You setting restricted groups in a policy? DCs don’t have local groups,
they just have the domain database, so, this is to be expected depending on
what you’re trying ot nest int eh domain version of this group.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sudhir Kaushal
Sent: Tuesday, September 13, 2005
8:10 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Security
Group Policy Not Applying
Hi all
I'm having an issue with ONE of my DC's (Win2003) not applying a group policy
object.
in the event viewer of the DC's i'm getting this errors after every 5 min
Event id: 1202
"Security policies were propagated with warning.
0x4b8 : An extended error has occurred."
When I drill down to the clients winlogon.log file i see the following entry
Error 0 to send the control flag 1 over to server.
Make a local copy of
\\domain.dom\sysvol\domain.dom\Policies\{31B2F340-0160-11D2-945F-00C04FB984F9}\Machine\Microsoft\Windows
NT\SecEdit\GptTmpl.inf.
GPLinkOrganizationUnit GPO_INFO_FLAG_BACKGROUND )
Process GP template gpt00000.dom.
This is not the last
GPO.
The log file also
specifies:
Warning 2 - The system
cannnot find the file specified.
cannot find the remote
desktop users.
Configure the remote
desktop users.
add
<domainname>\group name
Error 8520 - A local
group cannot have another cross domain local group as member.
Has anyone ever seen this error and/or
know what the solution is.
Regards,
Sudhir Kaushal
Systems Engineer (GIS)
Computer Sciences Corporation.
India
- + 91 120 2582323
Ext. 2649
Denmark
- + 45 70100024 Ext.
2649
“You never win Silver, You lose Gold”
----------------------------------------------------------------------------------------
This is a PRIVATE message. If you are not the intended recipient, please delete
without copying and kindly advise us by e-mail of the mistake in delivery.
NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any
order or other contract unless pursuant to explicit written agreement or
government initiative expressly permitting the use of e-mail for such purpose.
----------------------------------------------------------------------------------------