Group Policy Troubleshooting Tools?

Discussion in 'Windows Server Systems' started by Punkrulz, Dec 29, 2006.

  1. Punkrulz

    Punkrulz Somewhat eXPerienced

    Messages:
    790
    Location:
    Woodbury, NJ
    Wow, group policy is becomming weird on some machines! I am working on a domain that has all Windows XP Service Pack 2 machines. I am aware of what OU's that these machines are in, and what group policies that are being applied to them... or should be applied!

    We are running into a situation where some of the machines are still displaying an old legal notice text, that should be over-written by another GPO. Even if you do a gpupdate /force, it still doesn't make the correct group policy changes as it should. It just seems that on some machines the GPO's that it should be getting don't apply, and we'll have to go through and make manual changes to them.

    What utilities can I use to determine what policies are actually being used (I know about gpresult) on each machine, and how to determine why some policies aren't being applied???
     
  2. kcnychief

    kcnychief █▄█ ▀█▄ █ Political User Folding Team

    Messages:
    16,948
    Location:
    Massachusetts
    Well GPRESULT will display which GPO's are being applied. If you want to check on some actual settings you can try to go within gpedit.msc on the local machine. However, I think there is a bigger problem and the end result shouldn't be having to modify policies locally.

    Alternatively, sometimes removing/readding a machine to a domain can fix issues like you are describing.
     
  3. Mooz

    Mooz Moozically Con~foozed

    Messages:
    126
    Location:
    UK
    i am guessing you have already tried the group policy modelling tool in gpedit on the dc's?

    there was also a group policy tool shipped by microsoft addon for AD?

    D
     
  4. Punkrulz

    Punkrulz Somewhat eXPerienced

    Messages:
    790
    Location:
    Woodbury, NJ
    kcnychief,

    Using GPResult on one of the primary machines that does this, reveals that it is in fact getting all of the group policies as it should. I attempted to remove it from the domain, and rejoin it. However, it yielded the same results. Now I know that some are being applied, we recently released a GPO that does an administrative install of Adobe 8... however two policies:

    1 policy that changes the legal notice text... doesn't change it. It's still stuck with the old one. The 2nd policy manually sets the Automatic Update Time, as well as the host that it updates from, being that we use a SUS Server here... that information was never set in the local gpo.

    After rejoining it to the domain, I also did a gpupdate /force to see if that would help... however it didn't.
     
  5. Punkrulz

    Punkrulz Somewhat eXPerienced

    Messages:
    790
    Location:
    Woodbury, NJ
    Update:

    Per using rdop.msc, for some reason there is a red x overtop of the Computer Policy. Looking at the Application Log, there appears to be a userenv error for 1054. Upon reviewing the error with event ID, I had enabled userenv logging, and at least manage to get the following... but I don't know what it means!

    Any ideas???

