Policies not applying + Computer name resolution failure

Hi everyone,
We are having issues with the applying of GPOs on our client PCs. We have two DCs - one (Lomu) configured with the master FSMO roles. The issue is completely intermittent, affecting a lagre number of machines that have been reimaged over the Summer (approx.
50 out of 150 machines reimaged are affected).
The results of a dcdiag are below:
Directory Server Diagnosis
Performing initial setup:
   Trying to find home server...
   * Verifying that the local machine LOMU, is a Directory Server.
   Home Server = LOMU
   * Connecting to directory service on server LOMU.
   * Identified AD Forest.
   Collecting AD specific global data
   * Collecting site info.
   Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=ryburn,DC=inte
rnal,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
   The previous call succeeded
   Iterating through the sites
   Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name
,CN=Sites,CN=Configuration,DC=ryburn,DC=internal
   Getting ISTG and options for the site
   * Identifying all servers.
   Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=ryburn,DC=inte
rnal,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
   The previous call succeeded....
   The previous call succeeded
   Iterating through the list of servers
   Getting information for the server CN=NTDS Settings,CN=LOMU,CN=Servers,CN=Def
ault-First-Site-Name,CN=Sites,CN=Configuration,DC=ryburn,DC=internal
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=VM-MARADONA,CN=Servers
,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ryburn,DC=internal
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   * Identifying all NC cross-refs.
   * Found 2 DC(s). Testing 1 of them.
   Done gathering initial info.
Doing initial required tests
   Testing server: Default-First-Site-Name\LOMU
      Starting test: Connectivity
         * Active Directory LDAP Services Check
         Determining IP4 connectivity
         * Active Directory RPC Services Check
         ......................... LOMU passed test Connectivity
Doing primary tests
   Testing server: Default-First-Site-Name\LOMU
      Starting test: Advertising
         The DC LOMU is advertising itself as a DC and having a DS.
         The DC LOMU is advertising as an LDAP server
         The DC LOMU is advertising as having a writeable directory
         The DC LOMU is advertising as a Key Distribution Center
         The DC LOMU is advertising as a time server
         The DS LOMU is advertising as a GC.
         ......................... LOMU passed test Advertising
      Test omitted by user request: CheckSecurityError
      Test omitted by user request: CutoffServers
      Starting test: FrsEvent
         * The File Replication Service Event log test
         ......................... LOMU passed test FrsEvent
      Starting test: DFSREvent
         The DFS Replication Event Log.
         Skip the test because the server is running FRS.
         ......................... LOMU passed test DFSREvent
      Starting test: SysVolCheck
         * The File Replication Service SYSVOL ready test
         File Replication Service's SYSVOL is ready
         ......................... LOMU passed test SysVolCheck
      Starting test: KccEvent
         * The KCC Event log test
         Found no KCC errors in "Directory Service" Event log in the last 15 min
utes.
         ......................... LOMU passed test KccEvent
      Starting test: KnowsOfRoleHolders
         Role Schema Owner = CN=NTDS Settings,CN=LOMU,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ryburn,DC=internal
         Role Domain Owner = CN=NTDS Settings,CN=LOMU,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ryburn,DC=internal
         Role PDC Owner = CN=NTDS Settings,CN=LOMU,CN=Servers,CN=Default-First-S
ite-Name,CN=Sites,CN=Configuration,DC=ryburn,DC=internal
         Role Rid Owner = CN=NTDS Settings,CN=LOMU,CN=Servers,CN=Default-First-S
ite-Name,CN=Sites,CN=Configuration,DC=ryburn,DC=internal
         Role Infrastructure Update Owner = CN=NTDS Settings,CN=LOMU,CN=Servers,
CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ryburn,DC=internal
         ......................... LOMU passed test KnowsOfRoleHolders
      Starting test: MachineAccount
         Checking machine account for DC LOMU on DC LOMU.
         * SPN found :LDAP/LOMU.ryburn.internal/ryburn.internal
         * SPN found :LDAP/LOMU.ryburn.internal
         * SPN found :LDAP/LOMU
         * SPN found :LDAP/LOMU.ryburn.internal/RYBURN
         * SPN found :LDAP/8ee4cad0-4018-428e-b85b-07af05cf933c._msdcs.ryburn.in
ternal
         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/8ee4cad0-4018-428e-b8
5b-07af05cf933c/ryburn.internal
         * SPN found :HOST/LOMU.ryburn.internal/ryburn.internal
         * SPN found :HOST/LOMU.ryburn.internal
         * SPN found :HOST/LOMU
         * SPN found :HOST/LOMU.ryburn.internal/RYBURN
         * SPN found :GC/LOMU.ryburn.internal/ryburn.internal
         ......................... LOMU passed test MachineAccount
      Starting test: NCSecDesc
         * Security Permissions check for all NC's on DC LOMU.
         * Security Permissions Check for
           DC=ForestDnsZones,DC=ryburn,DC=internal
            (NDNC,Version 3)
         * Security Permissions Check for
           DC=DomainDnsZones,DC=ryburn,DC=internal
            (NDNC,Version 3)
         * Security Permissions Check for
           CN=Schema,CN=Configuration,DC=ryburn,DC=internal
            (Schema,Version 3)
         * Security Permissions Check for
