User Policy doesn't apply

[Guest]

This is part from my userenv.log after login a user.
Policy doesn't apply. Computer policy is disabled. Basically at the end it
says that OU cannot be accessed? If I switch user to be a part of
Administrators Group everything is fine now and user can access it's own OU.

Anobody had similar problem?

USERENV(1cc.c94) 12:33:23:255 ApplyGroupPolicy: Entering. Flags = 6
USERENV(1cc.c94) 12:33:23:255 ProcessGPOs:
USERENV(1cc.c94) 12:33:23:255 ProcessGPOs:
USERENV(1cc.c94) 12:33:23:255 ProcessGPOs: Starting user Group Policy
(Background) processing...
USERENV(1cc.c94) 12:33:23:255 ProcessGPOs:
USERENV(1cc.c94) 12:33:23:255 ProcessGPOs:
USERENV(1cc.c94) 12:33:23:255 EnterCriticalPolicySectionEx: Entering with
timeout 600000 and flags 0x0
USERENV(1cc.c94) 12:33:23:255 EnterCriticalPolicySectionEx: User critical
section has been claimed. Handle = 0xdfc
USERENV(1cc.c94) 12:33:23:255 EnterCriticalPolicySectionEx: Leaving
successfully.
USERENV(1cc.c94) 12:33:23:255 ProcessGPOs: Machine role is 2.
USERENV(1cc.c94) 12:33:23:255 PingComputer: Adapter speed 100000000 bps
USERENV(1cc.c94) 12:33:23:255 PingComputer: First time: 0
USERENV(1cc.c94) 12:33:23:255 PingComputer: Fast link. Exiting.
USERENV(1cc.c94) 12:33:23:270 ProcessGPOs: User name is: CN=Test
User,OU=TEMP,DC=testdomain,DC=com, Domain name is: TESTDOMAIN
USERENV(1cc.c94) 12:33:23:270 ProcessGPOs: Domain controller is:
\\dc1.testdomain.com Domain DN is testdomain.com
USERENV(1cc.c94) 12:33:23:270 ReadGPExtensions: Rsop entry point not found
for gptext.dll.
USERENV(1cc.c94) 12:33:23:270 ReadGPExtensions: Rsop entry point not found
for dskquota.dll.
USERENV(1cc.c94) 12:33:23:270 ReadGPExtensions: Rsop entry point not found
for gptext.dll.
USERENV(1cc.c94) 12:33:23:270 ReadGPExtensions: Rsop entry point not found
for iedkcs32.dll.
USERENV(1cc.c94) 12:33:23:270 ReadGPExtensions: Rsop entry point not found
for scecli.dll.
USERENV(1cc.c94) 12:33:23:270 ReadGPExtensions: Rsop entry point not found
for gptext.dll.
USERENV(1cc.c94) 12:33:23:286 ReadExtStatus: Reading Previous Status for
extension {35378EAC-683F-11D2-A89A-00C04FBBCFA2}
USERENV(1cc.c94) 12:33:23:286 ReadExtStatus: Reading Previous Status for
extension {0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}
USERENV(1cc.c94) 12:33:23:286 ReadExtStatus: Reading Previous Status for
extension {25537BA6-77A8-11D2-9B6C-0000F8080861}
USERENV(1cc.c94) 12:33:23:286 ReadExtStatus: Reading Previous Status for
extension {3610eda5-77ef-11d2-8dc5-00c04fa31a66}
USERENV(1cc.c94) 12:33:23:286 ReadExtStatus: Reading Previous Status for
extension {426031c0-0b47-4852-b0ca-ac3d37bfcb39}
USERENV(1cc.c94) 12:33:23:286 ReadExtStatus: Reading Previous Status for
extension {42B5FAAE-6536-11d2-AE5A-0000F87571E3}
USERENV(1cc.c94) 12:33:23:286 ReadExtStatus: Reading Previous Status for
extension {4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}
USERENV(1cc.c94) 12:33:23:286 ReadExtStatus: Reading Previous Status for
extension {827D319E-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(1cc.c94) 12:33:23:286 ReadExtStatus: Reading Previous Status for
extension {A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}
USERENV(1cc.c94) 12:33:23:286 ReadExtStatus: Reading Previous Status for
extension {B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(1cc.c94) 12:33:23:286 ReadExtStatus: Reading Previous Status for
extension {c6dc5466-785a-11d2-84d0-00c04fb169f7}
USERENV(1cc.c94) 12:33:23:286 ReadExtStatus: Reading Previous Status for
extension {e437bc1c-aa7d-11d2-a382-00c04f991e27}
USERENV(1cc.c94) 12:33:23:395 ProcessGPOs: Calling GetGPOInfo for normal
policy mode
USERENV(1cc.c94) 12:33:23:395 GetGPOInfo: ********************************
USERENV(1cc.c94) 12:33:23:395 GetGPOInfo: Entering...
USERENV(1cc.c94) 12:33:23:395 GetGPOInfo: Server connection established.
USERENV(1cc.c94) 12:33:23:395 GetGPOInfo: Bound successfully.
USERENV(1cc.c94) 12:33:23:411 EvaluateDeferredOUs: Object
<OU=TEMP,DC=testdomain,DC=com> cannot be accessed
USERENV(1cc.c94) 12:33:23:411 GetGPOInfo: EvaluateDeferredOUs failed. Exiting
USERENV(1cc.c94) 12:33:23:411 GetGPOInfo: Leaving with 0
USERENV(1cc.c94) 12:33:23:411 GetGPOInfo: ********************************
USERENV(1cc.c94) 12:33:23:411 ProcessGPOs: GetGPOInfo failed.
USERENV(1cc.c94) 12:33:23:411 ProcessGPOs: No WMI logging done in this
policy cycle.
USERENV(1cc.c94) 12:33:23:411 ProcessGPOs: Processing failed with error 13.

 

[Tim Springston [MSFT]]

Hi Aurelio-

This portion failing means that there is either an issue with LDAP name
resolution to that object, or permissions on that object are not set for the
user context to be able to access it (Read Allow and Apply Group Policy
Allow). These permissions would normally need to be set explicitly (not
there by default).

Please repost if this does not help.

--

Tim Springston
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.