    USERENV(420.424) 10:08:22:234 LibMain: Process Name: C:\WINDOWS\System32\WScript.exe
    USERENV(43c.440) 10:08:22:515 LibMain: Process Name: C:\WINDOWS\System32\wbem\wmiprvse.exe
    USERENV(7b0.600) 10:09:05:040 LibMain: Process Name: C:\WINDOWS\system32\wuauclt.exe
    USERENV(154.158) 10:09:21:443 LibMain: Process Name: C:\WINDOWS\system32\userinit.exe
    USERENV(2bc.1ac) 10:10:00:904 SetFgRefreshInfo: Next User Fg policy Synchronous, Reason: NonCachedCredentials.
    USERENV(2bc.2c0) 10:10:01:388 LoadUserProfile: Yes, we can impersonate the user. Running as self
    USERENV(2bc.2c0) 10:10:01:388 =========================================================
    USERENV(2bc.2c0) 10:10:01:388 LoadUserProfile: Entering, hToken = <0x6e4>, lpProfileInfo = 0x6e3e0
    USERENV(2bc.2c0) 10:10:01:388 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
    USERENV(2bc.2c0) 10:10:01:388 LoadUserProfile: lpProfileInfo->lpUserName = <5000>
    USERENV(2bc.2c0) 10:10:01:388 LoadUserProfile: NULL central profile path
    USERENV(2bc.2c0) 10:10:01:388 LoadUserProfile: lpProfileInfo->lpDefaultPath = <\\DTPD_W3K3\netlogon\Default User>
    USERENV(2bc.2c0) 10:10:01:388 LoadUserProfile: NULL server name
    USERENV(2bc.2c0) 10:10:01:388 LoadUserProfile: In console winlogon process
    USERENV(2bc.2c0) 10:10:01:388 In LoadUserProfileP
    USERENV(2bc.2c0) 10:10:01:388 =========================================================
    USERENV(2bc.2c0) 10:10:01:388 LoadUserProfile: Entering, hToken = <0x6e4>, lpProfileInfo = 0x6e3e0
    USERENV(2bc.2c0) 10:10:01:388 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
    USERENV(2bc.2c0) 10:10:01:388 LoadUserProfile: lpProfileInfo->lpUserName = <5000>
    USERENV(2bc.2c0) 10:10:01:388 LoadUserProfile: NULL central profile path
    USERENV(2bc.2c0) 10:10:01:403 LoadUserProfile: lpProfileInfo->lpDefaultPath = <\\DTPD_W3K3\netlogon\Default User>
    USERENV(2bc.2c0) 10:10:01:403 LoadUserProfile: NULL server name
    USERENV(2bc.2c0) 10:10:01:403 LoadUserProfile: User sid: S-1-5-21-823518204-842925246-682003330-1797
    USERENV(2bc.2c0) 10:10:01:403 CSyncManager::EnterLock <S-1-5-21-823518204-842925246-682003330-1797>
    USERENV(2bc.2c0) 10:10:01:403 CSyncManager::EnterLock: No existing entry found
    USERENV(2bc.2c0) 10:10:01:403 CSyncManager::EnterLock: New entry created
    USERENV(2bc.2c0) 10:10:01:403 CHashTable::HashAdd: S-1-5-21-823518204-842925246-682003330-1797 added in bucket 3
    USERENV(2bc.2c0) 10:10:01:403 LoadUserProfile: Wait succeeded. In critical section.
    USERENV(2bc.2c0) 10:10:01:403 RestoreUserProfile: Entering
    USERENV(2bc.2c0) 10:10:01:403 RestoreUserProfile: User is a Admin
    USERENV(2bc.2c0) 10:10:01:403 IsCentralProfileReachable: Entering
    USERENV(2bc.2c0) 10:10:01:403 IsCentralProfileReachable: Null path. Leaving
    USERENV(2bc.2c0) 10:10:01:403 RestoreUserProfile: Profile path = <>
    USERENV(2bc.2c0) 10:10:01:403 ExtractProfileFromBackup: A profile already exists
    USERENV(2bc.2c0) 10:10:01:403 PatchNewProfileIfRequred: A profile already exists with the current sid, exitting
    USERENV(2bc.2c0) 10:10:01:403 CreateLocalProfileKey: Not setting additional Security
    USERENV(2bc.2c0) 10:10:01:403 GetExistingLocalProfileImage: Found entry in profile list for existing local profile
    USERENV(2bc.2c0) 10:10:01:403 GetExistingLocalProfileImage: Local profile image filename = <%SystemDrive%\Documents and Settings\5000>
    USERENV(2bc.2c0) 10:10:01:403 GetExistingLocalProfileImage: Expanded local profile image filename = <C:\Documents and Settings\5000>
    USERENV(2bc.2c0) 10:10:01:435 GetExistingLocalProfileImage: No local mandatory profile. Error = 2
    USERENV(2bc.2c0) 10:10:01:466 GetExistingLocalProfileImage: Found local profile image file ok <C:\Documents and Settings\5000\ntuser.dat>