           CN=Configuration,DC=ryburn,DC=internal
            (Configuration,Version 3)
         * Security Permissions Check for
           DC=ryburn,DC=internal
            (Domain,Version 3)
         ......................... LOMU passed test NCSecDesc
      Starting test: NetLogons
         * Network Logons Privileges Check
         Verified share
\\LOMU\netlogon
         Verified share
\\LOMU\sysvol
         [LOMU] User credentials does not have permission to perform this
         operation.
         The account used for this test must have network logon privileges
         for this machine's domain.
         ......................... LOMU failed test NetLogons
      Starting test: ObjectsReplicated
         LOMU is in domain DC=ryburn,DC=internal
         Checking for CN=LOMU,OU=Domain Controllers,DC=ryburn,DC=internal in dom
ain DC=ryburn,DC=internal on 1 servers
            Object is up-to-date on all servers.
         Checking for CN=NTDS Settings,CN=LOMU,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=ryburn,DC=internal in domain CN=Configuration,
DC=ryburn,DC=internal on 1 servers
            Object is up-to-date on all servers.
         ......................... LOMU passed test ObjectsReplicated
      Test omitted by user request: OutboundSecureChannels
      Starting test: Replications
         * Replications Check
         [Replications Check,LOMU] DsReplicaGetInfo(PENDING_OPS, NULL) failed,
         error 0x2105 "Replication access was denied."
         ......................... LOMU failed test Replications
      Starting test: RidManager
         * Available RID Pool for the Domain is 11603 to 1073741823
         * LOMU.ryburn.internal is the RID Master
         * DsBind with RID Master was successful
         * rIDAllocationPool is 11103 to 11602
         * rIDPreviousAllocationPool is 11103 to 11602
         * rIDNextRID: 11249
         ......................... LOMU passed test RidManager
      Starting test: Services
         * Checking Service: EventSystem
         * Checking Service: RpcSs
         * Checking Service: NTDS
            Could not open NTDS Service on LOMU, error 0x5 "Access is denied."
         * Checking Service: DnsCache
         * Checking Service: NtFrs
         * Checking Service: IsmServ
         * Checking Service: kdc
         * Checking Service: SamSs
         * Checking Service: LanmanServer
         * Checking Service: LanmanWorkstation
         * Checking Service: w32time
         * Checking Service: NETLOGON
         ......................... LOMU failed test Services
      Starting test: SystemLog
         * The System Event log test
         Found no errors in "System" Event log in the last 60 minutes.
         ......................... LOMU passed test SystemLog
      Test omitted by user request: Topology
      Test omitted by user request: VerifyEnterpriseReferences
      Starting test: VerifyReferences
         The system object reference (serverReference)
         CN=LOMU,OU=Domain Controllers,DC=ryburn,DC=internal and backlink on
         CN=LOMU,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration
,DC=ryburn,DC=internal
         are correct.
         The system object reference (serverReferenceBL)
         CN=LOMU,CN=Domain System Volume (SYSVOL share),CN=File Replication Serv
ice,CN=System,DC=ryburn,DC=internal
         and backlink on
         CN=NTDS Settings,CN=LOMU,CN=Servers,CN=Default-First-Site-Name,CN=Sites
,CN=Configuration,DC=ryburn,DC=internal
         are correct.
         The system object reference (frsComputerReferenceBL)
         CN=LOMU,CN=Domain System Volume (SYSVOL share),CN=File Replication Serv
ice,CN=System,DC=ryburn,DC=internal
         and backlink on CN=LOMU,OU=Domain Controllers,DC=ryburn,DC=internal
         are correct.
         ......................... LOMU passed test VerifyReferences
      Test omitted by user request: VerifyReplicas
      Test omitted by user request: DNS
      Test omitted by user request: DNS
   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test
         CrossRefValidation
   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test
         CrossRefValidation
   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
   Running partition tests on : ryburn
      Starting test: CheckSDRefDom
         ......................... ryburn passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ryburn passed test CrossRefValidation
   Running enterprise tests on : ryburn.internal
      Test omitted by user request: DNS
      Test omitted by user request: DNS
      Starting test: LocatorCheck
         GC Name:
\\LOMU.ryburn.internal
         Locator Flags: 0xe00033fd
         PDC Name:
\\LOMU.ryburn.internal
         Locator Flags: 0xe00033fd
         Time Server Name:
\\LOMU.ryburn.internal
         Locator Flags: 0xe00033fd
         Preferred Time Server Name:
\\LOMU.ryburn.internal
         Locator Flags: 0xe00033fd
         KDC Name:
\\LOMU.ryburn.internal
         Locator Flags: 0xe00033fd
         ......................... ryburn.internal passed test LocatorCheck
      Starting test: Intersite
         Skipping site Default-First-Site-Name, this site is outside the scope
         provided by the command line arguments provided.
         ......................... ryburn.internal passed test Intersite
Just wondering if anyone has similar issues as us on this?
When running gpupdates, we receive this message:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
a) Name Resolution failure on the current domain controller.
b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).
Thanks,
Tom.

