inkyscribe

Have just changed my WAPs settings to use different channels, 5 channels apart, as per the WG302 manual, to improve performance. All my clients then lost their network connection. They regained connection as soon as the WAPs were reset to use channel 11 (2.462Ghz). Is there any special about this channel? Shouldn't a wireless client connect to any of these channels? Thank you in advance for any suggestions! Marcus

I have fixed this problem on our network now - I think! It is intermittent and random so it is difficult to know if it is really fixed or not. I disabled Fast (cached) logon. This is in the Default Domain Policy and in the Local Machine Policy too. (But not in a custom OU level policy.) Computer Config / Admin templates / system / logon / wait for network. Made this Enabled. In WinXP this is "not configured" (in practice "disabled") by default. This means that group policy processing doesn't wait for the network connection. It just logs the user on with cached credentials and settings. Setting to Enabled forces GP to wait for the network and then apply each policy synchronously, ie one at a time. Of course, because by definition some of my workstations were having trouble applying Group Policy, I had to enable this setting on the workstations' local policy too. HTH Marcus

The way we get round it is that there is an Internet Banend group within ISA Server but instead of blocking access it always redirects to a banned page, eg http://www.ourschool.sch.uk/banned.htm Therefore the students aren't presented with the NTLM password box. We also use Impero in the ICT Suites so teachers can block students at the click of a mouse button. HTH Marcus

Semi relevant to all these problems. I had consistently not been able to apply GP to my own PC. I found that DFS was not enabled in the registry but enabling it did not fix it. Enabling TCP/IP Netbios Helper service then did fix the problem. However, this service was already enabled on the student PCs where I get the intermittent problems! (sigh) Hope this might help someone anyway!

We have this problem too and I have a workaround and also managed to reduce occurrences, but no fix as yet - I have a call logged with MS about it. Workaround: Batch file on the shared drive which runs gpupdate /force and reboots machine automatically. Not good if the student wants to save a file and can't though - the GP problem usually coincides with a read only error on their home drive. Reduce occurrences: upgraded NIC drivers, and changed registry keys on all workstations: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System and HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon With these two keys you can increase the timeout value that the workstation will wait for the network before processing the GPO. I have also tried to change registry key which disables DHCPMediaSense but although similar in principle to the keys above, it had less effect. HTH Marcus

doh, you're right too. I have it set to loopback / merge

No it isn't loopback. We have a policy in place at the domain level - this sets the correct proxy settings which the client machines pick up. Any machines in the "disabled internet" OU have a GPO which (deliberately) contains the wrong proxy settings, thereby effectively disabling their internet connection.

In our school we have different OUs in Active Directory for each classroom. We also have an OU called "Disabled Internet". We move computer objects from the Room's OU to the Disabled Internet OU when we want to prevent access to the internet for that room. The Disabled Internet OU has a GPO in force which changes the Internet Explorer proxy settings. HTH