Backup & Restore non-administrators Group Policy Settings

Hi,
I'm trying to setup a few reference images of Windows 7 which will be deployed to our client computers. The baseline Group Policies are configured through Local Group Policies set in the image. I've setup a Master GPO machine on which to build the policies
and test them.
The Local Group Policies have been set for Local Computer Configuration, Local User Configuration and for Local Non-Administrators Configuration. The thinking is that members of the local Administrators group on the computer are unrestricted and still have
the ability to do most things. Users which log onto the computer abide by the more restrictive Non-Administrators Group Policy settings.
Using the "LocalGPO.wsf" script I'm able to backup and restore Computer and User Configuration which affects all users of the machine but it does not backup the Non-Administrators Policies. Is this possible?
After some digging around in the "GPOPack.wsf" files I've found that the Machine & All Users Policies are restored by the "LocalPol.exe" file. This utility has command line switches for '-m' machine and '-u' user. So I'm guessing
that it's not possible to restore the Non-Administrators Policies?
For what it was worth I've tried copying the "Registry.pol" file from "%windir%\System32\GroupPolicyUsers\S-1-5-32-545\User" folder on the GPO Master machine and placed the file in the same location on target computer. A test which had
one value set worked on the reference computer but when the policies were copied form the GPO Master machine, the target computer ignored all the settings.
Any ideas how to backup/restore Local Machine Non-Administrator Group Polices?
Thanks!

Not entirely sure of the specific policies you're dealing with, but you would typically use the Microsoft Security Compliance Manager to create GPO packs that you would then apply using the Apply Local GPO Package task sequence step in MDT.
I'd encourage you to look over the Applying Group Policy Object Packs section of the
Using the Microsoft Deployment Toolkit.docx file in the MDT 2013 documentation for more details.
MDT 2013 documentation can be downloaded here: LINK

Similar Messages

  • Cases in which Domain Group Policy settings would be reverted to default settings on a Win7 client

    Hi - I'm sure this info is out there somewhere, but I'm having a hard time finding it.  Basically, I'm trying to identify the cases in which settings deployed via Domain Group Policy on 2008R2/Win7SP1 would get reverted back to "default settings"
    on a Win7SP1 client that is still a member of the domain, and is in a proper OU, properly targeted, WMI filters should still evaluate true, etc...
    For instance, it appears that if machine-level registry settings contained within a LocalGPO file on a client get corrupted (C:\Windows\System32\GroupPolicy\Machine\registry.pol), all of those settings, plus all machine level administrative template settings
    defined in Domain Group Policy, get reverted to default settings (corresponds with Event ID 1096 in System Event Log where it references "LocalGPO").  I have not confirmed if this is the case for machine level settings defined outside of administrative
    templates in Domain Group Policy, or for any user level settings though.  (But I suspect not.)
    When a workstation is unable to talk to a Domain Controller in order to identify applicable Domain Group Policy settings (for instance, this issue:
    http://support.microsoft.com/kb/2421599/en-us), do administrative templates Domain Group Policy settings revert to defaults up until the next successful processing interval?  I don't believe
    so, but would like confirmation.
    Are there any other cases in which Domain Group Policy settings for a client still joined to the Domain would be reverted to defaults?
    And when a client is unjoined from the Domain, what Domain Group Policy settings would remain on the client?  I understand that some Domain Group Policy settings outside of administrative templates are "tattooed" to the registry.  Does
    anyone know of a full list of these settings?  I believe that most or all of the ones in Windows Settings\Security Settings are tattooed, and the only way to get these settings removed is to explicitly change them via registry edit or LocalGPO/Local Security
    Policy, after unjoining the domain.
    Any info/insight/links to other doc/etc would be much appreciated!

    Hi Shaun,
    >>If a client cannot talk to a domain controller at all, admin template settings still stay in-place on the client, correct?   
    As far as I know, it's not this case. If a client can't communicate with domain controllers, it means that the GPOs applied to the client are out of scope. As suggested by
    the article I provided, for native policy, "when a Group Policy object (GPO) goes out of scope, the policy setting is removed allowing the original configuration value to be used."
    >>What if a client looses network connectivity while reading Domain GPO?
    Group policy will be get updated when computers start up and users log on. Besides, for workstations, group policy will get refreshed at background with by default an interval
    of 90 minutes. As long as workstations can restore network connectivity, the group policy settings will get updated.
    >>Are there any other failure cases like this where some or all Group Policy settings (admin template or other areas) would get reverted?
    There are many reasons which can cause GP malfunction. However, Windows itself provides necessary tools for troubleshooting various issues. When GP malfunctions, we can check
    Event Viewer, collect group policy result, or generate group policy log to troubleshoot.
    TechNet Subscriber Support
    If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
    Best regards,
    Frank Shen

  • User Group Policy Settings not applied to new user profiles at first logon

    Good Afternoon,
    We have an issue that occurs to a new user when they first log on to their machines. They log on and a new profile creates from the Default User Profile. We can see that a number of our Group Policy Settings applied as "User Configuration" are
    not applying.A log off and back on is required before the policies apply.
    Any thoughts to this behaviour please?
    Regards
    LeeB
    Lee Bowman MCITP MCTS

    Hi,
    How about your problem now? How many system encounter this problem? Is all policy couldn't be applied? Is there any feedback when using gpresult to check policy applied status?
    As Group Policy applies after user identity authentication, generally speaking, user logoff and back doesn't helpful with this problem.
    When this problem occures, have you checked event log if it identify this problem?
    Roger Lu
    TechNet Community Support

  • Any applicable\recommended Group Policy settings (Local & Domain) for configuring windows 8.1 "gold master image" for collection

    Happy Friday everybody -
    I'm working on implementing Microsoft RDS 2012\VDI for the folks here at work.  I've read - online - a lot of articles on VDI and RDS 2012 - and have a working model that is working somewhat satisfactorily.  I haven't seen much online about steps
    I could take in Local Group Policy on my Windows 8.1 'gold image' - or for that matter Domain level group policy - that can assist in creating a better, more reliable/robust Windows 2012 VDI environment.
    Anybody out there got any information or opinions or advice on Group Policy settings for VDI environments?
    Thanks again, everyone!
    Adrian
    anr

    Hi Adrian,
    Thank you for posting in Windows Server Forum.
    In regards to your issue you can refer beneath article for detail information.
    1. Group Policy Best Practices for VDI Environments
    2.Some Basic Group Policy Settings for VDI
    Hope it helps!
    Thanks.
    Dharmesh Solanki