Hi,
I would suggest you check the group policy service log under event viewer\Applications and Services log\Microsoft\Windows\Group Policy, find the error log and check the Details, then apply the solutions mentioned in the link below depending on the detailed
error code.
http://technet.microsoft.com/en-us/library/dd392593(v=ws.10).aspx
As
arnavsharma mentioned, members in GP forum are more familiar with this topic.
Yolanda Zhu
TechNet Community Support

Similar Messages

  • Help! Computer List policies not applying to computers

    The computers are bound with LDAP to the xserve, in the computers list and have been restarted multiple times what can I do to make the policies apply?
    Thanks

    After many hours of tinkering I have finally found what was wrong.
    This is how to resolve this issue.
    Problem:
    Computer polices not applying although in computers list,after deleting MCX settings and LDAP plugin settings on the local machine.
    Cause of problem.
    Workgroup manager fails to remove certain records or up date them as things are changed.
    Solution
    Open work group manager and remove computers that are having these difficulties from the computers lists.
    Now open preferences in work group manager. Select the box showing 'show all records' tab and inspector.
    You should see in the left hand side a new tab appear next to groups users and computers list.
    Select the accounts at the top and then click on the 'inspector tab'. This should now show a small drop down menu with several items in it.
    Select computers, and delete the unnecessary or incorrect records for computers.
    After this re add the computers to the computers list and your done.
    If the preferences still didn't apply its now machine based and you should delete the MCX preferences on the machine and flush the MCX cache.

  • SIU - Apply Computer Name and Local Hostname settings from a file

    I am setting up a workflow to image corporate computers and wanting to know how the "Apply Computer Name and Local Hostname settings from a file" works in the Apply System Configuration Settings task.
    We bind the computer to AD and OD and we have a specific naming convention for certain departments and trying to automate the entire imaging process.
    Would this be something that can be done with SIU?

