Home All Groups Group Topic Archive Search About
Author
6 Mar 2006 9:21 AM
ciofegates
I have a Windows 2003 server and some XP clients. Server network
adapter is HP NC7760 Gigabit Server Adapter.
When the users access the server by TS, my GPO applies, but when the
users access the server via "standard" log on from their XP machines,
the GPO does *not* apply.
Most times, in the client event viewer there is *NO* event. Rarely, I
have found event ID 1054.
I have tried to search in the microsoft newgroups but till now I have
not found the right solution to my problem.
Now I have the doubt that there is something wrong in the DNS.
Maybe it can be useful the following logs:

C:\WINDOWS\MPSReports\DirSvc\Bin>dcdiag /v

Domain Controller Diagnosis

Performing initial setup:
   * Verifying that the local machine HPSERVER, is a DC.
   * Connecting to directory service on server HPSERVER.
   * Collecting site info.
   * Identifying all servers.
   * Found 1 DC(s). Testing 1 of them.
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site\HPSERVER
      Starting test: Connectivity
         * Active Directory LDAP Services Check
         c83a40ff-fe47-4bcd-8d9f-28b36da9494a._msdcs.omissis.local's
server GU
ID DNS name could not be resolved to an
         IP address.  Check the DNS server, DHCP, server name, etc
         Although the Guid DNS name
         (c83a40ff-fe47-4bcd-8d9f-28b36da9494a._msdcs.omissis.local)
couldn't
         be resolved, the server name (HPSERVER.omissis.local) resolved
to
         the IP address (10.2.1.2) and was pingable.  Check that the IP
address
         is registered correctly with the DNS server.
         ......................... HPSERVER failed test Connectivity

Doing primary tests

   Testing server: Default-First-Site\HPSERVER
      Skipping all tests, because server HPSERVER is
      not responding to directory service requests
      Test omitted by user request: Topology
      Test omitted by user request: CutoffServers
      Test omitted by user request: OutboundSecureChannels

   Running enterprise tests on : omissis.local
      Starting test: Intersite
         Skipping site Default-First-Site, this site is outside the
scope
         provided by the command line arguments provided.
         ......................... omissis.local passed test Intersite
      Starting test: FsmoCheck
         GC Name: \\HPSERVER.omissis.local
         Locator Flags: 0xe00003fd
         PDC Name: \\HPSERVER.omissis.local
         Locator Flags: 0xe00003fd
         Time Server Name: \\HPSERVER.omissis.local
         Locator Flags: 0xe00003fd
         Preferred Time Server Name: \\HPSERVER.omissis.local
         Locator Flags: 0xe00003fd
         KDC Name: \\HPSERVER.omissis.local
         Locator Flags: 0xe00003fd
         ......................... omissis.local passed test FsmoCheck

C:\WINDOWS\MPSReports\DirSvc\Bin>netdiag /v
It appears a window that says: "Impossible to find the entry root
DnsIsDynamicRegistrationEnabled of procedure in dynamic link library
DNSAPI.dll" (forgive my bad translation)

Can someone help me? Have I made something wrong or incomplete? Is
there any step-by-step procedure to be guided? Many thanks.

Author
6 Mar 2006 1:51 PM
Paul Bergson
My guess is the XP machines reside in one OU and the TS resides in a
different OU, the OU the XP machine's resides in has the gpo you want
applied.  Check both OU's and find out where the gpo resides and then
determine if it is a workstation or user gpo.

--

Paul Bergson  MCT, MCSE, MCSA, CNE, CNA, CCA
http://www.pbbergs.com

This posting is provided "AS IS" with no warranties, and confers no rights.

