problem delivering GPO to clients...

**DeepTii** · August 23, 2004

i am having problem with applying GPO to clients. i have checked for several days for resources to fix the problem but nothing seems to help..

the problem is that the Windows Settings under Computer Configurations don't apply to my clients whileas other settings all do... does anyone know of a solution?

and i am having problem joining WinXP SP1 to server as well...

loads of new settings... for some reason WinXP is extremely slow on Win 2003 network! or is it my LAN problem?? doesn't seem like so...

takes a wait of 5 minutes to browse AD's folder!

**turbomcp** · August 23, 2004

my friend

you have amisconfigured network probably

there is no slow performance with xp and 2003 or 2000 servers

probably your dns configuration is wrong

give us some info:

what version are the servers(2003/2000)?

whats the dns name of your domain?

whats the dns server your clients use(ipconfig /all >info.txt

what errors do you get in event viewer on client machines and server machines?

do you have wins servers installed?

is the domain in native mode?

waiting for info

**DeepTii** · August 23, 2004

lemme see...

i am using Windows 2003 server enterprise

i ran dcpromo to install AD and DC. i have only 1 domain controller, which is a server that connects to the internet. it runs sygate home network to share internet with the rest of its subnet... i dont want to use it, but for some reason the internet sharing has conflict with my database's webpublishing and works fine with sygate.

in Network Services... i have only DNS installed...

the DNS name is orion.vastluck.com, and it is not registered on Internet.

2 NICs.

To LAN:

192.168.0.8

255.255.255.0

DNS - 127.0.0.1

To Internet:

192.168.0.2

255.255.255.0

DNS - 127.0.0.1

Then this is the info from the client machine...

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : LEE

Primary DNS Suffix . . . . . . . : vastluck.com

Node Type . . . . . . . . . . . . : Mixed

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : vastluck.com

Ethernet adapter LAN:

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : D-Link DFE-530TX PCI Fast Ethernet Adapter (Rev B)

Physical Address. . . . . . . . . : 00-50-BA-24-2D-47

DHCP Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 192.168.0.11

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.0.8

DHCP Server . . . . . . . . . . . : 192.168.0.8

DNS Servers . . . . . . . . . . . : 192.168.0.8

Lease Obtained. . . . . . . . . . : 2004-8-23 22:38:03

Lease Expires . . . . . . . . . . : 2038-1-19 11:14:07

Then the errors in my event viewer... (I am trying to translate from a different language)

Application - there are just way too many errors... mostly are...

(Userenv) 1. Windows finished applying GPO.... (or something like that, and yes, it's an error)

(Userenv) 2. Windows didn't apply ... IP security/Software Installation/etc. ... because of .. already deleted group or changed..... (something like that... )

(Userenv) 3. to be applied GPO

Security has no error messages

System - warnings and infos...

(LsaSrv) 1. Security system cannot establish a secure connection with DNS/dns.guangzhou.gd.cn, there is no applicable authentication certificate.... (something like that)

AD Service - has no errors or warnings... only messages like finished clustering.. blah blah blah

DNS Server - mostly messages and a recurring warning

1. DNS server received invalid domain name packet from 127.0.0.1.. packet will be rejected.... (something like that)

2. DNS met many running events... to make sure ... these events.... ID higher than 3000..... (something like that)

Replication service - seems to have no problem.. very old messages from a few days ago...

sorry i am on a machine with a different language so the above messages may be a little off.... but i am quite lost here... don't know what to do. i can't find where i got wrong~ please help~

and i don't have WINS server installed.... i'm installing now....

**DeepTii** · August 23, 2004

C:\Documents and Settings\Administrator>gpotool

Validating DCs...

Available DCs:

orion.vastluck.com

Searching for policies...

Found 2 policies

============================================================

Policy {31B2F340-016D-11D2-945F-00C04FB984F9}

Friendly name: Default Domain Policy

Policy OK

============================================================

Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}

Friendly name: Default Domain Controllers Policy

Policy OK

============================================================

Policies OK

C:\Documents and Settings\Administrator>nslookup

*** Can't find server name for address 127.0.0.1: No response from server

Default Server: UnKnown

Address: 127.0.0.1

> exit

C:\Documents and Settings\Administrator>dcdiag

Domain Controller Diagnosis

Performing initial setup:

Done gathering initial info.

Doing initial required tests

Testing server: Vastluck\ORION

Starting test: Connectivity

......................... ORION passed test Connectivity

Doing primary tests

Testing server: Vastluck\ORION

Starting test: Replications

......................... ORION passed test Replications

Starting test: NCSecDesc

......................... ORION passed test NCSecDesc

Starting test: NetLogons

......................... ORION passed test NetLogons

Starting test: Advertising

Warning: ORION is not advertising as a time server.

......................... ORION failed test Advertising

Starting test: KnowsOfRoleHolders

......................... ORION passed test KnowsOfRoleHolders

Starting test: RidManager

......................... ORION passed test RidManager

Starting test: MachineAccount

......................... ORION passed test MachineAccount

Starting test: Services

w32time Service is stopped on [ORION]

......................... ORION failed test Services

Starting test: ObjectsReplicated

......................... ORION passed test ObjectsReplicated

Starting test: frssysvol

......................... ORION passed test frssysvol

Starting test: frsevent

......................... ORION passed test frsevent

Starting test: kccevent

......................... ORION passed test kccevent

Starting test: systemlog

......................... ORION passed test systemlog

Starting test: VerifyReferences

......................... ORION passed test VerifyReferences

Running partition tests on : ForestDnsZones