RE: group policy updating

2009-09-10 Thread Joseph Heaton
riginal Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 3:22 PM To: NT System Admin Issues Subject: RE: group policy updating Bob, Thanks for the explanation, it makes it more logical for me. I looked in the FRS logs, and there's one error re

RE: group policy updating

2009-09-09 Thread Free, Bob
me to troubleshoot it further if that is necessary. Fixing FRS should resolve the problem if everything else is right. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 3:22 PM To: NT System Admin Issues Subject: RE: group policy updating Bob, T

RE: group policy updating

2009-09-09 Thread Joseph Heaton
computer is located in are put at the top of the list. A user can be authenticated by one domain controller, and can download policies from another domain controller in the site. ./aside -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 1:3

RE: group policy updating

2009-09-09 Thread Free, Bob
e- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 1:31 PM To: NT System Admin Issues Subject: RE: group policy updating So, after I run the gpotool /checkacl, I ended up piping it to a text file, and the errors it finds, are version mismatches on the server I kn

RE: group policy updating

2009-09-09 Thread Joseph Heaton
So, after I run the gpotool /checkacl, I ended up piping it to a text file, and the errors it finds, are version mismatches on the server I knew about. Here's where I stand: 3 DCs MoDC01 - 2K3 Virtual MoDC04 - 2K8 Virtual WSDC02 - 2K3 Physical GPMC is installed on MoDC04, and that's where I mad

RE: group policy updating

2009-09-09 Thread Free, Bob
ients. -Original Message- From: Richard Stovall [mailto:richard.stov...@researchdata.com] Sent: Wednesday, September 09, 2009 12:32 PM To: NT System Admin Issues Subject: RE: group policy updating If you right-click on the each of the DCs in replmon and choose "Show Group Policy Object S

RE: group policy updating

2009-09-09 Thread Joseph Heaton
e each of the DCs in replmon and choose "Show Group Policy Object Status", do you see the same information for all three Domain Controllers? -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 3:17 PM To: NT System Admin Issues Subj

RE: group policy updating

2009-09-09 Thread Richard Stovall
PM To: NT System Admin Issues Subject: RE: group policy updating One of the DCs is in a Warm site, the other two are virtualized in the same server room. All three of the DCs are listed in the same site in AD Sites & Services. Replmon is showing successful replication for everything it lists.

RE: group policy updating

2009-09-09 Thread Joseph Heaton
nal Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 1:48 PM To: NT System Admin Issues Subject: RE: group policy updating For the most part, this has been the answer. For some reason, one DC is not accepting the changes that were made to the policy.

RE: group policy updating

2009-09-09 Thread Richard Stovall
Subject: RE: group policy updating I have now enabled verbose logging on one of the clients not working. Under Debug\User Mode, there is a gpsvc file, showing group policy stuff. In this file, it doesn't show that the client ever found the Member Server Policy, which contains the login b

RE: group policy updating

2009-09-09 Thread Joseph Heaton
aton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 1:48 PM To: NT System Admin Issues Subject: RE: group policy updating For the most part, this has been the answer. For some reason, one DC is not accepting the changes that were made to the policy. However, I now have an excepti

RE: group policy updating

2009-09-09 Thread Richard Stovall
Have you enabled verbose logging on the affected client(s)? -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 1:48 PM To: NT System Admin Issues Subject: RE: group policy updating For the most part, this has been the answer. For some

RE: group policy updating

2009-09-09 Thread Joseph Heaton
vol are present on that particular DC. Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, 10 September 2009 12:10 AM To: NT System Admin Issues Subject: RE: group policy updating Application event log shows Event Code 1704: Security policy in

RE: group policy updating

2009-09-09 Thread Joseph Heaton
particular DC. Cheers Ken -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, 10 September 2009 12:10 AM To: NT System Admin Issues Subject: RE: group policy updating Application event log shows Event Code 1704: Security policy in the Group policy o

RE: group policy updating

2009-09-09 Thread Richard Stovall
From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, September 09, 2009 12:45 PM To: NT System Admin Issues Subject: RE: group policy updating That's what I'm looking at now. Should that be run on the source, or target machine, or does it matter? Also, is replmon available for 2k

RE: group policy updating

2009-09-09 Thread Joseph Heaton
12:30 PM To: NT System Admin Issues Subject: RE: group policy updating That's the issue, thanks Ken. The other DC is not showing these settings within the policy in sysvol. Is there a way to check this replication, to verify that it is even setup? >>> Ken Schaefer 9/9/2009 9:17 AM

RE: group policy updating

2009-09-09 Thread Richard Stovall
Thursday, 10 September 2009 12:10 AM To: NT System Admin Issues Subject: RE: group policy updating Application event log shows Event Code 1704: Security policy in the Group policy objects has been applied successfully. However, running rsop.msc following this does not show the new settings. It d

RE: group policy updating

2009-09-09 Thread Joseph Heaton
Thursday, 10 September 2009 12:10 AM To: NT System Admin Issues Subject: RE: group policy updating Application event log shows Event Code 1704: Security policy in the Group policy objects has been applied successfully. However, running rsop.msc following this does not show the new settings. It d

RE: group policy updating

2009-09-09 Thread Ken Schaefer
- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, 10 September 2009 12:10 AM To: NT System Admin Issues Subject: RE: group policy updating Application event log shows Event Code 1704: Security policy in the Group policy objects has been applied successfully. However, running

RE: group policy updating

2009-09-09 Thread Joseph Heaton
Wednesday, 9 September 2009 5:47 AM To: NT System Admin Issues Subject: Re: group policy updating Hmm, thanks Devin. I tried that on one of the machines, and the two settings in question are not showing as being defined at all, much less by a group policy. I don't think this is one of thos

RE: group policy updating

2009-09-08 Thread Ken Schaefer
September 2009 5:47 AM To: NT System Admin Issues Subject: Re: group policy updating Hmm, thanks Devin. I tried that on one of the machines, and the two settings in question are not showing as being defined at all, much less by a group policy. I don't think this is one of those changes that requi

Re: group policy updating

2009-09-08 Thread Joseph Heaton
Hmm, thanks Devin. I tried that on one of the machines, and the two settings in question are not showing as being defined at all, much less by a group policy. I don't think this is one of those changes that requires a reboot, at least the gpupdate didn't indicate it. I'll give it some time, a

Re: group policy updating

2009-09-08 Thread Devin Meade
Try RSOP.MSC on the machine in question. hth, Devin On Tue, Sep 8, 2009 at 4:08 PM, Joseph Heaton wrote: > I'm updating a group policy, to add a login banner.  Some of the machines in > question had one, but they were added manually either to the Local Security > Policy, or directly to the reg