When MS introduced that GPO ability, someone forgot to remember where
ipconfig looks for the information it displays. Ipconfig reads the registry
for the information, but the suffix adm/gpo is not stored in the same
location, so ipconfig will never be able to report whatever you are setting
in the adm/gpo.
You are not crazy. You are just observing some "known feature".
I can not answer why some clients are not getting your gpo settings, though.
That task is reserved for "gpoguy", who will be around very shortly ;)
Sincerely,
Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I
Microsoft MVP - Directory Services
www.readymaids.com - we know IT
www.akomolafe.com
Do you now realize that Today is the Tomorrow you were worried about
Yesterday? -anon
________________________________
From: [EMAIL PROTECTED] on behalf of Tom Kern
Sent: Mon 9/26/2005 9:42 AM
To: activedirectory
Subject: Re: [ActiveDir] flaky gpo
ok, last time i reply to my own email :)
I applied a gpo to add 3 domains to the dns suffix search order.
these 3 domains show up in the gui, when you right click a net adapter but
the change is not reflected when you do an "ipconfig".
the output of "ipconfig.exe" is different than whats in the gui in "network
connections".
also, when you ping a unqaulified name, it doesn't apply the search list from
the gui but rather the one in the output from "ipconfig.exe"
why is that?
does "ipconfig.exe" get net info from a different place than the gui in
"network connections"?
why would the gpo apply to the "network connections" info but NOT the
ipconfig.exe info you see in cmd.exe?
and why is ping.exe only using the one in ipconfig.exe and not the "network
connections" one.
thanks
P.S.- all clients are dhcp, if that provides any clue.
thanks again.
On 9/26/05, Tom Kern <[EMAIL PROTECTED]> wrote:
To further elaborate, the setting i'm trying to apply is a custom adm
file to add the dns search suffix to tcp/ip props.
all clients are win2k.
some get it, some never get it.
the really weird thing is, some clients after being reboot never get
it but when you type "ipconfig /release" and then "renew", they get it.
Thats bizzare.
how would a reboot not get the pol but i release/renew would?
thnaks again.
On 9/26/05, Tom Kern <[EMAIL PROTECTED]> wrote:
I have a computer portion gpo at the domain level that is a
little flaky.
For some pc's it applies, others take a number of reboots.
All my pc's are win2k.
The gpt has replicated to all DC's in all sites.
When i enable userenv debugging on the affected pc, this is
what i get -
USERENV(a8.1e0) 08:23:36:191 MyGetUserName: GetUserNameEx
failed with 1326
I can't find what this error means anywhere. It also fails
with error 1317 as well.
Does anyone know?
thanks
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