  • EMET 5.0 Group Policy Settings Ignored (Probable race condition with Policy application)

    In our deployment, EMET 5 seems to be ignoring group policy settings from immediately after the first group policy refresh post-boot.
    Settings are being applied to the computer correctly, and are appearing in the registry correctly, and on boot, a set of Event ID 50 events are logged containing ConfigAppmitGPO (and similar for the other settings) elements with the correct settings.
    Upon the first group policy refresh, further eventID 50 events are logged, with empty ConfigAppmitGPO elements.
    Investigation with Process Monitor seems to indicate this is a race condition between Group Policy Registry settings being refreshed (which deletes the entries) and the EMET service reading out these settings from the registry (which appears to be triggered
    by Group Policy application or by a notification on the registry keys themselves)
    This is reproducible on Windows 7 and Windows 8.1.
    Is there any way to arrange for settings to be applied correctly at all times, or is this a bug that will need to be fixed in a future update?

    We're experiencing the exact same behavior currently. I was starting to think I was going crazy. Glad to know others are experiencing the same behavior.
    I've found that using the method from pervious versions to read and update settings from Group Policy, using "emet_conf.exe --refresh" still works, and upon every execution, the event log shows the GPO settings being read and applied. While I welcome the
    move to have EMET update from GPO settings without requiring running a separate task, as it stands now in its current condition, it is a step back.
    Scott Ladewig http://www.ladewig.com

  • How to install Windows Updates on a 2012 Domain Controller w/Group Policy Settings

    Hello All,
    I'm having an issue installing Windows Updates on my Windows Server 2012 Standard with AD DS role, acting as a backup DC.
    I have Group Policies setup for the Domain Controllers to download updates from my WSUS server but not to install them. When I go to my Windows Server 2003 R2 Domain Controller, I can install updates via the "Install Updates and Shutdown". That
    option doesn't show up on the 2012 server. I can see from my WSUS server and the event viewer that the updates are being downloaded to the 2012 server........just no option for me to install the updates.
    Am I just missing something or will I need to change the way my Group Policy is setup to allow installs and/or downloads? Any help would be greatly appreciated!
    Tony

    So I've totally removed the GPO settings for configuring updates on the Default Domain Controllers OU and I can get the Windows Server 2003 Server to get updates from Windows Updates, but the 2012 Server still won't show me how to download or install any
    updates. It just states on the log-in screen that there are "Windows Updates Sign in and install important updates".
    Well guess what Microsoft! I've signed in and still don't see where I can install updates!!!
    I guess because you've set AU=3.
    There doesn't seem to be much documented in depth about AU/WUAgent (not in the history of forever), but Lawrence and others in the WSUS forum do cover a lot of related question about the agent and also GP settings.
    Lawrence has blogged a lot of detail about the registry settings which are available for AU/WU, and how some of those settings are not practically of any use since WinXP.
    So, even though your question isn't about WSUS, the WSUS forum is a great place to visit for help for WUAgent etc.
    Anyway, "where can I install updates?" :
    on the Start screen, Search for "Windows Update"
    or
    Settings charm
    Change PC Settings
    Update and Recovery
    Windows Update
    or
    Control Panel\System and Security\Windows Update
    Some further (light) discussion on the "new" behaviour:
    http://blogs.msdn.com/b/b8/archive/2011/11/14/minimizing-restarts-after-automatic-updating-in-windows-update.aspx
    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

  • Windows Update Group Policy Settings?

    I browsed through SCCM 2012 documentation for an answer of what to set in a GPO when wanting to use SCCM 2012 SP1 to handle updates.
    At the moment I have:
    WSUS/Reporting pointing to wsus server and its appropriate ports
    Allow Automatic Updates immediate installation: Enabled
    All signed updates from intranet Microsoft Updates: Enabled
    Configure Automatic Updates: Enabled
      Configure automatic Updating - 4 Auto download and schedule the install
      Scheduled install day: Every Friday
      Scheduled install time: 21:00
    Enabling Windows Update Power Management to auto wakeup the system to install Enabled
    No auto-restart with logged on users for scheduled automatic updates installations: Enabled
    Reschedule Automatic Updates scheduled installation: Disabled
    I didn't see any hint, perhaps it is there and I missed it, on what might be the prescribed settings for a GPO.
    What is happening is Windows 8ish is drawing a band across the screen and reporting that your computer needs to reboot; and then reboots.  From what I could tell in the WindowsUpdate.log file is that round the time it was observed rebooting smsexec
    requested a reboot. But oddly I also saw in the Windows Update log was a reboot was scheduled to expire on the 26th, two days after the observed behavior and I also saw that other reboot requests either expired or had been scheduled.
    What I have recently done to various Windows Update deployments was to remove the check boxes for Deadline behavior to prevent Software Updates and System restarts outside the Maintenance Window and also checked Device restart behavior
    Suppress system restart on the following devices Servers and Workstations.
    At the moment I would like to figure out what the GPO settings should be and also how to determine what had requested reboot and when and if the reboot actually happened.
    Thanks!

    This blog series by Jason should help you with that (it's still applicable):
    http://blog.configmgrftw.com/software-update-management-and-group-policy-for-configmgr-what-else/
    http://blog.configmgrftw.com/software-updates-management-and-group-policy-for-configmgr-cont/
    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

  • Specify Office 2013 kms host trough group policy settings

    Hello.
    Can someone please help me get the right registry key for Office 2013. I want to specify kms host for my clients in domain - trough group policy. Dont want to use dns or config.xml to specify the host.
    For Windows i use this key, activation works greate.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\KeyManagementServiceName (REG_SZ)
    Have found the key for Office 2010 but cant use this for 2013
    HKLM\Software\Microsoft\OfficeSoftwareProtectionPlatform\KeyManagementServiceName (REG_SZ).
    I have searched the web but cant find the key.
    I realy need some help here.
    Best regards
    Nils S.

