Domain policies not being pulled across

[badsurname]

To update you all;

 

Have been through DNS with a fine tooth comb, it really does appear to be working perfectly. Forward and reverse pinging works perfectly, including the affected machines. Myself and my colleagues have examined the DNS servers carefully and there appears to be absolutely no sign of trouble on that front.

 

I and another colleague have also checked that the old DC has been completely purged from the system thoroughly enough for me to say with confidence that the operation was completely successful.

 

I will be running through some of your other suggestions and will report back presently.

 

Thank you all once again for your assistance.

[HodgeHi]

I also have the GPO disable the firewall but on occasions i could not ping the clients at all. For some unknown reason the firewall seemed to block everything. I could not get a group policy to come down and apply because of the firewall.

 

I tried rsop and group policy results wizard from the DC and could not connect to the RPC.

 

I then checked the firewall. I was sure that it had been disabled but it was on and stopping all connections. I could ping the server from the client but i couldn't ping the client. Disabling it resulted in GPOs being applied again.

[badsurname]

Sorry, did forget to mention that all PC firewalls have been deactivated.

[badsurname]

Just as an update, a colleague of mine discovered the solution. It appears that our the aspects of the policies that were not being pulled across required administration rights in order to apply. An old 'everyonetoadministrator' script on the server put it all to rights and we live in policy harmony once more. Thank you all for your help.

[BootManager]

just casually browsing this thread and would be doubtful that everyone-to-admin-rights would be the correct solution even if it does get the desired results.

I think personally that something has been missed and since you state that these problems occur on the new machines even after re-imaging etc then I would be looking at bios, ...and to me the only obvious thing in that case is that your clocks may be out of sync with your server (this would cause all sorts of unobvious faults). You might find that your login script has a command that resyncs time with the server but the command fails when the user doesnt have admin rights.

Worth a look.