bmittleider

Not sure if this helps you but I use the exe downloaded from java.sun.com and not java.com because it doesn't contain toolbars or other add-ons. Also I use MDT2010 to deploy Java to my images so the command I use is: jre-6u22-windows-i586.exe /s ADDLOCAL=ALL After installed I use a GPO to set the updates to 0 so my users don't get update notices.

This is what I did as well for my XP clients.

Yes I was matching by SID and it still doesn't work. Not sure what is happening but now it's less of a problem since the rest of the GPOs are functioning. I will continue to troubleshoot but not in a high priority. Thanks to everyone who posted suggestions. Hope someone can have an easier time fixing it than I did.

I have created an account and added it to the Domain Admins group. This user successfully maps to the drive. However the built-in Administrator account cannot map the drive. Have tested on Windows 7, Server 2008 R2 and Server 2003 R2. If the user that has been added to Domain Admins logs into any of those OS it works as expected. Didn't have that problem with Server 2008. Could it be a new security option in the schema? Edit: As far as UAC, Server 2003 doesn't have that so on that computer it wouldn't be an issue.

So I have made some progress today. I deleted every GPO that I created on the old server. Then I reset the Default Domain Policy and Default Domain Controller Policy back to their defaults by running dcgpofix /target:both. Be sure to backup the GPOs first. From there I recreated my custom GPOs and they seem to be working, except one. I am trying to map a drive when I am logged in as the Domain Administrator. I have created the item-level targeting to only apply when the SID matches DOMAIN\Administrator but it doesn't seem to map the drive.

Yes, actually noticed it after joining a brand new laptop into the domain. Also created a bare-metal vm and installed Win7 and Server 2003 R2 (added Client Extentions too) to try.

After checking through the Event Viewer there was only two events that seem odd: Event ID 5314: A fast link was detected. The Estimated bandwidth is 0 kbps. The slow link threshold is 500 kbps. Event ID 5327: Estimated network bandwidth on one of the connctions: 0 kbps.

DCdiag returned all results as passed. Did the ipconfig /registerdns as well. Rebooted clients an still nothing. Will try the troubleshooting guide posted by teejay next.

That was done during the normal upgrade process to R2. I had to run those commands during the upgrade I do remember that.

teejay: Disabling firewall had no effect.

Only one DC. Originally had Server 2008 x64 and was upgraded to R2. Nowhere did I read about having to apply AD schema updates myself. Shouldn't that be done in the upgrade installer? However after the upgrade the domain functional level was raised from 2003 since we don't have any DC on 2003 anymore and only the one on 2008 R2. Did I miss something when raising the domain functional level?

Yes I entered it manually. Rebooted. Logged in, waited a couple minutes just to be on the safe side. Nothing. Rebooted again as sometimes GPO's are just slow. Logged in, waiting again and nothing.

No, I guess I didn't think to check that since I can browse to the sysvol folder and do most common tasks that require connecting back to the server. What would I be looking for specifically in the firewall that would block GPO?

Applied the registry setting to clients and still no change.

Have done that on both the server and clients. The only thing that I noticed there was after the User/Computer Policy Refresh has completed line there is a line that reads: To check for errors in policy processing, review the event log. Which I have done and there are no errors or warnings. Edit: I have even disjoined the domain and rejoined and no change.

I recently just upgraded my PDC from 2008 to 2008 R2 and after what I thought was a smooth upgrade I have come to find that GPO's are not being applied to anyone (Windows XP or 7, Server 2003, or Server 2008 R2). During the process of upgrading I also upgraded the Domain Functional Level from 2003 to 2008 R2 as this is our only DC and thought this was a logical solution. Now not even the simplest GPO is applied to clients. I have created new GPO's to test and even those don't apply. Did I miss something?