    Have found the key for Office 2010 but cant use this for 2013
    HKLM\Software\Microsoft\OfficeSoftwareProtectionPlatform\KeyManagementServiceName (REG_SZ).
    I have searched the web but cant find the key.
    Hi,
    according to the documentation, it is the same registry key ?
    http://technet.microsoft.com/en-us/library/ee624350(v=office.15).aspx#section1
    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

  • Servers take an endless time at applying group policy settings

    We have some Windows 2008R2 RDS servers that have been given a syspreped image. After a few day in production, and several nightly reboots, the servers start to hang at applying group policy setting. I have created a gpsvc.log file. What can be wrong with
    these servers?
    When i reboot the server without network connection, the reboot time is fine. The user login still takes forever.
    GPSVC(fc.4ec) 08:38:21:227 MachinePolicyCallback: Setting status UI to Beleid Group Policy Services toepassen...
    GPSVC(fc.4ec) 08:38:21:227 ProcessGPOList: No changes. CSE will not be passed in the IwbemServices intf ptr
    GPSVC(fc.1a4) 08:38:21:227 Message Status = <Beleid Group Policy Services toepassen...>
    GPSVC(fc.1a4) 08:38:21:227 Setting GPsession state = 1
    GPSVC(fc.5b4) 08:38:21:820 ProcessGroupPolicyCompletedExInternal: Entering. Extension = {827D319E-6EAC-11D2-A4EA-00C04F79F83A}, dwStatus = 0x0
    GPSVC(fc.5b4) 08:38:21:867 GetWbemServices: CoCreateInstance succeeded
    GPSVC(fc.4ec) 08:38:22:475 ProcessGroupPolicyCompletedExInternal: Entering. Extension = {91FBB303-0CD5-4055-BF42-E512A681B325}, dwStatus = 0x0
    GPSVC(fc.4ec) 08:38:22:491 GetWbemServices: CoCreateInstance succeeded
    GPSVC(5dc.5e0) 08:38:24:285 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x2a0
    GPSVC(5dc.5e0) 08:38:24:285 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(fc.1b0) 08:38:24:285 Target = Machine
    GPSVC(5dc.5e0) 08:38:24:285 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(5dc.5e0) 08:38:24:285 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(fc.1b0) 08:38:24:285 Target = Machine, ChangeNumber 0
    GPSVC(5dc.5e0) 08:38:24:285 CGPNotify::RegisterForNotification: Entering with target S-1-5-18 and event 0x3d4
    GPSVC(5dc.5e0) 08:38:24:285 Client_InitialRegisterForNotification: User = S-1-5-18, changenumber = 0
    GPSVC(fc.1b0) 08:38:24:285 Target = S-1-5-18
    GPSVC(fc.1b0) 08:38:24:285 Could not find user by sid, finding user by session id
    GPSVC(fc.1b0) 08:38:24:285 Caller requesting for user notification/lock is from session 0
    GPSVC(5dc.5e0) 08:38:24:285 Client_RegisterForNotification: User = S-1-5-18, changenumber = 0
    GPSVC(5dc.5e0) 08:38:24:285 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(fc.1b0) 08:38:24:285 Could not find user by sid, finding user by session id
    GPSVC(fc.1b0) 08:38:24:285 Caller requesting for user notification/lock is from session 0
    GPSVC(62c.64c) 08:38:25:330 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x1d4
    GPSVC(62c.64c) 08:38:25:330 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(fc.1b0) 08:38:25:330 Target = Machine
    GPSVC(62c.64c) 08:38:25:330 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(62c.64c) 08:38:25:330 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(298.2c0) 08:38:28:310 CGPNotify::RegisterForNotification: Entering with target Machine and event 0xab0
    GPSVC(298.2c0) 08:38:28:310 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(fc.1b0) 08:38:28:310 Target = Machine
    GPSVC(298.2c0) 08:38:28:310 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(298.2c0) 08:38:28:310 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(fc.1b0) 08:38:28:310 Target = Machine, ChangeNumber 0
    GPSVC(fc.7c0) 08:38:39:401 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x93c
    GPSVC(fc.7c0) 08:38:39:401 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(fc.95c) 08:38:39:401 Target = Machine
    GPSVC(fc.7c0) 08:38:39:401 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(fc.7c0) 08:38:39:401 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(fc.95c) 08:38:39:401 Target = Machine, ChangeNumber 0
    GPSVC(53c.580) 08:40:20:755 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x608
    GPSVC(53c.580) 08:40:20:755 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(fc.1c4) 08:40:20:755 Target = Machine
    GPSVC(53c.580) 08:40:20:755 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(53c.580) 08:40:20:755 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(53c.580) 08:40:21:098 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x64c
    GPSVC(53c.580) 08:40:21:098 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(fc.1c4) 08:40:21:113 Target = Machine
    GPSVC(53c.580) 08:40:21:113 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(53c.580) 08:40:21:113 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(53c.564) 08:40:21:238 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x67c
    GPSVC(53c.564) 08:40:21:238 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(fc.1c4) 08:40:21:238 Target = Machine
    GPSVC(53c.564) 08:40:21:238 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(53c.564) 08:40:21:238 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(200.f6c) 08:41:11:501 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x350
    GPSVC(200.f6c) 08:41:11:501 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(fc.1c4) 08:41:11:501 Target = Machine
    GPSVC(200.f6c) 08:41:11:501 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(200.f6c) 08:41:11:501 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(fc.1c4) 08:41:11:891 Target = Machine
    GPSVC(fc.1c4) 08:41:11:891 Target = Machine, ChangeNumber 0
    GPSVC(fc.7d0) 08:41:11:985 Target = Machine
    GPSVC(fc.7d0) 08:41:11:985 Target = Machine, ChangeNumber 0
    GPSVC(fc.7d0) 08:41:11:985 Sid = (null), dwTimeout = 600000, dwFlags = 268435456
    GPSVC(fc.7d0) 08:41:11:985 LockPolicySection called for user <Machine>
    GPSVC(fc.7d0) 08:41:11:985 Async Lock called
    GPSVC(fc.7d0) 08:41:11:985 Reader has to wait for lock. ReaderID : 1.
    GPSVC(fc.7d0) 08:41:11:985 Registering wait for lock notification
    GPSVC(fc.9d8) 08:41:13:015 CGPNotify::RegisterForNotification: Entering with target Machine and event 0xcbc
    GPSVC(fc.9d8) 08:41:13:015 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(fc.7d0) 08:41:13:015 Target = Machine
    GPSVC(fc.9d8) 08:41:13:015 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(fc.9d8) 08:41:13:015 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(fc.9d8) 08:41:13:015 CGPNotify::RegisterForNotification: Entering with target Machine and event 0xd24
    GPSVC(fc.9d8) 08:41:13:015 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(fc.7d0) 08:41:13:015 Target = Machine
    GPSVC(fc.9d8) 08:41:13:015 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(fc.9d8) 08:41:13:015 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(200.1060) 08:43:10:223 CGPNotify::UnregisterNotification: Entering with event 0x350
    GPSVC(200.1060) 08:43:10:223 CGPNotify::AbortAsyncRegistration: No asyn registration is pending
    GPSVC(200.1060) 08:43:10:223 CGPNotify::UnregisterNotification: Canceling pending calls
    GPSVC(200.1060) 08:43:10:223 Client_CompleteNotificationCall: failed with 0x71a
    GPSVC(200.1060) 08:43:10:223 CGPNotify::UnregisterNotification: Cancelled pending calls
    GPSVC(200.1060) 08:43:10:223 CGPNotify::UnregisterNotification: Exiting with dwStatus = 0x0
    GPSVC(fc.1054) 08:43:16:252 Target = Machine
    GPSVC(fc.1054) 08:43:16:252 Target = Machine, ChangeNumber 0
    GPSVC(fc.1138) 08:43:24:188 CGPNotify::RegisterForNotification: Entering with target Machine and event 0xeac
    GPSVC(fc.1138) 08:43:24:188 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(fc.7d0) 08:43:24:188 Target = Machine
    GPSVC(fc.1138) 08:43:24:188 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(fc.1138) 08:43:24:188 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(fc.1054) 08:43:29:418 Target = Machine
    GPSVC(fc.1054) 08:43:29:418 Target = Machine, ChangeNumber 0
    GPSVC(fc.1054) 08:43:50:304 Target = Machine
    GPSVC(fc.1054) 08:43:50:304 Target = Machine, ChangeNumber 0
    GPSVC(fc.1374) 08:51:06:327 Found the Waiting Rpc Reader in the waiting list. Removing it...
    GPSVC(fc.1374) 08:51:06:327 Lock timeout
    Gert MCITP SA, EA & VA