    Well, maybe there's a bug in the latest version (10.5.3) of SIU as this is not what is happening.
    It doesn't seem to matter what I specify for the name parameters I end up with a Bonjour name of ".local".
    I put in a line of the form <Mac Address><TAB>tom<TAB>dick<TAB>harry into the text file used by the Apply System Configuration Settings Action.
    and end up with hostname = tom, Computer Name = dick and Bonjour Name = .local
    I'm building the NetInstall image on a new iMac running 10.5.3 booted out of a second partition and create the image from the main boot partition (also 10.5.3). I then copy the image to my server (10.5.3) and make a second iMac boot up from the NetInstall image.
    For what it is worth the Workflow Actions I am using are:
    Define Image Source
    + NetInstall
    Source: Macintosh HD
    Filter Clients by MAC Address
    + Allow
    <List of MAC Addresses>
    Enable Automated Installation
    + On Volume Named: Macintosh HD
    + Erase before installing
    + Primary Language: English
    Apply System Configuration Settings
    + Apply Computer Name and Local Hostname settings from a file: <FILE>
    Add Packages and Post-Install Scripts
    + Shell Script [Doesn't work - we're discussing in it in another thread]
    Create Image
    In: Public
    Named: NetInstall Classroom
    Volume Name: Classroom iMacs
    Index: 1

  • ZCM 11 Group Policies not applying to satellite servers

    Hi there
    We are running 2 Windows 2012 Primary Servers and a SQL 2012 Database server at our main site, all remote sites have SLES11 SP2/OES11 SP1 as satellite servers. We upgraded all servers last weekend to 11.3.1 and now have an issue with Group Policies applying to the satellites. The satellites are all set up the same with Authentication, Collection, Content and Imaging roles.
    Since we upgraded Group Policies are (99% of the time) not applying on satellite sites. I have tried manually replicating content (I assume policies will come from content replication?) to the satellites - I've done this with a zac cdp replicate and zac cvc and everything seems to replicate over however I tried highlighting a satellite server and clicking on Action, Specify Content - select the Policy that is not applying and move it into the selected Content to update column and when I click finish I get the error "The Wizard cannot continue for the following reason(s): Unable to complete your request for the following reason: Error updating content"
    On a managed device at the satellite site if you look at the properties of the Zenworks agent and click on Policies it has applied 4 device assigned policies successfully - Remote Management, Power Management, Application Launcher Config and Application Control Policy, also has successfully applied 3 out of the 4 User Assigned Policies - Mandatory Profile, Dynamic Local User, Application Control - but not the Windows Group Policy.
    Our PCs are on Windows 8.1 and all policies were applying fine before the weekend upgrade......
    Has anyone else had any experience of Group Policies not applying that could point me where to look? I have logged an SR with Novell through our reseller but as yet I am getting no response back at all, not even asking me for more information.
    Many thanks
    Sharon

    Sounds like you have a content replication issue more than a GPO issue.
    Especially if the GPO works for locations that point to the Primaries
    for Content.
    Do you have throttling configured anywhere in any fashion?
    You may need to increase the Replication Timeout to make sure content is
    getting over to the Sats. Often increasing from 60 to 240 helps, but
    watch out for throttling preventing content replication.
    It is possible things are backing up.
    On 7/31/2014 8:26 AM, shazzypoos wrote:
    >
    > I should add that when you looked at the "Click for Details" to the
    > right of the Effective "Failed" status the message is "Policy
    > Enforcement Failed : The action (0) threw an exception. Message (1).
    > Exception (2) (grouppolicy, "None of the source locations could be
    > found"
    >
    > Hmmmm! Currently in closest server rules there is only the server for
    > the site it's on set - we do not want it to come back to the Primary for
    > policies. As I say, this was working before the weekend upgrade. Thanks!
    >
    >
    Craig Wilson - MCNE, MCSE, CCNA
    Novell Technical Support Engineer
    Novell does not officially monitor these forums.
    Suggestions/Opinions/Statements made by me are solely my own.
    These thoughts may not be shared by either Novell or any rational human.

  • HT1202 How do i change the computer for my iphone? it says iphone will syn automatically once it is plugged into "DUCH..." (not my computer name) . what should i do to change that?

    How do i change the computer for my iphone? it says iphone will syn automatically once it is plugged into "DUCH..." (not my computer name) . what should i do to change that?

