Understanding GPOTool Results

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I've been trying to troubleshoot client errors related to AD and GPO's such
as 1030 and 1054 errors as well as prep to upgrade the domain to 2003. I ran
the GPOTool, and it found an error with one GPO. The problem is that I don't
know how to interpret or fix the reported error.

The output is:

Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Friendly name: Default Domain Controllers Policy
Error: BOS1.in-three.com - aha202-dc02.in-three.com sysvol mismatch
Error: BOS1.in-three.com - wv-tempdc01.in-three.com sysvol mismatch
Details:
------------------------------------------------------------
DC: BOS1.in-three.com
Friendly name: Default Domain Controllers Policy
Created: 5/20/2002 5:23:28 PM
Changed: 11/1/2006 12:21:59 AM
DS version: 2(user) 101(machine)
Sysvol version: 2(user) 101(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions:
[{A2E30F80-D7DE-11D2-BBDE-00C04F86AE3B}{FC715823-C5FB-11D1-9EEF-00A0C90347FF}]
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: aha202-dc02.in-three.com
Friendly name: Default Domain Controllers Policy
Created: 5/20/2002 5:23:28 PM
Changed: 11/1/2006 12:22:29 AM
DS version: 2(user) 101(machine)
Sysvol version: 2(user) 101(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions:
[{A2E30F80-D7DE-11D2-BBDE-00C04F86AE3B}{FC715823-C5FB-11D1-9EEF-00A0C90347FF}]
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: wv-tempdc01.in-three.com
Friendly name: Default Domain Controllers Policy
Created: 5/20/2002 5:23:28 PM
Changed: 11/1/2006 12:18:50 AM
DS version: 2(user) 101(machine)
Sysvol version: 2(user) 101(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions:
[{A2E30F80-D7DE-11D2-BBDE-00C04F86AE3B}{FC715823-C5FB-11D1-9EEF-00A0C90347FF}]
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------

The machines are all in the same site, same gigabit switch (Cisco 4507).
Connectivity is not a problem - although I did have a supervisor card go bad
on me a couple of weeks ago.

To assess, I copied the GptTmpl.inf files from each sysvol to my desktop and
ran FC's against each possible pair. They are all reported as identical. I
also compared the GPT.Ini files for each - they all have the same revision
number.

I think the problem may have occurred because a couple of weeks ago I was
troubleshooting some other problem I found with DCDiag. A MS tech note
instructed to check the SID's in the GptTmpl.Inf files for various required
entries. The file on server BOS1 was missing the SID for "Authenticated
Users". As instructed, I added the value manually to the file and rebooted.

It would be helpful if anyone knows how to interpret the GPOTool results or
(even better) can point me to a reference that will help me interpret.

Thanks.
 
Back
Top