    Hi,
    From the log you submit, I found the following error:
    GPSVC(f0.13fc) 03:00:18:665 Client_CompleteNotificationCall: failed with 0x525
    GPSVC(2f0.baf4) 03:00:18:665 CGPNotify::OnNotificationTriggered: Completenotification failed with 1317
    GPSVC(518.e980) 03:00:18:665 Client_CompleteNotificationCall: failed with 0x6ba
    GPSVC(f0.13fc) 03:00:18:665 CGPNotify::OnNotificationTriggered: Trying to recover from error 1722
    GPSVC(518.e980) 03:00:18:665 CGPNotify::RegisterNotificationAsynchronously: Starting async registration
    GPSVC(3b8.3e0) 03:04:19:034 Client_RegisterForNotification: CheckRegisterForNotification returned error 0x6d9
    GPSVC(3b8.3e0) 03:04:19:034 CGPNotify::RegisterForNotification: Service not RUNNING. waiting
    GPSVC(3b8.3e0) 03:04:19:034 CGPNotify::RegisterForNotification: Trying to recover from error 1753
    GPSVC(3b8.3e0) 03:04:19:034 CGPNotify::RegisterNotificationAsynchronously: Starting async registration
    GPSVC(100.4c8) 03:05:07:753 ProcessGPOs: OpenThreadToken failed with error 1008, assuming thread is not impersonating
    GPSVC(100.13f4) 07:54:09:864 GetOldSidString:  Failed to open profile profile guid key with error 2
    GPSVC(658.2354) 09:52:41:726 Client_ProcessRefresh: ProcessRefresh returned error 0x5b4
    GPSVC(658.2354) 09:52:41:726 GetGPOList: Client_ProcessRefresh failed with 0x5b4.
    GPSVC(658.2354) 09:52:41:726 Exiting RefreshPolicyForPrincipal with status = 1460
    GPSVC(100.1a7c) 10:48:26:711 CGPAdminEventInitFailure::Initialize(): FormatMessage failed to look up error code (0x4005) due to error 317. Can not log error description.
    GPSVC(100.219c) 10:48:26:711 ProcessGPOList: Extension Internet Explorer Branding was not able to log data. Error = 0x80004005, dwRet = 1252,leaving the log dirty
    GPSVC(100.19b4) 10:48:27:491 ProcessGPOList: Extension Internet Explorer Branding was not able to log data. Error = 0x80004005, dwRet = 1252,leaving the log dirty
    1. Please try to renamed the files on the folder  c:\windows\system32\GroupPolicy to .old and ran Gpupdate /force. 
    2. Please verify the DNS set correctly and DNS Client Service is enabled. Restart the DNS Client Service.
    Hope this helps!
    Best Regards
    Elytis Cheng
    TechNetSubscriber
    Support
    If
    you are TechNetSubscription user
    and have any feedback on our support quality, please send your feedback here.
    Elytis Cheng
    TechNet Community Support

  • Address Book backup restores all but Groups

    I have my Address Book organized into a lot of groups. Yesterday, for some reason, the Groups disappeared - it may be related to my experimenting with synching to MobileMe. Fortunately, I had created a backup Address Book archive before I played around with MobileMe synching.
    But when I replaced the messed-up Address Book with the archive, none of the Groups were restored. I even went into Time Machine and pulled up an Address Book from the day before - which showed all the groups - but when I restored it, none of the Contacts were assigned to groups.
    Am I doing it wrong? Is there any way to restore Address Book from an archive backup or from Time Machine and maintain your Groups structure?

    first, there are no promises of anything when mobileme is concerned. That said. Address book is integrated with time machine but I had similar problems as you restoring groups so this may be a bug. the following should work for sure. quit address book, delete the folder homedirectory/library/Application support/address book and then restore it from TM backup. start Address book. your groups should be back.

  • How do I find out easily what our group policy settings are?

    To cut a long story short we had a third party implement ZCM and GPs. We have too many and need to amalgamate them, but there is no documentation about what the settings are. I know there are various tools for AD that will give you a summary of applied GP settings, but that is not much help if they are being deployed via ZCM. Does anybody know of tool that we can run to find out what our GP settings are short of manually browsing through each field?
    I was thinking of copying over the policy sets to AD and then running one of the AD tools, but if someone has a better idea I am all ears.
    Thanks

    sebsecure,
    It appears that in the past few days you have not received a response to your
    posting. That concerns us, and has triggered this automated reply.
    Has your problem been resolved? If not, you might try one of the following options:
    - Visit http://support.novell.com and search the knowledgebase and/or check all
    the other self support options and support programs available.
    - You could also try posting your message again. Make sure it is posted in the
    correct newsgroup. (http://forums.novell.com)
    Be sure to read the forum FAQ about what to expect in the way of responses:
    http://forums.novell.com/faq.php
    If this is a reply to a duplicate posting, please ignore and accept our apologies
    and rest assured we will issue a stern reprimand to our posting bot.
    Good luck!
    Your Novell Product Support Forums Team
    http://forums.novell.com/

  • Skype History Settings using group policy

    Hello,
    How to disable Skype keep History for (Forever, 1months, no History) settings using Group Policy Settings.
    Regards,
    Yatin

    It's all in the Skype admin guide:
    https://support.skype.com/en/doc/DO5/skype-it-administrators-guide
    If you have Skype-specific questions, you'll probably get better help with your questions on the Skype site.
    Don't retire TechNet! -
    (Don't give up yet - 12,420+ strong and growing)

  • Group Policy Preferences - Internet Settings - Trusted Sites

    hi all
    I can't set Trusted Zone (Site) with GPO Preferences - Internet Settings because it is grey?
    Chris

    Hi Chris,
    The Trusted Sites cannot be added using Group Policy Preferences. But you can add it by native group policy.
    The group policy settings are here:
    User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone
    If you really want to use the GPP, please manually add the registry keys through GPP.
    Regards,
    Miya
    This posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer
    your question. This can be beneficial to other community members reading the thread.

  • Windows failed to apply the Group Policy Printers settings

    Windows failed to apply the Group Policy Printers settings. Group Policy Printer
    s settings might have its own log file.
    only when I edit any setting on preferences at computer or users.  
    Ahmed Zidan Network Administrator

    Hi Ahmed,
    >>Windows failed to apply the Group Policy Printers settings. Group Policy Printer
    >>s settings might have its own log file.
    Were we using GPP Printer extension to deploy printers? Did we deploy printers to user accounts or computer accounts? Besides,what printer did we depoly via GPP, local printer, share printer, or TCP/IP printer? Here, we can check event
    logs in Event Viewer to see if more information regarding this issue can be found. Besides, we can also run command
    gpresult/h gpreport.html to further check how group policy settings were applied. If necessary, we can enable GPP Printer debug logging for troubleshooting the issue.
    To enable GPP Printer debug logging, we need to enable the following setting:
    Computer Configuration > Policies > Administrative Templates > System > Group Policy > Logging and Tracing>Configure printer preferences logging and tracing
    Regarding how to enable GPP debug logging, the following article can be referred to for more information.
    Enabling Group Policy Preferences Debug Logging using the RSAT
    http://blogs.technet.com/b/askds/archive/2008/07/18/enabling-group-policy-preferences-debug-logging-using-the-rsat.aspx
    Best regards,
    Frank Shen

