in 503 Posts
    Blog Entries
    1
    Rep Power
    223

    Re: Room not following policies correctly

    You can't run the W2k3 version of Netdiag on XP either. You need the XP version. It is contained in the download I posted however it gets installed in "C:\Program Files\Support Tools\" This folder is not in your path. Either CD into the folder at the dos prompt. Or copy the netdiag.exe program into C:\Windows\system32

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 6
    Last Post: 19th October 2007, 02:48 PM
  2. Replies: 4
    Last Post: 31st August 2007, 11:31 AM
  3. Replies: 2
    Last Post: 1st May 2007, 09:17 AM
  4. DNS on one client not working even server IPs set correctly
    By NetworkGeezer in forum Wireless Networks
    Replies: 6
    Last Post: 13th February 2007, 02:13 PM
  5. Replies: 9
    Last Post: 18th December 2006, 10:07 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •