Cannot connect to Group Policy Server


  1. Posts : 3
    Windows 7 Pro 32-bit
       #1

    Cannot connect to Group Policy Server


    I am currently running a Server 2003 R2 domain with about 100 computers running WinXP Pro on it. Some of these computers are older tablet style computers that are used out in our shop floor area. We are looking to replace these with some newer Win7 mini-PC's. All of them connect to the network via wireless access points, as these stations need to be mobile so they can be taken to all areas of the shop.

    During the test setup of the device I can get it to join to the domain and it can connect to our main file server, which is also the primary DC, and download files with no problem. It can also connect to the mail server with no problems that I have noticed so far.

    The issue arises, when it tries to connect to get Group Policy updates. when running "gpupdate /force" I get an error for both the user and computer parts of the update that says: "The Processing of Group Policy failed. Windows could not locate the directory object group policy..." When looking at the event logs, there are tons of GP errors, all of them are error 1101.

    I have already tried looking through the KB articles and have removed and rejoined the computer from/to the domain. The OU that the computer and user accounts that are used for this workstation is nest about 3 levels down from the domain level and have both the default domain policy applied to it as well as a secondary policy that add some extra settings to restrict the user privileges on the device. There are about 8 other WinXP Pro computers that are also in this same OU that are working exactly as we need them to.

    If anyone has and ideas/advice I would greatly appreciate it.
      My Computer


  2. Posts : 471
    W7 Professional x64
       #2

    I would suggest putting the new W7 machines in a completely seperate OU, and managing them specifically, not using the policy that worked under XP.

    I know this might be a bitch to do, but after a lot of experimenting with W7 versus XP Pro in a domain enviroment (running Server 2003 R2), we found that completely seperating the 7 machines and starting anew was the best route.
      My Computer


  3. Posts : 3
    Windows 7 Pro 32-bit
    Thread Starter
       #3

    I will give that a shot. Most of the settings that we want to take advantage of though are ones that are also used in XP. I downloaded the list of group policy settings for Win7/Server 2008 and we aren't going to use any of the new ones available. Do you recommend still building this list from another Win7/Server 2008 machine or would it be okay to continue to create the GPO from the 2003 R2 Server? The main thing that we want to accomplish is to remove the User's ability to right click on anything, and we also want the specific user account to not only auto-logon, but to force logon if the user tries to log it off, unless the shift key is being pressed. I have figured out how to do that except the shift key will not break the process so it becomes impossible to log in as administrator.

    I have seen recommendations that it be done on the newer machines, but that was generally so that the new settings could be utilized. Do you have any specific settings that I would want to make sure that I include? Do I need to create a new default domain policy for the Windows 7 machines?
      My Computer


  4. Posts : 1,426
    7 Pro
       #4

    the 03 server will need to be completely updated. Download RSAT, install it to a win 7 machine that is running GPMC. You will definately need the separate OU for the win7 machines.
      My Computer


  5. Posts : 3
    Windows 7 Pro 32-bit
    Thread Starter
       #5

    The server is already updated. That I made sure of. I have been trying to work through this for over a week now using tips from other forum posts. I have a Win 2008 server running RSAT with the GPMC on it that I was using to configure the policies.

    The one thing that I did not fully understand when I was configuring everything was when I read about moving the .admx files over to the Server 2003 R2 computer as it is the primary DC. will using RSAT do this already or is there another process I have to do to move those files to the general store on the DC?
      My Computer


  6. Posts : 471
    W7 Professional x64
       #6

    I'm going to keep tabs on this thread, in case I can be of further assistance, but I'm afraid you just beyond my realm of knowledge, sorry.
      My Computer


  7. Posts : 1,426
    7 Pro
       #7

    You should use the ADMX migrator tool when moving them to 2003

    Download details: ADMX Migrator
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 04:54.
Find Us