  • Group policy issue

    I have two Domain Controllers Main ( Main DC ) and Second DC.
    the date of some policies is not out of date....
    please check these files to know the problem.
    dcdiag.txt output:
    Directory Server Diagnosis
    Performing initial setup:
       Trying to find home server...
       * Verifying that the local machine ASMDC, is a Directory Server.
       Home Server = ASMDC
       * Connecting to directory service on server ASMDC.
       * Identified AD Forest.
       Collecting AD specific global data
       * Collecting site info.
       Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=buc,DC=edu,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
       The previous call succeeded
       Iterating through the sites
       Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
       Getting ISTG and options for the site
       * Identifying all servers.
       Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=buc,DC=edu,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
       The previous call succeeded....
       The previous call succeeded
       Iterating through the list of servers
       Getting information for the server CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
       objectGuid obtained
       InvocationID obtained
       dnsHostname obtained
       site info obtained
       All the info for the server collected
       Getting information for the server CN=NTDS Settings,CN=BSMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
       objectGuid obtained
       InvocationID obtained
       dnsHostname obtained
       site info obtained
       All the info for the server collected
       * Identifying all NC cross-refs.
       * Found 2 DC(s). Testing 2 of them.
       Done gathering initial info.
    Doing initial required tests
       Testing server: Default-First-Site-Name\ASMDC
          Starting test: Connectivity
             * Active Directory LDAP Services Check
             Determining IP4 connectivity
             Determining IP6 connectivity
             * Active Directory RPC Services Check
             ......................... ASMDC passed test Connectivity
       Testing server: Default-First-Site-Name\BSMDC
          Starting test: Connectivity
             * Active Directory LDAP Services Check
             Determining IP4 connectivity
             Determining IP6 connectivity
             * Active Directory RPC Services Check
             ......................... BSMDC passed test Connectivity
    Doing primary tests
       Testing server: Default-First-Site-Name\ASMDC
          Starting test: Advertising
             The DC ASMDC is advertising itself as a DC and having a DS.
             The DC ASMDC is advertising as an LDAP server
             The DC ASMDC is advertising as having a writeable directory
             The DC ASMDC is advertising as a Key Distribution Center
             The DC ASMDC is advertising as a time server
             The DS ASMDC is advertising as a GC.
             ......................... ASMDC passed test Advertising
          Test omitted by user request: CheckSecurityError
          Test omitted by user request: CutoffServers
          Starting test: FrsEvent
             * The File Replication Service Event log test
             ......................... ASMDC passed test FrsEvent
          Starting test: DFSREvent
             The DFS Replication Event Log.
             ......................... ASMDC passed test DFSREvent
          Starting test: SysVolCheck
             * The File Replication Service SYSVOL ready test
             File Replication Service's SYSVOL is ready
             ......................... ASMDC passed test SysVolCheck
          Starting test: KccEvent
             * The KCC Event log test
             Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
             ......................... ASMDC passed test KccEvent
          Starting test: KnowsOfRoleHolders
             Role Schema Owner = CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
             Role Domain Owner = CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
             Role PDC Owner = CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
             Role Rid Owner = CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
             Role Infrastructure Update Owner = CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
             ......................... ASMDC passed test KnowsOfRoleHolders
          Starting test: MachineAccount
             Checking machine account for DC ASMDC on DC ASMDC.
             * SPN found :LDAP/ASMDC.buc.edu/buc.edu
             * SPN found :LDAP/ASMDC.buc.edu
             * SPN found :LDAP/ASMDC
             * SPN found :LDAP/ASMDC.buc.edu/BUC
             * SPN found :LDAP/5e88f85b-15a6-4ff5-b0fd-6df748df06fd._msdcs.buc.edu
             * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/5e88f85b-15a6-4ff5-b0fd-6df748df06fd/buc.edu
             * SPN found :HOST/ASMDC.buc.edu/buc.edu
             * SPN found :HOST/ASMDC.buc.edu
             * SPN found :HOST/ASMDC
             * SPN found :HOST/ASMDC.buc.edu/BUC
             * SPN found :GC/ASMDC.buc.edu/buc.edu
             ......................... ASMDC passed test MachineAccount
          Starting test: NCSecDesc
             * Security Permissions check for all NC's on DC ASMDC.
             * Security Permissions Check for
               DC=ForestDnsZones,DC=buc,DC=edu
                (NDNC,Version 3)
             * Security Permissions Check for
               DC=DomainDnsZones,DC=buc,DC=edu
                (NDNC,Version 3)
             * Security Permissions Check for
               CN=Schema,CN=Configuration,DC=buc,DC=edu
                (Schema,Version 3)
             * Security Permissions Check for
               CN=Configuration,DC=buc,DC=edu
                (Configuration,Version 3)
             * Security Permissions Check for
               DC=buc,DC=edu
                (Domain,Version 3)
             ......................... ASMDC passed test NCSecDesc
          Starting test: NetLogons
             * Network Logons Privileges Check
             Verified share \\ASMDC\netlogon
             Verified share \\ASMDC\sysvol
             ......................... ASMDC passed test NetLogons
          Starting test: ObjectsReplicated
             ASMDC is in domain DC=buc,DC=edu
             Checking for CN=ASMDC,OU=Domain Controllers,DC=buc,DC=edu in domain DC=buc,DC=edu on 2 servers
                Object is up-to-date on all servers.
             Checking for CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu in domain CN=Configuration,DC=buc,DC=edu on 2 servers
                Object is up-to-date on all servers.
             ......................... ASMDC passed test ObjectsReplicated
          Test omitted by user request: OutboundSecureChannels
          Starting test: Replications
             * Replications Check
             * Replication Latency Check
                DC=ForestDnsZones,DC=buc,DC=edu
                   Latency information for 1 entries in the vector were ignored.
                      1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency
    information (Win2K DC).  
                DC=DomainDnsZones,DC=buc,DC=edu
                   Latency information for 1 entries in the vector were ignored.
                      1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency
    information (Win2K DC).  
                CN=Schema,CN=Configuration,DC=buc,DC=edu
                   Latency information for 5 entries in the vector were ignored.
                      5 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency
    information (Win2K DC).  
                CN=Configuration,DC=buc,DC=edu
                   Latency information for 5 entries in the vector were ignored.
                      5 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency
    information (Win2K DC).  
                DC=buc,DC=edu
                   Latency information for 5 entries in the vector were ignored.
                      5 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency
    information (Win2K DC).  
             * Replication Site Latency Check
             ......................... ASMDC passed test Replications
          Starting test: RidManager
             * Available RID Pool for the Domain is 8604 to 1073741823
             * ASMDC.buc.edu is the RID Master
             * DsBind with RID Master was successful
             * rIDAllocationPool is 7604 to 8103
             * rIDPreviousAllocationPool is 7604 to 8103
             * rIDNextRID: 7640
             ......................... ASMDC passed test RidManager
          Starting test: Services
             * Checking Service: EventSystem
             * Checking Service: RpcSs
             * Checking Service: NTDS
             * Checking Service: DnsCache
             * Checking Service: NtFrs
             * Checking Service: IsmServ
             * Checking Service: kdc
             * Checking Service: SamSs
             * Checking Service: LanmanServer
             * Checking Service: LanmanWorkstation
             * Checking Service: w32time
             * Checking Service: NETLOGON
             ......................... ASMDC passed test Services
          Starting test: SystemLog
             * The System Event log test
             An Warning Event occurred.  EventID: 0x825A0024
