[gurutech]

I have Vista attached to a domain. All users login to the domain from the Vista machine.

I have verified:
On the domain that certain users have logon hour restrictions.
The domain policy is "enabled"
The domain controller policy is enabled
The local policy on the domain controller is enabled.

Yet the users do not get logged out automatically when their hours expire. The local policy on Vista is "disabled", and I cannot change it, as it says I have to make the change on the DC, but that is already enabled. I've run a "gpupdate /force" and still no changes.

Can anyone help?

[gurutech]

I'm now getting the following error when trying to force a gpupdate:

Log Name: System
Source: Microsoft-Windows-GroupPolicy
Date: 5/8/2008 7:16:22 AM
Event ID: 1058
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: familypc.domain.local
Description:
The processing of Group Policy failed. Windows attempted to read the file \\domain.local\sysvol\domain.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-GroupPolicy" Guid="{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}" />
<EventID>1058</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>1</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2008-05-08T11:16:22.293Z" />
<EventRecordID>39019</EventRecordID>
<Correlation ActivityID="{1003AD04-2934-48A7-B371-D01EA8933DCA}" />
<Execution ProcessID="1108" ThreadID="3228" />
<Channel>System</Channel>
<Computer>familypc.domain.local</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="SupportInfo1">4</Data>
<Data Name="SupportInfo2">840</Data>
<Data Name="ProcessingMode">0</Data>
<Data Name="ProcessingTimeInMilliseconds">2203</Data>
<Data Name="ErrorCode">5</Data>
<Data Name="ErrorDescription">Access is denied. </Data>
<Data Name="DCName">\\server.domain.local</Data>
<Data Name="GPOCNName">CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=snyder,DC=local</Data>
<Data Name="FilePath">\\domain.local\sysvol\domain.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini</Data>
</EventData>
</Event>

[gurutech]

Update - found that DFS is not running on the server. Can't figure out how to get it running. Any ideas?