    Connect your phone to iTunes and in the Summary pane, hit the "Sync with this iOS device over Wi-Fi"
    http://support.apple.com/kb/PH2560

  • Custom SCEP Policies not applied

    Hi All,
    I've got 3 test systems with SCEP installed.  They all receive definitions just fine.  Unfortunately they are not receiving the custom antimalware policies i've created.  I found this blog that tells me a command i can run against the registry
    to see what policies are applied:
    reg query HKLM\SOFTWARE\Microsoft\CCM\EPAgent\LastAppliedPolicy /f 2 /d
    http://www.niallbrady.com/2013/02/17/how-can-i-determine-what-antimalware-policy-is-applied-to-my-scep-2012-sp1-client/
    and it returns the following:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CCM\EPAgent\LastAppliedPolicy
        All Windows SCEP Clients Policy (Scan Schedule)    REG_DWORD    0x2
        All Windows SCEP Clients Policy (Threat Default Action)    REG_DWORD    0x2
        Windows Server Scanning Exclusions (Excluded)    REG_DWORD    0x2
        Default Client Antimalware Policy (Excluded)    REG_DWORD    0x2
        All Windows SCEP Clients Policy (Realtime Config)    REG_DWORD    0x2
        All Windows SCEP Clients Policy (Advance Setting)    REG_DWORD    0x2
        All Windows SCEP Clients Policy (Spynet)    REG_DWORD    0x2
        All Windows SCEP Clients Policy (Signature Update)    REG_DWORD    0x2
        All Windows SCEP Clients Policy (Scan)    REG_DWORD    0x2
    End of search: 9 match(es) found.
    The way I read that means that the "All Windows SCEP Clients Policy" settings are all applied.  The "Windows Server Exclusions" policy is excluded for some reason. 
    My custom policies set scan times different than the default and i have some exclusions.  When I launch the SCEP client on the local computer, i don't see the set scan times, just the default scan times.  I also don't see the exclusions. 
    I see in that req query command that the Exclusions are (Excluded), but the scan schedule should apply. The priorities on the applied AMP (antimalware policies) are:
    Default Client AntimMalware Policy  10000
    All Windows SCEP Clients Policy  21
    Windows Server Scanning Exclusions  5
    These policies are applied to appropriate collections.  When I click on the system in question in the console and look at the antimalware policies, it lists those three. 
    I cannot for the life of me get these policies to apply even though they have what i think are the right priorities.  The way i understand it, the policies stack for most of the settings.  So the default settings get set by the default policy. 
    Then the "All Windows SCEP Policy" settings would override or merge with any settings in the default policy.  Then the "Windows Server Scanning Exclusions" policy would override or merge with any of the previous two policies. 
    Am I misinterpreting things here?

    Hi,
    I don't know if you managed to resolve this. But I had similar issues and after some detective work this was being caused by Group policy preventing the processing of local group policies. Specifically, the offending setting and explanation is listed below:
    Setting Path:
    Computer Configuration/Administrative Templates/System/Group Policy
    Setting: Turn off Local Group Policy objects processing: Enabled
    Explanation
    This policy setting prevents Local Group Policy objects (Local GPOs) from being applied.
    By default, the policy settings in Local GPOs are applied before any domain-based GPO policy settings. These policy settings can apply to both users and the local computer. You can disable the processing and application of all Local GPOs to ensure that only
    domain-based GPOs are applied.
    If you enable this policy setting, the system will not process and apply any Local GPOs.
    If you disable or do not configure this policy setting, Local GPOs will continue to be applied.
    Note: For computers joined to a domain, it is strongly recommended that you only configure this policy setting in domain-based GPOs. This setting will be ignored on computers that are joined to a workgroup.
    Make sure the setting is either set to disable or not configured.
    The image below shows a RSoP on a computer where policies are applying successfully. As you can see, antimalware settings are being applied as local group policy settings

  • Group policies not applying

    Hello,
    I have just installed Windows 10 on my laptop as a try out, and I LOVE it!!
    Just, I have joined my laptop to a domain... and unfortunately the group policies are not applying!
    I get error messages like this in the application event logs:
    The user '...' preference item in the '...' Group Policy Object did not apply because it failed with error code '0x800704f1 The system cannot contact a domain controller to service the authentication request. Please try again later.' This error was suppressed.
    Does anyone have an idea?
    Thanks!