Okay I have a little update of the situation. I went back to basics and tried to get the system to work from the bare minimum. No switches, VLAN, or Hyper-V on the network. Basically I did Server -> Dumb Switch -> Client. I still couldn't get it to work, but I got a different error. This time my error was PXE-E32 tftp open timeout. I started searching on this error and came accross this MS KB document (977512) where it talks about when DNS is enabled on the same server as WDS, DNS binds to all the ports needed for WDS. Way to go MS! So after following the resolution for my OS I tried again and it worked. I just about did a victory dance, until I tried to put it back the way it should be by going through the core router and such. Bad news, it failed. So after bashing my head into the desk I decided to try removing any other switch in the path to the server and plugging the server directly into the core switch. Something like Server -> Core Switch - Client. Woohoo it works. Now to add back the cheap little switch that was in between the Core and Client. Result, FAILED. I decided to try behind a different brand (HP 2910 ProCurve) and see if it was just something in this cheap switch. It worked as expected. So, I have it running in a limited fashion and will investigate as why these other switches are not working. They are vlan compliant (or so they say). They seem to work fine for everything else, like getting a DHCP response for normal desktop OS.

I am having problems configuring WDS and am just looking for some helpful minds to see what I might be doing wrong. Forgive me if this post gets lengthy but I will try to describe what is happening and what I have tried already. What I am seeing is one of a couple different errors depending on the configuration. PXE-E55: ProxyDHCP service did not reply to request on port 4011 I get this error when I have WDS placed the check in the two boxes for Do not listen on port 67 and Configure DHCP Option 60 to 'PXEClient'. In this instance the WDS is on the same server as DHCP and per Microsoft's instructions that is how it suppose to be. The thing I cannot eliminate is Hyper-V. I almost wonder if having the Hyper-V use the Virtual Switch Virtual Network Adapter configuration that it has something to do with not understanding the requests. I get an IP but then it's followed by the PXE-E55 error. \boot\bcd error As an alternative configuration I moved the WDS role to a fresh install of 2008 R2. In the DHCP options I have tried both leaving it blank and setting options 66 and 67. When leaving out the additional options as MS claims it should be, I get no response from the WDS server. However if I add the options I am presented with WDSNBP downloaded and then a No response from Windows Deployment Server and the option to hit F12. If I push F12 I get the \boot\bcd error. Windows Server 2008 R2 AD DNS DHCP Hyper-V WDS (also tried with this role on dedicated server) HP ProCurve 5412zl IP Routing Enabled IP Helper set to DHCP Server IP Multiple VLANs Configured This is the first time I have tried to configure WDS at anytime and I have read so many posts and now my head is spinning. Hopefully someone will lead me in the right direction and one day this might work.

Okay, well I don't have anywhere near 999 but I wasn't sure if 10-15 different GPOs were bad. I have only 1-4 applying to the specific groups/OUs. Thanks.

I am still a little new to Windows Server and Group Policy Objects. I am curious if there is a limit of how many Group Policy Objects should be used? I am trying to construct multiple GPOs to be applied based on user/computer group membership. I would like to create a Global GPO that handles the basics that are applied to all our users/computers but then I would like to have a separate GPO for students and faculty as they have different restrictions that extend the global GPO. I would also like to have a GPO that handles things like my printer mappings and drive mappings. With all that said I'll ask the question again. What is the limit for GPOs?

In one of my projects I created a script that would simulate this using applescript. tell application "Finder" activate delay 1.5 select disk named "DISKNAMEHERE" tell application "System Events" to tell process "Finder" to keystroke "t" using command down tell application "System Events" to tell process "Finder" to keystroke "w" using command down end tell This selects the disk name (might not work if your drive names are all different) then simulates the Command T keystroke to put it in the sidebar. However I found that after doing this it sometimes opened a window displaying the disk contents and so I added the Command W which will close the active window. You might not need the last line if this doesn't happen in your case.

I can get the Sonicwall to get my PXE client an IP but it doesn't send on the TFTP information. I have configured the TFTP server with DHCP as well and it works but our district has been directed to use our Sonicwall for DHCP from our ESU (the people who provide our Internet).

Since it looks like this is not going to be possible let me throw a new scenario out there. Is it possible to run a DHCP server from a Sonicwall appliance and also run another on a linux box and only have the linux box understand the bootp? I want the Sonicwall to understand every dhcp request unless it is a PXE boot, in which the linux box will give the nic an IP and continue on with the TFTP server.

Nothing, not even a "nope not a clue" response?

Has anyone successfully configured a Sonicwall DHCP server to allow Bootp and send the requests to the TFTP server where the PXE server loads up the image? I have tried using the Options and Options Group in Sonicwall but have had no success. Would like to only use one DHCP server on the network to avoid problems so any help here would be great. Thanks.