    USERENV(2bc.2c0) 10:10:01:466 GetExistingLocalProfileImage: Failed to query low profile unload time with error 2
    USERENV(2bc.2c0) 10:10:01:466 Local Existing Profile Image is reachable
    USERENV(2bc.2c0) 10:10:01:466 Local profile name is <C:\Documents and Settings\5000>
    USERENV(2bc.2c0) 10:10:01:466 RestoreUserProfile: No central profile. Attempting to load local profile.
    USERENV(2bc.2c0) 10:10:01:528 MyRegLoadKey: Returning 00000000
    USERENV(2bc.2c0) 10:10:01:700 MyRegLoadKey: Returning 00000000
    USERENV(2bc.2c0) 10:10:01:700 CreateClassHive: existing user classes hive found
    USERENV(2bc.2c0) 10:10:01:700 RestoreUserProfile: About to Leave. Final Information follows:
    USERENV(2bc.2c0) 10:10:01:700 Profile was successfully loaded.
    USERENV(2bc.2c0) 10:10:01:700 lpProfile->lpRoamingProfile = <>
    USERENV(2bc.2c0) 10:10:01:700 lpProfile->lpLocalProfile = <C:\Documents and Settings\5000>
    USERENV(2bc.2c0) 10:10:01:700 lpProfile->dwInternalFlags = 0x100
    USERENV(2bc.2c0) 10:10:01:700 RestoreUserProfile: Leaving.
    USERENV(2bc.2c0) 10:10:01:716 UpgradeProfile: Entering
    USERENV(2bc.2c0) 10:10:01:716 UpgradeProfile: Build numbers match
    USERENV(2bc.2c0) 10:10:01:716 UpgradeProfile: Leaving Successfully
    USERENV(2bc.2c0) 10:10:01:716 GetProfileType: Profile already loaded.
    USERENV(2bc.2c0) 10:10:01:716 LoadProfileInfo: Failed to query central profile with error 2
    USERENV(2bc.2c0) 10:10:01:716 GetProfileType: ProfileFlags is 0
    USERENV(2bc.2c0) 10:10:01:778 Profile Ref Count is 1
    USERENV(2bc.2c0) 10:10:01:778 LoadUserProfile: Leaving critical Section.
    USERENV(2bc.2c0) 10:10:01:778 CSyncManager::LeaveLock <S-1-5-21-823518204-842925246-682003330-1797>
    USERENV(2bc.2c0) 10:10:01:778 CSyncManager::LeaveLock: Lock released
    USERENV(2bc.2c0) 10:10:01:778 CHashTable::HashDelete: S-1-5-21-823518204-842925246-682003330-1797 deleted
    USERENV(2bc.2c0) 10:10:01:778 CSyncManager::LeaveLock: Lock deleted
    USERENV(2bc.2c0) 10:10:01:778 LoadUserProfile: Impersonated user: 000006e4, 00000000
    USERENV(2bc.2c0) 10:10:01:872 LoadUserProfile: Reverted to user: 00000000
    USERENV(2bc.2c0) 10:10:01:872 LoadUserProfile: Leaving with a value of 1.
    USERENV(2bc.2c0) 10:10:01:872 =========================================================
    USERENV(2bc.2c0) 10:10:01:872 LoadUserProfile: LoadUserProfileP succeeded
    USERENV(2bc.2c0) 10:10:01:872 LoadUserProfile: Returning success. Final Information follows:
    USERENV(2bc.2c0) 10:10:01:872 lpProfileInfo->UserName = <5000>
    USERENV(2bc.2c0) 10:10:01:872 lpProfileInfo->lpProfilePath = <>
    USERENV(2bc.2c0) 10:10:01:872 lpProfileInfo->dwFlags = 0x0
    USERENV(2bc.2c0) 10:10:01:872 LoadUserProfile: Returning TRUE. hProfile = <0x78c>
    USERENV(2bc.2c0) 10:10:02:122 IsSyncForegroundPolicyRefresh: Synchronous, Reason: NonCachedCredentials
    USERENV(2bc.218) 10:10:02:122 IsSyncForegroundPolicyRefresh: Synchronous, Reason: NonCachedCredentials
    USERENV(2bc.218) 10:10:02:122 ApplyGroupPolicy: Entering. Flags = 6
    USERENV(2bc.218) 10:10:02:122 ProcessGPOs:
    USERENV(2bc.218) 10:10:02:122 ProcessGPOs:
    USERENV(2bc.218) 10:10:02:122 ProcessGPOs: Starting user Group Policy (Background) processing...
    USERENV(2bc.218) 10:10:02:122 ProcessGPOs:
    USERENV(2bc.218) 10:10:02:122 ProcessGPOs:
    USERENV(2bc.218) 10:10:02:122 EnterCriticalPolicySectionEx: Entering with timeout 600000 and flags 0x0
    USERENV(2bc.218) 10:10:02:122 EnterCriticalPolicySectionEx: User critical section has been claimed. Handle = 0x7b0
    USERENV(2bc.218) 10:10:02:122 EnterCriticalPolicySectionEx: Leaving successfully.
    USERENV(2bc.218) 10:10:02:122 ProcessGPOs: Machine role is 2.
    USERENV(2bc.218) 10:10:02:122 PingComputer: Adapter speed 100000000 bps