<ciofega***@mailinater.com> wrote in message
Show quoteHide quote
news:1141636893.771775.58960@j33g2000cwa.googlegroups.com...
>I have a Windows 2003 server and some XP clients. Server network
> adapter is HP NC7760 Gigabit Server Adapter.
> When the users access the server by TS, my GPO applies, but when the
> users access the server via "standard" log on from their XP machines,
> the GPO does *not* apply.
> Most times, in the client event viewer there is *NO* event. Rarely, I
> have found event ID 1054.
> I have tried to search in the microsoft newgroups but till now I have
> not found the right solution to my problem.
> Now I have the doubt that there is something wrong in the DNS.
> Maybe it can be useful the following logs:
>
> C:\WINDOWS\MPSReports\DirSvc\Bin>dcdiag /v
>
> Domain Controller Diagnosis
>
> Performing initial setup:
>   * Verifying that the local machine HPSERVER, is a DC.
>   * Connecting to directory service on server HPSERVER.
>   * Collecting site info.
>   * Identifying all servers.
>   * Found 1 DC(s). Testing 1 of them.
>   Done gathering initial info.
>
> Doing initial required tests
>
>   Testing server: Default-First-Site\HPSERVER
>      Starting test: Connectivity
>         * Active Directory LDAP Services Check
>         c83a40ff-fe47-4bcd-8d9f-28b36da9494a._msdcs.omissis.local's
> server GU
> ID DNS name could not be resolved to an
>         IP address.  Check the DNS server, DHCP, server name, etc
>         Although the Guid DNS name
>         (c83a40ff-fe47-4bcd-8d9f-28b36da9494a._msdcs.omissis.local)
> couldn't
>         be resolved, the server name (HPSERVER.omissis.local) resolved
> to
>         the IP address (10.2.1.2) and was pingable.  Check that the IP
> address
>         is registered correctly with the DNS server.
>         ......................... HPSERVER failed test Connectivity
>
> Doing primary tests
>
>   Testing server: Default-First-Site\HPSERVER
>      Skipping all tests, because server HPSERVER is
>      not responding to directory service requests
>      Test omitted by user request: Topology
>      Test omitted by user request: CutoffServers
>      Test omitted by user request: OutboundSecureChannels
>
>   Running enterprise tests on : omissis.local
>      Starting test: Intersite
>         Skipping site Default-First-Site, this site is outside the
> scope
>         provided by the command line arguments provided.
>         ......................... omissis.local passed test Intersite
>      Starting test: FsmoCheck
>         GC Name: \\HPSERVER.omissis.local
>         Locator Flags: 0xe00003fd
>         PDC Name: \\HPSERVER.omissis.local
>         Locator Flags: 0xe00003fd
>         Time Server Name: \\HPSERVER.omissis.local
>         Locator Flags: 0xe00003fd
>         Preferred Time Server Name: \\HPSERVER.omissis.local
>         Locator Flags: 0xe00003fd
>         KDC Name: \\HPSERVER.omissis.local
>         Locator Flags: 0xe00003fd
>         ......................... omissis.local passed test FsmoCheck
>
> C:\WINDOWS\MPSReports\DirSvc\Bin>netdiag /v
> It appears a window that says: "Impossible to find the entry root
> DnsIsDynamicRegistrationEnabled of procedure in dynamic link library
> DNSAPI.dll" (forgive my bad translation)
>
> Can someone help me? Have I made something wrong or incomplete? Is
> there any step-by-step procedure to be guided? Many thanks.
>
Author
6 Mar 2006 2:59 PM
ciofegates
> My guess is the XP machines reside in one OU and the TS resides in a
> different OU, the OU the XP machine's resides in has the gpo you want
> applied.  Check both OU's and find out where the gpo resides and then
> determine if it is a workstation or user gpo.

What do you mean with "TS resides in a different OU"?

My GPO is linked to a OU which contains the users and computers it has
to be applied.
It seems all right to me...
Author
6 Mar 2006 6:11 PM
Paul Bergson
TS = the Terminal Server

--

Paul Bergson  MCT, MCSE, MCSA, CNE, CNA, CCA
http://www.pbbergs.com

This posting is provided "AS IS" with no warranties, and confers no rights.

<ciofega***@mailinater.com> wrote in message
Show quoteHide quote
news:1141657172.878221.186480@i40g2000cwc.googlegroups.com...
>> My guess is the XP machines reside in one OU and the TS resides in a
>> different OU, the OU the XP machine's resides in has the gpo you want
>> applied.  Check both OU's and find out where the gpo resides and then
>> determine if it is a workstation or user gpo.
>
> What do you mean with "TS resides in a different OU"?
>
> My GPO is linked to a OU which contains the users and computers it has
> to be applied.
> It seems all right to me...
>
Author
6 Mar 2006 9:10 PM
ciofegates
> TS = the Terminal Server

Of course, but what does it mean "Terminal Server resides in a
different OU"?
Or, in other words, what have I to do to make the TS resides in the
same OU of my XP clients?
Author
6 Mar 2006 9:11 PM
ciofegates
> TS = the Terminal Server

Of course, but what does it mean "Terminal Server resides in a
different OU"?
Or, in other words, what have I to do to make the TS resides in the
same OU of my XP clients? Note that in my situation TS=DC.