                Time Generated: 08/21/2014   00:22:16
                Event String:
                The time service has not synchronized the system time for 86400 seconds because none of the time service providers provided a usable time stamp. The time service will not update the local system
    time until it is able to synchronize with a time source. If the local system is configured to act as a time server for clients, it will stop advertising as a time source to clients. The time service will continue to retry and sync time with its time sources.
    Check system event log for other W32time events for more details. Run 'w32tm /resync' to force an instant time synchronization.
             An Warning Event occurred.  EventID: 0x8000000E
                Time Generated: 08/21/2014   00:32:29
                Event String:
                There were password errors using the Credential Manager. To remedy, launch the Stored User Names and Passwords control panel applet, and reenter the password for the credential BUC.EDU\administrator.
             An Error Event occurred.  EventID: 0x00000422
                Time Generated: 08/21/2014   00:32:29
                Event String:
                The processing of Group Policy failed. Windows attempted to read the file \\buc.edu\sysvol\buc.edu\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not
    successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
                a) Name Resolution/Network Connectivity to the current domain controller.
                b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
                c) The Distributed File System (DFS) client has been disabled.
             ......................... ASMDC failed test SystemLog
          Test omitted by user request: Topology
          Test omitted by user request: VerifyEnterpriseReferences
          Starting test: VerifyReferences
             The system object reference (serverReference)
             CN=ASMDC,OU=Domain Controllers,DC=buc,DC=edu and backlink on
             CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
             are correct.
             The system object reference (serverReferenceBL)
             CN=ASMDC,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=buc,DC=edu
             and backlink on
             CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
             are correct.
             ......................... ASMDC passed test VerifyReferences
          Test omitted by user request: VerifyReplicas
       Testing server: Default-First-Site-Name\BSMDC
          Starting test: Advertising
             The DC BSMDC is advertising itself as a DC and having a DS.
             The DC BSMDC is advertising as an LDAP server
             The DC BSMDC is advertising as having a writeable directory
             The DC BSMDC is advertising as a Key Distribution Center
             The DC BSMDC is advertising as a time server
             The DS BSMDC is advertising as a GC.
             ......................... BSMDC passed test Advertising
          Test omitted by user request: CheckSecurityError
          Test omitted by user request: CutoffServers
          Starting test: FrsEvent
             * The File Replication Service Event log test
             ......................... BSMDC passed test FrsEvent
          Starting test: DFSREvent
             The DFS Replication Event Log.
             ......................... BSMDC passed test DFSREvent
          Starting test: SysVolCheck
             * The File Replication Service SYSVOL ready test
             File Replication Service's SYSVOL is ready
             ......................... BSMDC passed test SysVolCheck
          Starting test: KccEvent
             * The KCC Event log test
             Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
             ......................... BSMDC passed test KccEvent
          Starting test: KnowsOfRoleHolders
             Role Schema Owner = CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
             Role Domain Owner = CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
             Role PDC Owner = CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
             Role Rid Owner = CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
             Role Infrastructure Update Owner = CN=NTDS Settings,CN=ASMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
             ......................... BSMDC passed test KnowsOfRoleHolders
          Starting test: MachineAccount
             Checking machine account for DC BSMDC on DC BSMDC.
             * SPN found :LDAP/BSMDC.buc.edu/buc.edu
             * SPN found :LDAP/BSMDC.buc.edu
             * SPN found :LDAP/BSMDC
             * SPN found :LDAP/BSMDC.buc.edu/BUC
             * SPN found :LDAP/93561cab-4fb3-421f-9a67-af6b4c280eca._msdcs.buc.edu
             * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/93561cab-4fb3-421f-9a67-af6b4c280eca/buc.edu
             * SPN found :HOST/BSMDC.buc.edu/buc.edu
             * SPN found :HOST/BSMDC.buc.edu
             * SPN found :HOST/BSMDC
             * SPN found :HOST/BSMDC.buc.edu/BUC
             * SPN found :GC/BSMDC.buc.edu/buc.edu
             ......................... BSMDC passed test MachineAccount
          Starting test: NCSecDesc
             * Security Permissions check for all NC's on DC BSMDC.
             * Security Permissions Check for
               DC=ForestDnsZones,DC=buc,DC=edu
                (NDNC,Version 3)
             * Security Permissions Check for
               DC=DomainDnsZones,DC=buc,DC=edu
                (NDNC,Version 3)
             * Security Permissions Check for
               CN=Schema,CN=Configuration,DC=buc,DC=edu
                (Schema,Version 3)
             * Security Permissions Check for
               CN=Configuration,DC=buc,DC=edu
                (Configuration,Version 3)
             * Security Permissions Check for
               DC=buc,DC=edu
                (Domain,Version 3)
             ......................... BSMDC passed test NCSecDesc
          Starting test: NetLogons
             * Network Logons Privileges Check
             Verified share \\BSMDC\netlogon
             Verified share \\BSMDC\sysvol
             ......................... BSMDC passed test NetLogons
          Starting test: ObjectsReplicated
             BSMDC is in domain DC=buc,DC=edu
             Checking for CN=BSMDC,OU=Domain Controllers,DC=buc,DC=edu in domain DC=buc,DC=edu on 2 servers
                Object is up-to-date on all servers.
             Checking for CN=NTDS Settings,CN=BSMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu in domain CN=Configuration,DC=buc,DC=edu on 2 servers
                Object is up-to-date on all servers.
             ......................... BSMDC passed test ObjectsReplicated
          Test omitted by user request: OutboundSecureChannels
          Starting test: Replications
             * Replications Check
             * Replication Latency Check
                DC=ForestDnsZones,DC=buc,DC=edu
                   Latency information for 1 entries in the vector were ignored.
                      1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency
    information (Win2K DC).  
                DC=DomainDnsZones,DC=buc,DC=edu
                   Latency information for 1 entries in the vector were ignored.
                      1 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency
    information (Win2K DC).  
                CN=Schema,CN=Configuration,DC=buc,DC=edu
                   Latency information for 5 entries in the vector were ignored.
                      5 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency
    information (Win2K DC).  
                CN=Configuration,DC=buc,DC=edu
                   Latency information for 5 entries in the vector were ignored.
                      5 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency
    information (Win2K DC).  
                DC=buc,DC=edu
                   Latency information for 5 entries in the vector were ignored.
                      5 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency
    information (Win2K DC).  
             * Replication Site Latency Check
             ......................... BSMDC passed test Replications
          Starting test: RidManager
             * Available RID Pool for the Domain is 8604 to 1073741823
             * ASMDC.buc.edu is the RID Master
             * DsBind with RID Master was successful
             * rIDAllocationPool is 8104 to 8603
             * rIDPreviousAllocationPool is 8104 to 8603
             * rIDNextRID: 8106
             ......................... BSMDC passed test RidManager
          Starting test: Services
             * Checking Service: EventSystem
             * Checking Service: RpcSs
             * Checking Service: NTDS
             * Checking Service: DnsCache
             * Checking Service: NtFrs
             * Checking Service: IsmServ
             * Checking Service: kdc
             * Checking Service: SamSs
             * Checking Service: LanmanServer
             * Checking Service: LanmanWorkstation
             * Checking Service: w32time
             * Checking Service: NETLOGON
             ......................... BSMDC passed test Services
          Starting test: SystemLog
             * The System Event log test
             An Error Event occurred.  EventID: 0x00000457