    USERENV(2bc.218) 10:10:02:122 PingComputer: First time: 0
    USERENV(2bc.218) 10:10:02:122 PingComputer: Fast link. Exiting.
    USERENV(2bc.218) 10:10:02:153 ProcessGPOs: User name is: CN=Test Officer,OU=Test OU,DC=DTPD1,DC=com, Domain name is: DTPD1
    USERENV(2bc.218) 10:10:02:153 ProcessGPOs: Domain controller is: \\DTPD_W3K3.DTPD1.COM Domain DN is DTPD1.COM
    USERENV(2bc.218) 10:10:02:153 ReadGPExtensions: Rsop entry point not found for gptext.dll.
    USERENV(2bc.218) 10:10:02:153 ReadGPExtensions: Rsop entry point not found for dskquota.dll.
    USERENV(2bc.218) 10:10:02:153 ReadGPExtensions: Rsop entry point not found for gptext.dll.
    USERENV(2bc.218) 10:10:02:153 ReadGPExtensions: Rsop entry point not found for iedkcs32.dll.
    USERENV(2bc.218) 10:10:02:153 ReadGPExtensions: Rsop entry point not found for scecli.dll.
    USERENV(2bc.218) 10:10:02:153 ReadGPExtensions: Rsop entry point not found for gptext.dll.
    USERENV(2bc.218) 10:10:02:153 ReadExtStatus: Reading Previous Status for extension {35378EAC-683F-11D2-A89A-00C04FBBCFA2}
    USERENV(2bc.218) 10:10:02:153 ReadStatus: Read Extension's Previous status successfully.
    USERENV(2bc.218) 10:10:02:153 ReadExtStatus: Reading Previous Status for extension {0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}
    USERENV(2bc.218) 10:10:02:153 ReadExtStatus: Reading Previous Status for extension {25537BA6-77A8-11D2-9B6C-0000F8080861}
    USERENV(2bc.218) 10:10:02:153 ReadExtStatus: Reading Previous Status for extension {3610eda5-77ef-11d2-8dc5-00c04fa31a66}
    USERENV(2bc.218) 10:10:02:153 ReadExtStatus: Reading Previous Status for extension {426031c0-0b47-4852-b0ca-ac3d37bfcb39}
    USERENV(2bc.218) 10:10:02:153 ReadExtStatus: Reading Previous Status for extension {42B5FAAE-6536-11d2-AE5A-0000F87571E3}
    USERENV(2bc.218) 10:10:02:153 ReadStatus: Read Extension's Previous status successfully.
    USERENV(2bc.218) 10:10:02:153 ReadExtStatus: Reading Previous Status for extension {4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}
    USERENV(2bc.218) 10:10:02:153 ReadExtStatus: Reading Previous Status for extension {827D319E-6EAC-11D2-A4EA-00C04F79F83A}
    USERENV(2bc.218) 10:10:02:153 ReadExtStatus: Reading Previous Status for extension {A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}
    USERENV(2bc.218) 10:10:02:153 ReadExtStatus: Reading Previous Status for extension {B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}
    USERENV(2bc.218) 10:10:02:153 ReadExtStatus: Reading Previous Status for extension {c6dc5466-785a-11d2-84d0-00c04fb169f7}
    USERENV(2bc.218) 10:10:02:153 ReadExtStatus: Reading Previous Status for extension {e437bc1c-aa7d-11d2-a382-00c04f991e27}
    USERENV(2bc.218) 10:10:02:153 ProcessGPOs: Calling GetGPOInfo for normal policy mode
    USERENV(2bc.218) 10:10:02:153 GetGPOInfo: ********************************
    USERENV(2bc.218) 10:10:02:153 GetGPOInfo: Entering...
    USERENV(2bc.218) 10:10:02:153 GetGPOInfo: Server connection established.
    USERENV(2bc.218) 10:10:02:169 GetGPOInfo: Bound successfully.
    USERENV(2bc.218) 10:10:02:185 SearchDSObject: Searching <OU=Test OU,DC=DTPD1,DC=com>
    USERENV(2bc.218) 10:10:02:185 SearchDSObject: Found GPO(s): <[LDAP://cn={AA47296F-4671-4E9C-A861-D92F2E75B1C7},cn=policies,cn=system,DC=DTPD1,DC=COM;0][LDAP://cn={9C8B4191-4C63-4472-AD66-6FC64168EFDE},cn=policies,cn=system,DC=DTPD1,DC=COM;0][LDAP://cn={9A596C35-B58E-41B1-A702-E5D1B75180A5},cn=policies,cn=system,DC=DTPD1,DC=COM;0][LDAP://cn={D150E26C-1DF1-48F7-B3E7-1F58251EC6DA},cn=policies,cn=system,DC=DTPD1,DC=COM;0][LDAP://cn={14539203-9024-40BC-BFE9-CB13DB9E2322},cn=policies,cn=system,DC=DTPD1,DC=COM;0][LDAP://cn={D4E66C3A-3CF4-4AAE-987A-DE4A42898B39},cn=policies,cn=system,DC=DTPD1,DC=COM;0]>
    USERENV(2bc.218) 10:10:02:185 ProcessGPO: ==============================