    Hi GeoffreyBeulque,
    Can you give us  the ipconfig /all information about your network?
    In your error information, your client cannot contact the Domain Controller, you need check your network settings to make sure the connection is OK.
    Alex Zhao
    TechNet Community Support

  • W7 Group Policies not applying

    We are planning on deploying Windows 7 Pro in our offices this coming year and I have been in the process of building my Windows 7 group policies from scratch by using the XP policies as a template. I have 3 policies that I create the standard lockdown, administrative mode, and IT. As I'm building the policies and the have the Group Policy editor open, whatever changes that I make do apply on my local machine, but after I save and upload the policies and apply them to machines the policy status in the Zen Notify Icon says that they have applied, but in function no policies have applied. I'm getting ready to start adding my Allow These Executables list but don't want to waste the time if the desktop look and feel and general access features aren't being applied correctly to the machines. Is there anything that I can check to see why this isn't working correctly?

    I am making the policies from scratch on a Win7 Pro machine. When I use the GP Editor from ZCM to create and reopen the policies all of my policy details are applying correctly to my local machine which I am working on the policy with. When I apply them to Win7 systems the policy status under the ZCM desktop icon shows that they were applied successfully, but when trying do do anything prohibited by policy or checking the gpedit.msc everything says Not Configured. This is only happening to "Windows Group Policy" objects, DLU and Remote Control are working correctly.

  • Connecting from a remote computer / name resolution issues

    My work has two SQL Server 2005 databases, one installed on a Windows XP machine (running some equipment) and one installed on a Windows 7 machine (backing up the files from the XP instance).  Both computers run only the default instance.  I had
    replication set up and functioning (data being created on the XP maching was being replicated to the Win 7 machine) for the last three weeks in July.  I recently noticed that the replication is no longer working (the files were no longer being copied),
    and when I tried to check the status I got an error about named pipes, or, if I disabled named pipes "tcp provider error 0 no such host is known".
    At the time I found the replication problem, I could connect to both databases through SSMS on the Windows 7 machine.  On the XP machine, I could use SSMS to browse to the Win 7 instance but SSMS would not connect to the Win 7 instance by name (same
    errors about no such host known); the connection does go through by IP address.  I can ping from the Win 7 machine to the XP machine both by IP address and by name.  I could ping from the XP machine to the Win 7 machine by IP address but NOT by name.
    I tried running the workgroup wizard on the XP machine, thinking this might help with the name resolution problem.  In the wizard, I changed the workgroup name to a new name.  I changed the workgroup name on the Win 7 machine to match.
    This change did not affect the ping status - I can still ping by both name and IP address from the Win 7 machine, and still only the IP address works from the XP machine.  However, now SSMS on the Win 7 machine no longer sees the XP machine!  Trying
    to log in with either the machine name and the IP address, I now get a "timeout expired" message, and the SSMS login browser does not show the XP machine on the network.
    Any pointers on where to look for the cause of this problem would be very welcome.

    There was some problem (bug?) with the remote connections flag on the Win 7 server.  Someone had posted in the comments to a technet article that unchecking the remote connections box, restarting the server, then re-checking it helped them.  I
    tried it, and that fixed the problem with the Win 7 machine being unable to see the XP machine.
    Olaf's suggestion about the Hosts file fixed the problem with the XP machine having to use the IP address - now it can connect by name as well.
    Now I just have left the problem of a broken subscription to my replication, but that's a separate issue so I'll consider this thread closed.  Thanks to everyone who offered suggestions.

  • User policies not applied hence dlu not working

    We have 6 pc's that for some reason don't get user policies. Here's the
    line from zmd-message.log of the workstation agent:
    [1296] [ZenworksWindowsService] [56] [] [PolicyManager] []
    [ApplyPolicies: Either user session is null or Device-only mode is
    enabled or Zen logon module is not present; not applying user policies.]
    The zone is 10.3.3, we use a user source connected to edir and the user
    is getting user policies on other computers. What's this Device-only mode?
    regards,
    Limor

    Found the problem. Our people disabled Zenworks User Authentication in
    the registry.
    On 13/09/2011 09:13, Limor wrote:
    > We have 6 pc's that for some reason don't get user policies. Here's the
    > line from zmd-message.log of the workstation agent:
    > [1296] [ZenworksWindowsService] [56] [] [PolicyManager] []
    > [ApplyPolicies: Either user session is null or Device-only mode is
    > enabled or Zen logon module is not present; not applying user policies.]
    >
    > The zone is 10.3.3, we use a user source connected to edir and the user
    > is getting user policies on other computers. What's this Device-only mode?
    >
    > regards,
    > Limor

  • Email Address Policies not applying

    Hi,
    Before installing Exchange 2010 in our domain, we accidentally deleted few users, and restored back again. However, after installing Exchange, we can see that EAP are not applying to these users, but works fine for other users. Is there any tweak we can
    apply to make EAP apply (ADSIEDIT, or other tool)?
    Thank you for any help
    alfa21

    Hi,
    Is the e-mail address policy your default
    e-mail address policy or a new policy you created before?
    If the e-mail address policy is a new created policy, we can use the
    Update-EmailAddressPolicy cmdlet to apply an e-mail address policy to all recipients:
    Update-EmailAddressPolicy -Identity EMAIL_ADDRESS_POLICY01
    We can use EMC to check whether the problematic users are listed in the
    Default Email Address Policy preview:
    http://exchangeserverpro.com/exchange-server-2010-email-address-policies/
    Thanks,
    Winnie Liang
    TechNet Community Support

  • Windows 8.1 - Security policies not applying

    Hi All,
    I'm having a bit of an issue with group policy settings not applying on Windows 8.1. Most of the policies are applying as they should but for some
    reason certain security settings (Password policy, Account lockout policy, Interactive logon message etc.) are not.
    I can see from GPResult that the policy is not filtered out and can confirm that some of the settings from the policy are getting applied!
    FYI: The DC is WS2003 and we have not imported the Windows 8.1 ADMX templates... Could that be causing the issue?
    Any help you guys might be able offer would be greatly appreciated!

    As I know, Security policy like Password policy, Account lockout policy, Interactive logon message should work even the DC is Win Server 2003.
    I suggest you check whether these policy are overridden by other GPOs due to the the GPO Priority, you can find detailed information in this link
    Group Policy processing and precedence
    http://technet.microsoft.com/en-us/library/cc785665(v=ws.10).aspx
    Yolanda Zhu
    TechNet Community Support

  • Group policies not applied after upgrading to Windows 10

    After signing in on my T430 the group policies delivered by the AD-server are not applied. In particular the network drives don't get mapped (there are some other policies as well, but that's the bigggest problem). When i wait for some minutes in order to force a group policies update, the network drives are slowly getting mapped. The network connection works after signing in and the connection to the server is stable. I set up a clean Windows 10 installation on my T430 (instead of before just upgrading from Windows 8.1) and without installing any third party programs oder drivers and I experience exactly the same problem. On 6 other desktop-computers Windows 10 works fine, just our 2 upgraded Lenovos don't apply the group policies after signing in. I restored my Windows 8.1 image and now it works fine again, the group policies are applied after signing in. Has anyone else experienced this problem yet and found a solution for this?

    I have contacted Lenovo via phone support. They told me Windows 10 isn't tested yet, they have not made any experiences so far and in order to that officially don't support Windows 10. Drivers may work, may not work. Contrary to this list - https://support.lenovo.com/us/en/documents/ht103535 We don't use any wmi filters. But what troubles me ist that at the first login of a user all group policies are applied, including mapped network drives. So everything is fine. But all further logins make it not work. I have contacted Microsoft at well, they tell me to contact Lenovo. Lenovo on the other hand tells me to contact Microsoft...

  • Computer Policies not applying from ZEN in W2K

    Hi everyone,
    I have Windows 2000 Citrix member servers and Zenworks 4.
    My user policies apply through GP's distributed by Zen, however the
    computer configuration doesn't apply.
    eg. If I edit the Group Policy and tick a checkbox, say "Allow logon
    locally"... if I then close the GP editor and re-open it, the policy will
    have reverted back to the default.
    Same if I edit a policy locally on a W2K server, then reboot the server,
    the policy will have reverted back to the default. I thought rebooting
    the W2K server wouldn't actually apply any policies from Zen until such
    time that someone logged in..
    Any help would be appreciated.
    Brent.

