GPOs Not Applying via a wireless connection

[GreyFox]

Hi all,

 

I was wondering if anyone could help me with an issue that has been plaguing me for the last few weeks - GPOs failing to apply on our laptops over a wireless conenction. Error message when running rsop - "Group Policy Infrastructure Failed : The target name is incorrect". With 1058 errors in Event Viewer - pointing at our Default Domain Policy. However, everything works fine via lan cable.

 

I've spent ages looking for solutions, but there are only a few places that I've seen something similar, yet nothing seems to work.

 

One place I did find some advice was a topic here: http://www.edugeek.net/forums/windows-7/114326-group-policies-not-always-applying-windows-7-wireless.html - with the suggestion that a registry key be created https://support.microsoft.com/en-us/kb/2421599

 

We already have this active on out network, albeit set to a bit longer than 60 (240 - set before I took over playing with GPOs). There are also a couple of other settings in another GPO:

 

Computer Configuration - Policies - Administrative Templates - System - Logon - 'Always wait for the network at computer startup and logon'

 

Computer Configuration - Policies - Administrative Templates - System - Group Policy - 'Startup policy processing wait time' (which I believe overrides the registry item)

 

We use a Ruckus wireless system, but I've tried with an old D-Link WAP, which has the same results.

 

Any help would be very much appreciated.

 

Thanks guys.

 

James

[dry]

Try manually setting the DNS address to the IP of your AD server within the wireless adapter properties, reboot and try a gpupdate /force... I had a massive headache with joining PCs to the domain when I first started at my current school. Sloppy practise by previous 'network managers' and 0 documentation resulted in a very steep learning curve for me.

[GreyFox]

Thanks for your reply, Dry. Unfortunately that doesn't appear to have made a difference

I know what you went through though mate! It wasn't quite that bad here, but no documentation for anything. I'm writing up user/tech guides for most of the things I do, plus noting down important settings or information. So yeah, the learning curve can be quite steep.

Without documentation you're left with a right mess!

[internetuser]

power management on some wireless cards can cause problems.

 

I think found a powercfg script to run on them which helped a lot.

 

What type of laptops / wireless card do they have ?

[GreyFox]

Hi internetuser

 

Yeah, I think I changed some setting a few years ago which helped to fix an issue. But I don't see anything obvious in there at the moment - maybe you can though.

 

We have three/four different types, with at least two of them causing problems. The two I've been working on so far are:

 

Dell Vostro 3350 - Intel Centrino Wireless-N 1030

RM nBook 4300 - Intel Wireless WiFi Link 4965AGN

 

Thanks

[internetuser]

I run this as admin on them all

Powercfg -setactive 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c

 

and it seems to do the job.

 

Its sometimes plugging a cable in as well and run the gpupdate/force to get them back in sync as well for going forward.

Edited April 21, 2015 by internetuser

[GreyFox]

Hmm, so setting the power plan to 'Max Performance' basically? This is already set, but I have just tried this to make sure, it appears to have loaded some settings after a gpupdate /force (as it sometimes does), but then I'm still getting the lovely red X when running RSOP. Group Policy Infrastructure - Failed 'The target account name is incorrect'. Plus another 1058 error in Event Manager

 

Thank you for your suggestion, but that doesn't appear to have done the trick.

[internetuser]

Plug the cable in and leave it a while giving it a few reboots and gupudates. Then see if it works as normal before going back wireless.

[GreyFox]

I've tried that this morning, but still no joy I'm afraid

[Duke5A]

Need some more information on your wireless setup. How are your devices authenticating, pre-shared key or Radius?

[kevin_lane]

You could try using Block inherent on a test ou and see if GP is having an effect too, if you have to the wait for network being applied then generally speaking your gpos will not be applied until the laptop has a solid connection which of course can be a pain

[GreyFox]

Hi guys,

 

Duke5A: Wireless setup - not a great system, but we manually connect to our wireless network after imaging. Nothing fancy, or even overly secure there. Simple WEP key. We didn't have much choice on our old wireless system and haven't moved with the times yet. I have actually tried one of our old WAPs, still does the same thing, although I don't know if the controller is interferring in some way?

 

Wireless controller is Ruckus ZoneDirector. Nothing special about our WLANs. Standard usage type, open authentication, WEP encrypted, no web authentication or wireless client isolation etc.

 

 

kevin_lane: Block Inheritance? tried adding a test laptop to a new OU with a test Default Domain Policy, blocking inheritance from the actual one. It still does the same.

 

Thanks

 

James

[Duke5A]

Have you tried setting a static address on the wireless NIC?

[GreyFox]

Static IP set on the laptop yes - including setting DNS servers. But thinking about it, I don't think I created a reservation in DHCP for it as well. I'll give this another go.

 

Thanks

[kevin_lane]

Any joy

[GreyFox]

Sorry about the delay guys. Unfortunately that hasn't made a difference.

 

Thanks

[Mr_Jiminy]

Sounds insane, but have you tried removing one of the affected laptops from the domain, then re-adding it?

 

I take it you're talking about basic security policies and not GPO software deployments?

[GreyFox]

Hi Mr_Jiminy,

 

I have mate, that's one of the first things I tried. Even joining the domain originally via wireless - still does the same.

 

It's just settings from GPOs in general. I found this issue whilst trying to deploy software - thought it a bit weird that it wasn't deploying anything.

But file moves and other information doesn't appear to apply either.

 

Thanks

 

James

[Duke5A]

Something else I just thought of: do you have your wireless subnet defined in ADSS (Active Directory Sites and Services). I've seen this slow down machines finding domain controllers.

[NB9457]

Edit: Ignore me, I shouldn't skim read Edited May 1, 2015 by NB9457

[GreyFox]

Hi Duke5A,

 

Nothing in there I'm afraid.

 

Thanks

[GreyFox]

Small update on this. I thought I'd try an old Acer Aspire, which I'd kept, despite clearing out a load of old equipment a few months ago. This laptop appears to work fine! It has a Broadcom wireless card, not Intel Oh dear, have we bought the wrong laptops I wonder?

 

[EDIT]:

 

Looking into settings for Intel wireless cards now. I came across this topic. So trying the Proset wireless utility now. First attempt failed, but I was already messing with different drivers etc. Reimaging and trying again. I'll see how this goes.

Edited May 11, 2015 by GreyFox

[Vash0wnz]

GreyFox, did you ever figure this out? I'm running into the exact same issue and have been for over a year now.

[GreyFox]

Hi Vash0wnz,

 

Unfortunately not :-( It's still very hit and miss, more miss than hit. We just ask people to pop down and see us if they have issues with X, Y and Z (not great I know). However, we've recently upgraded our printing system and most of the laptops seem to have obtained the settings from a GPO.

 

Are you on a Ruckus system as well? Although I'm not 100% sure that's to blame.

 

GreyFox