Okay-I've just enabled the "Group Policy slow link detection" setting and set 
the connection speed to 0, which should have the effect of ignoring slow links.

Just for good measure, I also enabled "Software Installation policy processing" 
and selected the "Allow processing across a slow network connection" option.

We'll see what happens.



From: Webster [mailto:carlwebs...@gmail.com]
Sent: Wednesday, October 13, 2010 10:55 AM
To: NT System Admin Issues
Subject: RE: Group Policy Problems Over Wireless

Software Installation will not happen over what GP determines is a Slow Link on 
2008 and R2.  So turn off Slow Link detection and see if that helps.


Webster

From: John Hornbuckle [mailto:john.hornbuc...@taylor.k12.fl.us]
Subject: Group Policy Problems Over Wireless

Short version:
Is there a trick to improving group policy processing when accessing the 
network wirelessly?


Long version:
We have a lab with machines that have Broadcom wireless NICs in them. Vista OS, 
connecting to Server 2008 R2 DC.

I'm trying to deploy a piece of software to these machines via Group Policy. I 
have things setup so that if the machine is a member of a certain group, the 
software is deployed. Unfortunately, it only worked correctly on one of the 
machines-on all the rest, the software isn't being deployed.

So I connect to any of the machines that didn't get the software, and run 
gpresult. It doesn't show me that those machines are members of the group that 
gets the software. But I know they are; I've confirmed in ADUC on the DC. 
They're just not picking up group membership.

Looking at the event log for events that happen around startup, I see things 
that make me think group policy processing is trying to happen prior to the 
wireless network being initialized. Things like:

Event ID 5719 (There are currently no logon servers available to service the 
logon request.)
Event ID 129 (NtpClient was unable to set a domain peer to use as a time source 
because of discovery error.)
Event ID 1129 (The processing of Group Policy failed because of lack of network 
connectivity to a domain controller.)

Connectivity to the DC is fine once you get the [Ctrl] + [Alt] + [Del] window. 
You can log in (including as someone who has never logged into the machine 
before), ping the DC, browse to \\domain\syvol<file:///\\domain\syvol>, and so 
on. It's just that at that point, group policy processing seems to have given 
up. My machines aren't figuring out that they've been added to a new group.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe ntsysadmin



NOTICE: Florida has a broad public records law. Most written communications to 
or from this entity are public records that will be disclosed to the public and 
the media upon request. E-mail communications may be subject to public 
disclosure.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Reply via email to