                Time Generated: 08/20/2014   23:52:15
                Event String:
                Driver Send To Microsoft OneNote Driver required for printer Send To OneNote 2007 is unknown. Contact the administrator to install the driver before you log in again.
             An Error Event occurred.  EventID: 0x00000457
                Time Generated: 08/20/2014   23:52:18
                Event String:
                Driver SolidPDF XChange required for printer SolidPDF XChange is unknown. Contact the administrator to install the driver before you log in again.
             An Error Event occurred.  EventID: 0x00000457
                Time Generated: 08/20/2014   23:52:18
                Event String:
                Driver NRG SP 3400N PCL 6 required for printer !!net_pc5!NRG SP 3400N PCL 6 is unknown. Contact the administrator to install the driver before you log in again.
             An Error Event occurred.  EventID: 0x00000457
                Time Generated: 08/20/2014   23:52:19
                Event String:
                Driver Send To Microsoft OneNote Driver required for printer !!BUCLAPTOP1!Send To OneNote 2007 is unknown. Contact the administrator to install the driver before you log in again.
             An Error Event occurred.  EventID: 0x00000457
                Time Generated: 08/20/2014   23:52:20
                Event String:
                Driver NRG SP 3400N PCL 6 required for printer !!BUCLAPTOP1!NRG SP 3400N PCL 6 is unknown. Contact the administrator to install the driver before you log in again.
             An Warning Event occurred.  EventID: 0x80000008
                Time Generated: 08/20/2014   23:52:20
                Event String:
                The jobs in the print queue for printer Microsoft XPS Document Writer (redirected 2) were deleted. No user action is required.
                To stop logging warning events for the print spooler, in Control Panel, open Printers, right-click a blank area of the window, click Run as Administrator, click Server Properties, click the
    Advanced tab, and then clear the Log spooler warning events check box.
             An Warning Event occurred.  EventID: 0x80000004
                Time Generated: 08/20/2014   23:52:20
                Event String:
                Printer Microsoft XPS Document Writer (redirected 2) will be deleted. No user action is required.
                To stop logging warning events for the print spooler, in Control Panel, open Printers, right-click a blank area of the window, click Run as Administrator, click Server Properties, click the
    Advanced tab, and then clear the Log spooler warning events check box.
             An Warning Event occurred.  EventID: 0x80000003
                Time Generated: 08/20/2014   23:52:20
                Event String:
                Printer Microsoft XPS Document Writer (redirected 2) was deleted, and users will no longer be able to print to this printer. No user action is required.
                To stop logging information events for the print spooler, in Control Panel, open Printers, right-click a blank area of the window, click Run as Administrator, click Server Properties, click
    the Advanced tab, and then clear the Log spooler information events check box.
             An Error Event occurred.  EventID: 0x00000457
                Time Generated: 08/20/2014   23:52:22
                Event String:
                Driver NRG SP 3400N PCL 6 required for printer !!BUCLAPTOP1!NRG SP 3400N PCL 6 (Copy 1) is unknown. Contact the administrator to install the driver before you log in again.
             ......................... BSMDC failed test SystemLog
          Test omitted by user request: Topology
          Test omitted by user request: VerifyEnterpriseReferences
          Starting test: VerifyReferences
             The system object reference (serverReference)
             CN=BSMDC,OU=Domain Controllers,DC=buc,DC=edu and backlink on
             CN=BSMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
             are correct.
             The system object reference (serverReferenceBL)
             CN=BSMDC,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=buc,DC=edu
             and backlink on
             CN=NTDS Settings,CN=BSMDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=buc,DC=edu
             are correct.
             ......................... BSMDC passed test VerifyReferences
          Test omitted by user request: VerifyReplicas
          Test omitted by user request: DNS
          Test omitted by user request: DNS
          Test omitted by user request: DNS
          Test omitted by user request: DNS
       Running partition tests on : ForestDnsZones
          Starting test: CheckSDRefDom
             ......................... ForestDnsZones passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... ForestDnsZones passed test
             CrossRefValidation
       Running partition tests on : DomainDnsZones
          Starting test: CheckSDRefDom
             ......................... DomainDnsZones passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... DomainDnsZones passed test
             CrossRefValidation
       Running partition tests on : Schema
          Starting test: CheckSDRefDom
             ......................... Schema passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... Schema passed test CrossRefValidation
       Running partition tests on : Configuration
          Starting test: CheckSDRefDom
             ......................... Configuration passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... Configuration passed test CrossRefValidation
       Running partition tests on : buc
          Starting test: CheckSDRefDom
             ......................... buc passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... buc passed test CrossRefValidation
       Running enterprise tests on : buc.edu
          Test omitted by user request: DNS
          Test omitted by user request: DNS
          Starting test: LocatorCheck
             GC Name: \\ASMDC.buc.edu
             Locator Flags: 0xe00013fd
             PDC Name: \\ASMDC.buc.edu
             Locator Flags: 0xe00013fd
             Time Server Name: \\ASMDC.buc.edu
             Locator Flags: 0xe00013fd
             Preferred Time Server Name: \\ASMDC.buc.edu
             Locator Flags: 0xe00013fd
             KDC Name: \\ASMDC.buc.edu
             Locator Flags: 0xe00013fd
             ......................... buc.edu passed test LocatorCheck
          Starting test: Intersite
             Skipping site Default-First-Site-Name, this site is outside the scope
             provided by the command line arguments provided.
             ......................... buc.edu passed test Intersite
    ====================================================================
    Repadmin: running command /showrepl against full DC localhost
    Default-First-Site-Name\ASMDC
    DSA Options: IS_GC
    Site Options: (none)
    DSA object GUID: 5e88f85b-15a6-4ff5-b0fd-6df748df06fd
    DSA invocationID: 1355f657-cd24-4ad4-b890-f04f5c624acd
    ==== INBOUND NEIGHBORS ======================================
    DC=buc,DC=edu
        Default-First-Site-Name\BSMDC via RPC
            DSA object GUID: 93561cab-4fb3-421f-9a67-af6b4c280eca
            Last attempt @ 2014-08-21 00:43:56 was successful.
    CN=Configuration,DC=buc,DC=edu
        Default-First-Site-Name\BSMDC via RPC
            DSA object GUID: 93561cab-4fb3-421f-9a67-af6b4c280eca
            Last attempt @ 2014-08-21 00:41:11 was successful.
    CN=Schema,CN=Configuration,DC=buc,DC=edu
        Default-First-Site-Name\BSMDC via RPC
            DSA object GUID: 93561cab-4fb3-421f-9a67-af6b4c280eca
            Last attempt @ 2014-08-20 23:51:37 was successful.
    DC=DomainDnsZones,DC=buc,DC=edu
        Default-First-Site-Name\BSMDC via RPC
            DSA object GUID: 93561cab-4fb3-421f-9a67-af6b4c280eca
            Last attempt @ 2014-08-21 00:45:39 was successful.
    DC=ForestDnsZones,DC=buc,DC=edu
        Default-First-Site-Name\BSMDC via RPC
            DSA object GUID: 93561cab-4fb3-421f-9a67-af6b4c280eca
            Last attempt @ 2014-08-20 23:51:37 was successful.
    Regards and thanks in advance
    Mhiar

    Hi,
    Based on the description, the Sysvol is replicated by FRS service.
    >>some policies at the main DC are not updated like same policies in second DC.
    In this case, we can do a non-authoritative restore on the main DC.
     To do so:   
    Click Start, and then click
    Run.
    In the
    Open box, type cmd and then press ENTER.
    In the
    Command box, type net stop ntfrs.
    Click Start, and then click
    Run.
    In the
    Open box, type regedit and then press ENTER.
    Locate the following subkey in the registry:
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup
    In the right pane, double-click
    BurFlags.
    In the
    Edit DWORD Value dialog box, type D2 and then click OK.
    Quit Registry Editor, and then switch to the
    Command box.
    In the
    Command box, type net start ntfrs.
    Quit the
    Command box.
    Regarding reinitializing File Replication Service replica sets, the following article can be referred to for more information.
    Using the BurFlags registry key to reinitialize File Replication Service replica sets
    http://support.microsoft.com/kb/290762/en-us
    Best regards,
    Frank Shen

Maybe you are looking for