List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: [ActiveDir] Group policy giving me a headache

Prev Next

You are not authorized to post a reply.

Author

Messages

rabino67

Posts:4

10/09/2008 2:21 PM
I need tools to help me trouble shoot a problem - nothing is really showing up in my event log but when I open up group policy from AD users + comp properties it says "Catastrophic Failure"... but then still opens up, when I check the settings of each it hangs for approx 5-10 mintues then shows "No Settings Defined" it takes some users intermittenly 10 to 15 minutes to sign in ... On one server the gpmc displayes SID attributes instead of AD ... the other has everything fineboth DC's passed a dsastat -sC1;DC2 .... any thoughts on the next step I should take? List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx

Gil

Posts:75

10/09/2008 2:41 PM
A little structural information would help, e.g. are you running GPMC from a client or a DC? What's the domain structure, etc. Sounds like the problem might be DNS-related (don't they all?). I would run a full ration of DCDIAG as a first step; it's likely to turn up something. -g -----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Aaron Rabinowitz Sent: Thursday, October 09, 2008 11:13 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Group policy giving me a headache I need tools to help me trouble shoot a problem - nothing is really showing up in my event log but when I open up group policy from AD users + comp properties it says "Catastrophic Failure"... but then still opens up, when I check the settings of each it hangs for approx 5-10 mintues then shows "No Settings Defined" it takes some users intermittenly 10 to 15 minutes to sign in ... On one server the gpmc displayes SID attributes instead of AD ... the other has everything fineboth DC's passed a dsastat -sC1;DC2 .... any thoughts on the next step I should take? List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx

cleric

Posts:18

10/09/2008 5:40 PM
I've experienced this similar situation a few times and here's the summary of the solutions: 1. Bad Profile - Not sure what it is about GPMC, but I've had to delete my profile about 5-6 times since it was released to fix this error. I plan to go through the PSS ordeal and try to figure it out next time I get this. 2. Corrupt GPOs - I've had this one time. The Default Domain Policy and Default Domain Controller Policy were both corrupted and when I fixed them with dcgpofix. 3. Corrupt DC - I fought the error for two weeks and I got it on a different machine and everything. One day I was helping someone else with their system (regular sysadmin) and I randomly decided to use his GPMC (I'd reinstalled GPMC AND the system at this point) and poof it work. Only difference was the DC, which lead to me dissecting the DC and finding out when I turned up dcdebug up to some really high logging levels, that there were just tons of weird Kerberos errors. Two hours later with PSS we decided to rebuild the DC and the GPMC error was of course, gone. -----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Aaron Rabinowitz Sent: Thursday, October 09, 2008 1:13 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Group policy giving me a headache I need tools to help me trouble shoot a problem - nothing is really showing up in my event log but when I open up group policy from AD users + comp properties it says "Catastrophic Failure"... but then still opens up, when I check the settings of each it hangs for approx 5-10 mintues then shows "No Settings Defined" it takes some users intermittenly 10 to 15 minutes to sign in ... On one server the gpmc displayes SID attributes instead of AD ... the other has everything fineboth DC's passed a dsastat -sC1;DC2 .... any thoughts on the next step I should take? List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx Consider the environment before printing this email. MY HOME. MY EARTH. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] Group policy giving me a headache

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads