Congratulations to AcaCandy on her 100,000th post!
There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
 
Tag Cloud
acer black screen blue screen boot bsod computer connection crash css dell drive driver drivers email error ethernet excel firefox firefox 3 freeze hard drive internet internet explorer itunes laptop linux malware monitor network networking nvidia outlook outlook 2003 outlook 2007 outlook express partition password problem router slow software sound trojan usb video virus vista windows windows xp wireless
Windows Vista
Search
Search in:
 
Advanced Search
Tech Support Guy Forums > Operating Systems > Windows Vista >
Vista policies do not update


HELLO AND WELCOME! Before you can post your question, you'll have to register -- it's completely free! Click here to join today! We highly recommend that you print a copy of our Guide for New Members. Enjoy!

Closed Thread
 
Thread Tools
gurutech's Avatar
Computer Specs
Distinguished Member with 2,249 posts.
 
Join Date: Apr 2004
Location: Central NJ
Experience: Seasoned Professional
09-May-2008, 09:03 PM #1
Vista policies do not update
I'm trying to force a Vista machine to update policies using "gpupdate /force", but the "computer" policy fails every time. The user policy is OK, and both policies update successfully on my XP machine.

I get an error "access denied" on the vista machine, saying something about DFS not being installed - but why does this only occur on my Vista machine???
__________________
If this helped you, please take the time to rate the value of this post: http://rate.affero.net/gurutech/
__________________________________________
I don't suffer from insanity - I enjoy every minute of it!
davehc's Avatar
Computer Specs
Senior Member with 764 posts.
 
Join Date: Oct 2006
Experience: Advanced
10-May-2008, 12:27 AM #2
Have you tried from the command prompt, with Admin priviliges?

1. Click Start, point to All Programs, and then click Accessories.
2. Right-click Command Prompt, and then click Run as administrator.
3. Accept the User Account Control prompt.
4. In the Command Prompt window, type gpupdate /force.
gurutech's Avatar
Computer Specs
Distinguished Member with 2,249 posts.
 
Join Date: Apr 2004
Location: Central NJ
Experience: Seasoned Professional
10-May-2008, 10:55 AM #3
Yes, and I get the following error:

Updating Policy...

User Policy update has completed successfully.
Computer policy could not be updated successfully. The following errors were enc
ountered:

The processing of Group Policy failed. Windows attempted to read the file \\domain.local\sysvol\domain.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt
.ini from a domain controller and was not successful. Group Policy settings may
not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller
has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.

To diagnose the failure, review the event log or invoke gpmc.msc to access infor
mation about Group Policy results.
__________________
If this helped you, please take the time to rate the value of this post: http://rate.affero.net/gurutech/
__________________________________________
I don't suffer from insanity - I enjoy every minute of it!
DaveA's Avatar
Distinguished Member with 2,758 posts.
 
Join Date: Nov 1999
Experience: Advanced
10-May-2008, 11:06 PM #4
What version of Vista are you running?
Your listing says Vista RC2
TechB's Avatar
Senior Member with 417 posts.
 
Join Date: Jul 2006
Location: Squamish, BC, Canada
Experience: Advanced
11-May-2008, 10:54 AM #5
Quote:
Originally Posted by gurutech View Post
To diagnose the failure, review the event log or invoke gpmc.msc to access infor
mation about Group Policy results.
Are there any related errors in the event logs on the Vista computer or the domain controller? It sounds like a permissions issue on that group policy file.
gurutech's Avatar
Computer Specs
Distinguished Member with 2,249 posts.
 
Join Date: Apr 2004
Location: Central NJ
Experience: Seasoned Professional
12-May-2008, 10:42 AM #6
Running Vista SP1 (Ultimate) - need to update my profile...

No error messagse in event log, other than what I've posted already. I don't think it's a permissions issue because my XP machines can update the policies just fine.
TechB's Avatar
Senior Member with 417 posts.
 
Join Date: Jul 2006
Location: Squamish, BC, Canada
Experience: Advanced
13-May-2008, 10:20 AM #7
Vista is much more particular about DNS name resolution in a domain than XP. Can you post ipconfig /all from the Vista client and from the dc it authenticates with?
DkPVS's Avatar
Junior Member with 5 posts.
 
Join Date: May 2008
Experience: Advanced
15-May-2008, 11:42 AM #8
I too am having the same issue. It happens on all 4 Vista machines on the domain as well as the Server 2008 we are currently testing. Our DCs are Server 2000 and the domain functional level is 2000 native. I am running Vista Business SP1 on my box. I deleted the suspect policy and ran GPUpdate again to see if the policy was at fault. The same error occured on the next policy in line. The user policy will process-it is only the computer policy that fails.
gurutech's Avatar
Computer Specs
Distinguished Member with 2,249 posts.
 
Join Date: Apr 2004
Location: Central NJ
Experience: Seasoned Professional
15-May-2008, 04:30 PM #9
Is your server 2008 set up as a DC, or just stand-alone?

I'm running 2003 and have this problem - I can see having the problem on Win2K, as its policies may be "too old" for Vista.

Not sure though. Maybe Vista has a bug...
DkPVS's Avatar
Junior Member with 5 posts.
 
Join Date: May 2008
Experience: Advanced
15-May-2008, 05:17 PM #10
Gurutech,

Our Server 2008 is only an evaluation copy with no server roles enabled. The DCs are both W2K, which we will be upgrading to 2008 in a few months. The error occurs on the Server 2008 system (just like Vista) when GPUpdate is initiated. It must have something to do with the security on Vista and Server 2008.

I am running Group Policy from my Vista PC with the GPMC snap-in to take advantage of the new features-(IE: Group Policy Preferences). I am currently mapping a few drives and printers using this feature and it works beautifully...on XP clients...

I have been dealing with this for several weeks now. It all started when we began using WSUS 3.0 for updates. I had to remove/rejoin the domain before my Vista box would process the policy to use WSUS for updates. To get the Server 2008 and the other Vista clients to use WSUS, I manually edited the registry on each machine.
gurutech's Avatar
Computer Specs
Distinguished Member with 2,249 posts.
 
Join Date: Apr 2004
Location: Central NJ
Experience: Seasoned Professional
17-May-2008, 02:11 PM #11
What keys did you edit in the registry?
DkPVS's Avatar
Junior Member with 5 posts.
 
Join Date: May 2008
Experience: Advanced
19-May-2008, 09:51 AM #12
I made the following registry changes:

HKEY_LOCAL_MACHINE\SOFTWARE\
Policies\Microsoft\Windows\WindowsUpdate...

I had to add the "WindowsUpdate" key then add two string values to it:
"WUServer" with a value of http://Servername
"WUStatusServer" with a value of http://Servername

Then I added another key under the WindowsUpdate key named "AU".
To AU I added DWORD "UseWUServer" with a value of "1".

After adding the values to the registry and rebooting, the machines were then displayed in the WSUS console within 30 minutes.

You posted the exact same error when running GPUpdate that I am receiving:
The processing of Group Policy failed. Windows attempted to read the file \\domain.local\sysvol\domain.local\Policies\{XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX}\gpt
.ini from a domain controller and was not successful. Group Policy settings may
not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller
has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.

I have checked and double checked a), b) and c) possible causes listed and can't find anything. I am getting Group Policy Event ID 7004 and 7017 errors in the event logs with an error code of 5 which is access denied. I found a Microsoft Support page which listed the sysvol permissions all the way down to the gpt.ini file in question and followed the suggested settings exactly. Same result. I am also running GPUpdate with full administrative rights.

I am thinking about running a Vista Virtual PC against a Server 2008 Virtual DC to see if I still have the same issues. I'm not sure if that will prove anything if successful though as there could be some setting in the domain causing the problem that wouldn't be reproduced virtually.
DkPVS's Avatar
Junior Member with 5 posts.
 
Join Date: May 2008
Experience: Advanced
03-Jun-2008, 09:27 AM #13
I have tested the issue in a virtual environment in two seperate domains against a Server 2008 DC as well as a Server 2000 DC. I have not been able to recreate the error and GPUdate is running perfectly on the Vista virtual machine. Anyone have any ideas?????
DkPVS's Avatar
Junior Member with 5 posts.
 
Join Date: May 2008
Experience: Advanced
06-Jun-2008, 03:43 PM #14
Solved!!!!!!!!!

The issue is in the MUP cache. Open a command prompt and type "dfsutil /spcflush" (without quotes) and shazam...No more errors!!!!
gurutech's Avatar
Computer Specs
Distinguished Member with 2,249 posts.
 
Join Date: Apr 2004
Location: Central NJ
Experience: Seasoned Professional
07-Jun-2008, 12:37 AM #15
Not working for me. I keep getting "RPC Server is unavailable" errors, but I have checked and that service is running just fine on the server.

Anyone know how to fix this error?
Closed Thread

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who help people like you solve computer problems. See our Welcome Guide to get started.



Thread Tools


You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 07:58 PM.
Copyright © 1996 - 2008 TechGuy, Inc. All rights reserved.
Powered by vBulletin, Copyright © 2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.1.0
Powered by Cermak Technologies, Inc.