    USERENV(2bc.218) 10:10:02:185 ProcessGPO: Deferring search for <LDAP://cn={AA47296F-4671-4E9C-A861-D92F2E75B1C7},cn=policies,cn=system,DC=DTPD1,DC=COM>
    USERENV(2bc.218) 10:10:02:185 ProcessGPO: ==============================
    USERENV(2bc.218) 10:10:02:185 ProcessGPO: Deferring search for <LDAP://cn={9C8B4191-4C63-4472-AD66-6FC64168EFDE},cn=policies,cn=system,DC=DTPD1,DC=COM>
    USERENV(2bc.218) 10:10:02:185 ProcessGPO: ==============================
    USERENV(2bc.218) 10:10:02:185 ProcessGPO: Deferring search for <LDAP://cn={9A596C35-B58E-41B1-A702-E5D1B75180A5},cn=policies,cn=system,DC=DTPD1,DC=COM>
    USERENV(2bc.218) 10:10:02:185 ProcessGPO: ==============================
    USERENV(2bc.218) 10:10:02:185 ProcessGPO: Deferring search for <LDAP://cn={D150E26C-1DF1-48F7-B3E7-1F58251EC6DA},cn=policies,cn=system,DC=DTPD1,DC=COM>
    USERENV(2bc.218) 10:10:02:185 ProcessGPO: ==============================
    USERENV(2bc.218) 10:10:02:185 ProcessGPO: Deferring search for <LDAP://cn={14539203-9024-40BC-BFE9-CB13DB9E2322},cn=policies,cn=system,DC=DTPD1,DC=COM>
    USERENV(2bc.218) 10:10:02:185 ProcessGPO: ==============================
    USERENV(2bc.218) 10:10:02:185 ProcessGPO: Deferring search for <LDAP://cn={D4E66C3A-3CF4-4AAE-987A-DE4A42898B39},cn=policies,cn=system,DC=DTPD1,DC=COM>
    USERENV(2bc.218) 10:10:02:185 SearchDSObject: <OU=Test OU,DC=DTPD1,DC=com> has the Block From Above attribute set
    USERENV(2bc.218) 10:10:02:185 SearchDSObject: Searching <DC=DTPD1,DC=com>
    USERENV(2bc.218) 10:10:02:185 SearchDSObject: Found GPO(s): <[LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=DTPD1,DC=COM;0]>
    USERENV(2bc.218) 10:10:02:185 ProcessGPO: ==============================
    USERENV(2bc.218) 10:10:02:185 AddGPO: GPO will not be added to the list since the Block flag is set and this GPO is not in enforce mode.
    USERENV(2bc.218) 10:10:02:185 ProcessGPO: Deferring search for <LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=DTPD1,DC=COM>
    USERENV(2bc.218) 10:10:02:200 SearchDSObject: Searching <CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=DTPD1,DC=com>
    USERENV(2bc.218) 10:10:02:200 SearchDSObject: No GPO(s) for this object.
    USERENV(2bc.218) 10:10:02:200 EvaluateDeferredGPOs: Searching for GPOs in cn=policies,cn=system,DC=DTPD1,DC=COM
    USERENV(2bc.218) 10:10:02:200 ProcessGPO: ==============================
    USERENV(2bc.218) 10:10:02:200 ProcessGPO: Searching <cn={AA47296F-4671-4E9C-A861-D92F2E75B1C7},cn=policies,cn=system,DC=DTPD1,DC=COM>
    USERENV(2bc.218) 10:10:02:200 ProcessGPO: User has access to this GPO.
    USERENV(2bc.218) 10:10:02:200 ProcessGPO: GPO passes the filter check.
    USERENV(2bc.218) 10:10:02:200 ProcessGPO: Found functionality version of: 2
    USERENV(2bc.218) 10:10:02:200 ProcessGPO: Found file system path of: <\\DTPD1.COM\SysVol\DTPD1.COM\Policies\{AA47296F-4671-4E9C-A861-D92F2E75B1C7}>
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: Found common name of: <{AA47296F-4671-4E9C-A861-D92F2E75B1C7}>
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: Found display name of: <Windows Defender (Non-beta)>
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: Found user version of: GPC is 0, GPT is 0
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: Found flags of: 0
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: No client-side extensions for this object.
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: GPO Windows Defender (Non-beta) doesn't contain any data since the version number is 0. It will be skipped.
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: ==============================
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: ==============================
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: Searching <cn={9C8B4191-4C63-4472-AD66-6FC64168EFDE},cn=policies,cn=system,DC=DTPD1,DC=COM>
