GPO not coming through on new laptops

[Tricky_Dicky]

Hi,

 

I've just done a clean install on the Toshiba A120 laptops in a hope to speed up logon times but when I add it to the domain and logon with a normal user it isn't pulling through all of the GPO's.

 

The machine is in the same container as all of the other laptops and the user is a standard user that was working fine on other laptops yesterday. I've done a GPupdate /force and restarted and now I'm getting a bit stuck.

 

Any ideas because I've got a Deputy breathing down my neck for these.

 

Cheers

 

Rich

[Jon]

Poor wireless signal?

 

If not i would check they have all registered a correct DNS host A record.

Edited June 23, 2009 by Jon
typo

[adhutton]

Hi,

 

I've just done a clean install on the Toshiba A120 laptops in a hope to speed up logon times but when I add it to the domain and logon with a normal user it isn't pulling through all of the GPO's.

 

The machine is in the same container as all of the other laptops and the user is a standard user that was working fine on other laptops yesterday. I've done a GPupdate /force and restarted and now I'm getting a bit stuck.

 

Any ideas because I've got a Deputy breathing down my neck for these.

 

Cheers

 

Rich

 

Has the laptop got a unique SID?

 

If not, that may be the problem.

 

Andrew

[Tricky_Dicky]

How would I check if it has a unique SID?

 

Our GPO structure is set up so

 

Default Domain

--Curriculum

----Staff

----Students

 

It's picking up all the GPO for, Default, Curriculum and strangely if I log on with a Staff account that works fine, but the students doesn't.

 

Any ideas?

 

The DNS seems to be fine, pointing to our only DNS server at *.55

 

Rich

[Jon]

Are the laptops connecting wirelesly or with a cable?

 

If wireless...is it connecting before the user logs on? (if not it is best to use windows to manage your wireless connection rather than the manufacturers utility.

 

what do you get if you run gpresult?

 

what do you get if you run ipconfig /all?

 

Have you looked in your DNS servers forward lookup zone to ensure that the laptops have a correct Host A record that actually matches the IP Address they have?

 

Is your group policy appliying setting to users or computers? if it is users are the users accounts in the same OU you have applied the group policy to?

 

A few things to try...Hope it helps.

[alextreadwell]

if you renemed the laptop the same name that was in active directory in the right ou disjoin the laptop delete the machine acount on the server and rejoin to domain should recreate the sid and will then pull down group policy for machine

[Jon]

if you renemed the laptop the same name that was in active directory in the right ou disjoin the laptop delete the machine acount on the server and rejoin to domain should recreate the sid and will then pull down group policy for machine

 

 

Alternatively, and much more easily, you could just use New Sid...

 

NewSID v4.10

[mullet_man]

We have 30 Toshiba satelite laptops, the logon times are pretty slow, and sometimes they don't bring down the desktop icons.

 

Check bluetooth isn't on, as this can interfear with the wireless connection, but they are still taking a lot longer than other laptops in school to logon.

 

We use local profiles, so are not using roaming, so close to the end of term we are gonna take a closer look during the summer.

[sted]

try importing the following reg file on one of them makes the pc wait a bit longer before abandoning looking for policies (assuming xp pcs not tried on vista/2k)

 

Windows Registry Editor Version 5.00

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]

"GpNetworkStartTimeoutPolicyValue"=dword:00000 03c

 

 

its also worth setting the gpo to wait for network connections and run scripts syncronously

 

Computer Configuration\Administrative Templates\System\Logon

in gpedit (though i cant seem to find it on my vista box at home)

Edited June 23, 2009 by sted