Re: Opening Ports via GPO Part 2

[James Edwards]

As a thought could this be corrupted?
<\\My-Domain.sdsu.edu\sysvol\My-Domain.sdsu.edu\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. 



And could deleting it, and re entering the exceptions recreate the (non 
corrupted) entry?


Jim

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

RE: Opening Ports via GPO Part 2

[David L Herrick]

Had similar error was ready to rebuild the server - then I discovered
some helpful tech had removed everyone read/execute rights and disabled
dfs :(

All is fine now

DH

-Original Message-
From: James Edwards [mailto:[EMAIL PROTECTED] 
Sent: Monday, June 16, 2008 4:05 PM
To: NT System Admin Issues
Subject: Re: Opening Ports via GPO Part 2

Checking my Application log I find I'm getting the following error:

"Event Type:Error

Event Source:Userenv

Event Category:None

Event ID:1058

Date:6/16/2008

Time:2:13:18 PM

User:NT AUTHORITY\SYSTEM

Computer:BIG-DADDY

Description:

Windows cannot access the file gpt.ini for GPO 
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=My-Do
main,DC=sdsu,DC=edu. 
The file must be present at the location 
<\\My-Domain.sdsu.edu\sysvol\My-Domain.sdsu.edu\Policies\{31B2F340-016D-
11D2-945F-00C04FB984F9}\gpt.ini>. 
(Access is denied. ). Group Policy processing aborted.

For more information, see Help and Support Center at 
http://go.microsoft.com/fwlink/events.asp.

I've followed all of the troubleshooting steps in KB-887303 and 
everything passes.

Any suggestions? (grrr why can't I have simple problems? grrr)


Jim



~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm>  ~


This email and any attached files are confidential and intended solely for the 
intended recipient(s). If you are not the named recipient you should not read, 
distribute, copy or alter this email. Any views or opinions expressed in this 
email are those of the author and do not represent those of the Names in the 
News company. Warning: Although precautions have been taken to make sure no 
viruses are present in this email, the company cannot accept responsibility for 
any loss or damage that arise from the use of this email or attachments.

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm>  ~

RE: Opening Ports via GPO Part 2

[Mike Gill]

I just got that error on one of my XP machines. There are several
suggestions on eventid.net, but none of them worked for me so I had to
reinstall as I was running out of time for troubleshooting this machine.

-- 
Mike Gill

> -Original Message-
> From: James Edwards [mailto:[EMAIL PROTECTED]
> Sent: Monday, June 16, 2008 4:05 PM
> To: NT System Admin Issues
> Subject: Re: Opening Ports via GPO Part 2
> 
> Checking my Application log I find I'm getting the following error:
> 
> "Event Type:Error
> 
> Event Source:Userenv
> 
> Event Category:None
> 
> Event ID:1058
> 
> Date:6/16/2008
> 
> Time:2:13:18 PM
> 
> User:NT AUTHORITY\SYSTEM
> 
> Computer:BIG-DADDY
> 
> Description:
> 
> Windows cannot access the file gpt.ini for GPO
> CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=My-
> Domain,DC=sdsu,DC=edu.
> The file must be present at the location
> <\\My-Domain.sdsu.edu\sysvol\My-Domain.sdsu.edu\Policies\{31B2F340-
> 016D-11D2-945F-00C04FB984F9}\gpt.ini>.
> (Access is denied. ). Group Policy processing aborted.
> 
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> 
> I've followed all of the troubleshooting steps in KB-887303 and
> everything passes.
> 
> Any suggestions? (grrr why can't I have simple problems? grrr)
> 
> 
> Jim
> 
> 
> 
> ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
> ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm>  ~


~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm>  ~

Re: Opening Ports via GPO Part 2

[James Edwards]

Checking my Application log I find I'm getting the following error:

"Event Type:Error

Event Source:Userenv

Event Category:None

Event ID:1058

Date:6/16/2008

Time:2:13:18 PM

User:NT AUTHORITY\SYSTEM

Computer:BIG-DADDY

Description:

Windows cannot access the file gpt.ini for GPO 
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=My-Domain,DC=sdsu,DC=edu. 
The file must be present at the location 
<\\My-Domain.sdsu.edu\sysvol\My-Domain.sdsu.edu\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. 
(Access is denied. ). Group Policy processing aborted.


For more information, see Help and Support Center at 
http://go.microsoft.com/fwlink/events.asp.


I've followed all of the troubleshooting steps in KB-887303 and 
everything passes.


Any suggestions? (grrr why can't I have simple problems? grrr)


Jim



~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Opening Ports via GPO Part 2

[James Edwards]

I'm looking to open ports in the firewall. I had originally did this and 
it worked, but I had to revert to default GPO settings to troubleshoot a 
replication problem. This time when I tried to open the ports the same 
way, it didn't work.


I put the entries in as: "18080:TCP:"*":enabled:Counter Spy" and it 
doesn't work. The GP Results report shows:


"Display names for some settings cannot be found. You might be able to 
resolve this issue by updating the .ADM files used by Group Policy 
Management.




SettingState

Software\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts\Enabled
1


Software\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts\List\18080:TCP:"*":enabled:Counter 
Spy18080:TCP:"*":enabled:Counter Spy


Software\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts\List\18081:TCP:"*":enabled:Counter 
Spy18081:TCP:"*":enabled:Counter Spy


ETC. Etc. etc."


Any Ideas??

THANKS!!

Jim




~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Opening Ports via GPO

[James Edwards]

Klint Price - ArizonaITPro wrote:

no, the /24 means the last 255 digits in the last octet

if you want to allow everything in the last two octets, it would be 
10.3.0.0/16




Thanks, that worked. But, the Group Policies are only partially 
applying. I put in some port exceptions for the firewall and they aren't 
showing up. I had done this earlier and it worked, but I had to set all 
of my GPO's back to default to troubleshoot a replication error and when 
I put them back in, they don't work. I put the entries in as: 
"18080:TCP:"*":enabled:Counter Spy" so, does anyone see anything wrong?


THANKS!

Jim

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Re: Opening Ports via GPO

[Klint Price - ArizonaITPro]

no, the /24 means the last 255 digits in the last octet

if you want to allow everything in the last two octets, it would be 
10.3.0.0/16


Play around with www.subnet-calculator.com for more info.

Klint

James Edwards wrote:
I'm opening ports using GPO's. In the "Allow Printer and File Sharing" 
you can specify which subnets to allow contact from. The example shows 
10.3.2.0/24 to allow connections from 10.3.2.X. My question is what 
would be the proper notation to allow connections from 10.3.x.x. Would 
it be 10.3.0.0\24?


Jim

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~



~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~

Opening Ports via GPO

[James Edwards]

I'm opening ports using GPO's. In the "Allow Printer and File Sharing" 
you can specify which subnets to allow contact from. The example shows 
10.3.2.0/24 to allow connections from 10.3.2.X. My question is what 
would be the proper notation to allow connections from 10.3.x.x. Would 
it be 10.3.0.0\24?


Jim

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~   ~