    Brent,
    It appears that in the past few days you have not received a response to your
    posting. That concerns us, and has triggered this automated reply.
    Has your problem been resolved? If not, you might try one of the following options:
    - Do a search of our knowledgebase at http://support.novell.com/search/kb_index.jsp
    - Check all of the other support tools and options available at
    http://support.novell.com in both the "free product support" and "paid product support"
    drop down boxes.
    - You could also try posting your message again. Make sure it is posted in the
    correct newsgroup. (http://support.novell.com/forums)
    Be sure to read the forum FAQ about what to expect in the way of responses:
    http://support.novell.com/forums/faq_general.html
    If this is a reply to a duplicate posting, please ignore and accept our apologies
    and rest assured we will issue a stern reprimand to our posting bot.
    Good luck!
    Your Novell Product Support Forums Team
    http://support.novell.com/forums/

  • Workgroup policies not applying....

    Hello everyone....
    I am trying to set some group policies using Zen 7 on WinXP SP3 workstations
    and for whatever reason, nothing seems to work.
    I've tried various events (login, logout, desktop goes active) and none of
    them seem to make any difference.
    I've even got a far as pulling up the Novell Workstation Scheduler and all
    the changes on events get reflected here, but when I run them, the status
    changes to Currently Running changes to Yes for a few seconds and then goes
    back to No. And nothing gets applied.
    Anyone have any ideas?
    Thanks.
    Delon E. Weuve
    Senior Network Engineer
    Office of Auditor of State
    State of Iowa
    United States of America

    Hey, Shaun....
    I had something weird happen.
    When I turned on the Zen logs, I started getting Winlogon errors in the
    Client whenever I boot up the computer. When I turn off the Zen logs, the
    Winlogon errors stop.
    Any ideas??
    Delon E. Weuve
    Senior Network Engineer
    Office of Auditor of State
    State of Iowa
    United States of America
    >>> Shaun Pond<[email protected]> 2/16/2011 5:29 AM >>>
    Delon,
    do you see it trying to apply your policy? if so, see
    http://support.microsoft.com/default...en‑us;221833 to
    enable userenv logging
    Key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
    NT\CurrentVersion\Winlogon
    Value: UserEnvDebugLevel
    Value Type: REG_DWORD
    Value Data: 30002 (Hex)
    file created is %Systemroot%\Debug\UserMode\Userenv.log
    this is not the easiest to read (understatement) but you should be able
    to see every individual registry setting being made...
    Shaun Pond

Maybe you are looking for

  • Compatibility keynote 08 to 11

    I copied old keynote '08 files from my laptop to a brand new iMac with new iWork ('11 ?) and Mavericks. The old files now do not open but instead keynote  asks first for a conversion to '09 format. How can I do it since I only have iWork'08 in the la

  • Different number of rows when add/delete the same table

    Hi, i've a problem in a select statement. My database is a 9.2.0.8. select * from  tab1 t1,         tab2 t2,         tab2 t3 where t1.id_c1 = 1    AND t1.id_c2 = t2.id_c2    AND t1.id_c2 = t3.id_c2    AND t2.id_init = 3693    AND t3.id_init = 3892; 9

  • Step by step ABS pkg creation docs?

    Hello. I've been reading over the wiki and forum about building packages for Arch with ABS.  I'm having a hard time grasping the actual specific steps required to get it done. I'm willing to admit that I'm not a genius at this, and that the docs do s

  • Why in Firefox 9 are many bookmark icons missing? (Mac OSX Leopard)

    After the 9.0 update most all of the icons in the bookmarks lists disappeared. Others have a dotted line box in place of solid box. What gives?

  • Can't update payment info for CC

    My Credit Card expiration date needs to be updated ASAP!  It will be rejected on Mon. Aug 5th when Adobe tries to bill it again.  Each time I log in to "Manage Your Account"  at https://creative.adobe.com/account/plans  I get the dreaded Error Messag