User Policy doesnt apply on one PC!

[Guest]

Ive set up a Group Policy in a W2K AD domain

Ive defined a user policy to set the homepage in Internet Explorer. The policy is applied successfully to all client machines(win2k) apart from mine(also win2k)

If i run gpresult /u the error i get is "LookupAccountSid failed with 1789." I assumed this was a DNS problem, however the DNS setup is identical on every machine in the domain(apart from IP address!!

If i log onto another client PC, the user settings are applied with no problems

Is there a setting anywhere that prevents a specific PC from applying user policy settings

Please help, i've been trying to troubleshoot this for two days!

 

[Derek Melber [MVP]]

CHeck out this KB article: 262958

I think it might get you down the right path.

--
Derek Melber
University of Phoenix Online
Faculty Candidate
(e-mail address removed)

Ive set up a Group Policy in a W2K AD domain.

Ive defined a user policy to set the homepage in Internet Explorer. The

policy is applied successfully to all client machines(win2k) apart from
mine(also win2k).

If i run gpresult /u the error i get is "LookupAccountSid failed with

1789." I assumed this was a DNS problem, however the DNS setup is identical
on every machine in the domain(apart from IP address!!)

 

[Guest]

Thanks for pointing me to that KB article

I checked those settings, they seem to be fine. The gpresult shows that the domain controller applied the security settings:

Last time Group Policy was applied: 11 March 2004 at 11:21:5
Group Policy was applied from: JOHNBRASH02.johnbrash.loca
==============================================================
The computer received "Registry" settings from these GPOs
Local Group Polic
Default Domain Polic
Default Domain Polic
==============================================================
The computer received "Security" settings from these GPOs
Local Group Polic
Default Domain Polic
Default Domain Polic
Default Domain Controllers Polic
==============================================================
The computer received "EFS recovery" settings from these GPOs
Local Group Polic
Default Domain Polic
Default Domain Polic

And the domain controllers policy, Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment folder contains the following:

Administrator
Authenticated User
Everyon

I am also a member of the administrators group, so why does it not apply the policy on only this pc, if i try a different PC everything is applied ok

thanks for your help
Matt Nunns

 

[Derek Melber [MVP]]

Matt,

If you configure a "computer setting" for this computer, does it apply? If
not, then I would try to fix the computer account in AD. The best bet is to
just remove it from the domain, then rejoin. Or, you can try to reset the
account too.

--
Derek Melber
University of Phoenix Online
Faculty Candidate
(e-mail address removed)

Thanks for pointing me to that KB article.

I checked those settings, they seem to be fine. The gpresult shows that

the domain controller applied the security settings:-

Last time Group Policy was applied: 11 March 2004 at 11:21:58
Group Policy was applied from: JOHNBRASH02.johnbrash.local
===============================================================
The computer received "Registry" settings from these GPOs:
Local Group Policy
Default Domain Policy
Default Domain Policy
===============================================================
The computer received "Security" settings from these GPOs:
Local Group Policy
Default Domain Policy
Default Domain Policy
Default Domain Controllers Policy
===============================================================
The computer received "EFS recovery" settings from these GPOs:
Local Group Policy
Default Domain Policy
Default Domain Policy

And the domain controllers policy, Computer Configuration\Windows

Settings\Security Settings\Local Policies\User Rights Assignment folder
contains the following:-

Administrators
Authenticated Users
Everyone

I am also a member of the administrators group, so why does it not apply

the policy on only this pc, if i try a different PC everything is applied
ok.

 

[Derek Melber [MVP]]

How did you stumble upon this? Why was it failing?

--
Derek Melber
BrainCore.Net
(e-mail address removed)

Thanks for your help again,

I've finally solved the problem! The Netlogon service was failing on the

client machine. The KB article i used to fix it was 269375.