I run a multi domain forest. During our Site Optimization I had some subnets associated to the wrong site without DC coverage it appears and it cause GPO's to not process on XP boxes.
The solution, associate the Subnet to the correct site. Whola it works. Todd Myrick -----Original Message----- From: Darren Mar-Elia [mailto:[EMAIL PROTECTED] Sent: Thursday, October 30, 2003 10:32 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] GPOs and additional sites Todd- The issue with ICMP has been documented well recently. MS has a KB article and fix related to this (http://support.microsoft.com/default.aspx?scid=kb;en-us;816045) and there was a good thread on NTBugtraq that talks about some workarounds (http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0310&L=NTBUGTRA Q&P=R3940). I'm also not clear on your comment about subnet association to sites and GPO processing. In general, I have not seen any problems around this that would stop GPO processing. What are you seeing? Darren -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Thursday, October 30, 2003 4:53 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] GPOs and additional sites I believe that the Slow link detection uses ICMP, so if you have turn that off on your internal network you will see issues. I am currently reviewing JM new GPO book. I think the scenario's you mention are a worthy mention in his book. I will see if he wants to discuss them either in his book, or on his new upcoming website dedicated to GPO related issues. Since you are using DFS, it is possible that you could have a dedicated server in each location to house Roaming Profiles and Software I believe. I believe DFS is site aware as well. Important Tip for Sites. Make sure your subnets are correctly associated to your sites or your GPO processing will not work. Todd Myrick http://www.toddm.org/adog -----Original Message----- From: Darren Mar-Elia [mailto:[EMAIL PROTECTED] Sent: Thursday, October 30, 2003 3:00 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] GPOs and additional sites Marcus- The answer to your question is yes. Basically, if a slow link is detected, the various Client Side Extensions for stuff like Software Installation and Folder Redirection will simply not fire, even if the bits (e.g. MSI package) are on a fast link. One way around this is to use Admin. Template policy to modify the slow-link threshold, which is set to 500 Kb/s by default. Darren -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marcus Oh Sent: Wednesday, October 29, 2003 5:52 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] GPOs and additional sites Gil, does this also apply if the binaries are stored in an alternate location such as Dfs? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gil Kirkpatrick Sent: Wednesday, October 29, 2003 1:16 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] GPOs and additional sites Oliver, The GPO processing on the client side includes a short test to determine the available bandwidth to the authenticating DC. If the bandwidth is below a certain threshold, the costlier bits of GPO processing such as application deployment will not be applied. See http://support.microsoft.com/default.aspx?scid=kb;EN-US%3B227260 And http://support.microsoft.com/default.aspx?scid=kb;EN-US;227369 -gil Gil Kirkpatrick CTO, NetPro Author of "Active Directory Programming" Find AD problems you don't even know you have! Register today for NetPro's FREE DirectoryAnalyzer Rapid Deployment Program! www.netpro.com/welcome/rapid/index.cfm -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Oliver Marshall Sent: Wednesday, October 29, 2003 5:59 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] GPOs and additional sites Whilst tinkering (read breaking) AD now that we have multiple sites setup in it, I was wondering this; We have a GPO that installs SP4 by way of an msi file. Now that the scottish office has been brought into the fold, and the DNS is working so that all machines can resolve all other names on the network, is it likely that when/if they reboot the SP4 install will be sent via the not-so-quick 256kbps line to scotland ? On that note, if a user with a roaming profile from the southern office goes to log on to scotlands workstations (happens often) will his machine attempt to download the profile from the servers in the southern office thereby flooding the line with stuff ? Eeek Olly List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
