Workstations looking for Old Policy

  • Thread starter Thread starter RussH
  • Start date Start date
R

RussH

Our Windows XP Pro workstations are looking for an old policy that was
inadvertantly erased.

I created a new GPO on the Win2k Server and applied it to the OUs.

The application log on the workstations are giving me Events 1030 and
1058.

Error 1058 says "Windows cannot access the file gpt.ini for GPO CN="
and the following Unigue ID is the old ID for the GPO that was erased.

Any Idea why the new policy is not being pushed down to the
workstations.

Any help is much appreciated.

Russ
 
Hi Russ

When you say it was erased, how did this happen? What set of steps erased
it?

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.
 
What evidence do you have that the "new" policy is not being applied.

What you presented here appears to be a GPO in AD for the workstation, and
that GPO in SYSVOL is missing.

Run GPRESULT on the client after you login to determine what policies apply
and what policies don't

--
Glenn L
CCNA, MCSE 2000, MCSE 2003 + Security


Mark Renoden said:
Hi Russ

When you say it was erased, how did this happen? What set of steps erased
it?

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

RussH said:
Our Windows XP Pro workstations are looking for an old policy that was
inadvertantly erased.

I created a new GPO on the Win2k Server and applied it to the OUs.

The application log on the workstations are giving me Events 1030 and
1058.

Error 1058 says "Windows cannot access the file gpt.ini for GPO CN="
and the following Unigue ID is the old ID for the GPO that was erased.

Any Idea why the new policy is not being pushed down to the
workstations.

Any help is much appreciated.

Russ
Click to expand...
Click to expand...
 
Mark,

Thanks for the reply.

I think an over zealous sysadmin thought he was helping. He has a
habit of pruning where he shouldn't. Unfortunately he's the boss. It
does keep things interesting though.

I suspect he deleted the directory

If I had an old backup and restored the directory for the policy would
the policy show up in Group Policy Editor?

Russ

Mark Renoden said:
Hi Russ

When you say it was erased, how did this happen? What set of steps erased
it?

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

RussH said:
Our Windows XP Pro workstations are looking for an old policy that was
inadvertantly erased.

I created a new GPO on the Win2k Server and applied it to the OUs.

The application log on the workstations are giving me Events 1030 and
1058.

Error 1058 says "Windows cannot access the file gpt.ini for GPO CN="
and the following Unigue ID is the old ID for the GPO that was erased.

Any Idea why the new policy is not being pushed down to the
workstations.

Any help is much appreciated.

Russ
Click to expand...
Click to expand...
 
I am updating the allowed to run programs entry but the programs added
aren't allowed to run.

It seems if I delete the user profile and log back in the new policy
is applied but then on subsequent reboots the old policy is still
looked for and the system errors generated.

Russ H

Glenn L said:
What evidence do you have that the "new" policy is not being applied.

What you presented here appears to be a GPO in AD for the workstation, and
that GPO in SYSVOL is missing.

Run GPRESULT on the client after you login to determine what policies apply
and what policies don't

--
Glenn L
CCNA, MCSE 2000, MCSE 2003 + Security


Mark Renoden said:
Hi Russ

When you say it was erased, how did this happen? What set of steps erased
it?

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

RussH said:
Our Windows XP Pro workstations are looking for an old policy that was
inadvertantly erased.

I created a new GPO on the Win2k Server and applied it to the OUs.

The application log on the workstations are giving me Events 1030 and
1058.

Error 1058 says "Windows cannot access the file gpt.ini for GPO CN="
and the following Unigue ID is the old ID for the GPO that was erased.

Any Idea why the new policy is not being pushed down to the
workstations.

Any help is much appreciated.

Russ
Click to expand...
Click to expand...
Click to expand...
 
Hi Russ

Probably. You might be better off getting a Windows XP client with GPMC
involved. This way you can drill down to the GPO's that the AD thinks it
knows about, find the offending policy and delete all the links that it has.

Is it possible you're looking at a replication problem as well? Do the DC's
have a consistent view of policies? You can check this with

gpotool /verbose

best piped to a text file for review later.

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

RussH said:
Mark,

Thanks for the reply.

I think an over zealous sysadmin thought he was helping. He has a
habit of pruning where he shouldn't. Unfortunately he's the boss. It
does keep things interesting though.

I suspect he deleted the directory

If I had an old backup and restored the directory for the policy would
the policy show up in Group Policy Editor?

Russ

Mark Renoden said:
Hi Russ

When you say it was erased, how did this happen? What set of steps
erased
it?

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no
rights.

RussH said:
Our Windows XP Pro workstations are looking for an old policy that was
inadvertantly erased.

I created a new GPO on the Win2k Server and applied it to the OUs.

The application log on the workstations are giving me Events 1030 and
1058.

Error 1058 says "Windows cannot access the file gpt.ini for GPO CN="
and the following Unigue ID is the old ID for the GPO that was erased.

Any Idea why the new policy is not being pushed down to the
workstations.

Any help is much appreciated.

Russ
Click to expand...
Click to expand...
Click to expand...
 
Back
Top