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: User has access to this GPO.
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: GPO passes the filter check.
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: Found functionality version of: 2
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: Found file system path of: <\\DTPD1.COM\SysVol\DTPD1.COM\Policies\{9C8B4191-4C63-4472-AD66-6FC64168EFDE}>
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: Found common name of: <{9C8B4191-4C63-4472-AD66-6FC64168EFDE}>
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: Found display name of: <Legal Notice>
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: Found user version of: GPC is 0, GPT is 0
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: Found flags of: 0
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: No client-side extensions for this object.
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: GPO Legal Notice doesn't contain any data since the version number is 0. It will be skipped.
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: ==============================
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: ==============================
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: Searching <cn={9A596C35-B58E-41B1-A702-E5D1B75180A5},cn=policies,cn=system,DC=DTPD1,DC=COM>
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: User has access to this GPO.
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: GPO passes the filter check.
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: Found functionality version of: 2
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: Found file system path of: <\\DTPD1.COM\SysVol\DTPD1.COM\Policies\{9A596C35-B58E-41B1-A702-E5D1B75180A5}>
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: Found common name of: <{9A596C35-B58E-41B1-A702-E5D1B75180A5}>
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: Found display name of: <Assign Wins Addresses>
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: Found user version of: GPC is 0, GPT is 0
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: Found flags of: 0
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: No client-side extensions for this object.
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: GPO Assign Wins Addresses doesn't contain any data since the version number is 0. It will be skipped.
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: ==============================
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: ==============================
    USERENV(2bc.218) 10:10:02:231 ProcessGPO: Searching <cn={D150E26C-1DF1-48F7-B3E7-1F58251EC6DA},cn=policies,cn=system,DC=DTPD1,DC=COM>
    USERENV(2bc.218) 10:10:02:247 ProcessGPO: User has access to this GPO.
    USERENV(2bc.218) 10:10:02:247 ProcessGPO: GPO passes the filter check.
    USERENV(2bc.218) 10:10:02:247 ProcessGPO: Found functionality version of: 2
    USERENV(2bc.218) 10:10:02:247 ProcessGPO: Found file system path of: <\\DTPD1.COM\SysVol\DTPD1.COM\Policies\{D150E26C-1DF1-48F7-B3E7-1F58251EC6DA}>
    USERENV(2bc.218) 10:10:02:247 ProcessGPO: Found common name of: <{D150E26C-1DF1-48F7-B3E7-1F58251EC6DA}>
     
  6. Punkrulz

    Punkrulz Somewhat eXPerienced

    Messages:
    790
    Location:
    Woodbury, NJ
    Something else I would just like to add, is that on the main computer I'm working on to resolve this, on our loginnoticetext.vbs script, it's only applying the second half of the script. The first half of the script adds to the registry the proper legal notice text that we want to display before the user is shown a login box... however the second half, which works, shows more disclaimer text just ABOVE the username / password entries. Strange!