GPO Loosing Settings

Guys,
Strangely I have 2 computers loosing their GPO settings. One of these
computers was installed yesterday and its not retaining it settings while
the other was having this problem for about a week now. I've looked at the
gpresult and can see that the settings are not being applied. Any idea why
this may be so.
Thanks
Win2k3 sp2 and XP Client

Hello Nik" nik,

Are the computer accounts/user accounts in the OU where the GPO is linked
to, depending on the settings you configured?

Do you use only domain internal DNS servers on the NIC?

Are the machines manual installed or from an image, that isn't sysprepped?

Please post an unedited ipconfig /all from a problem computer and also the
DC/DNS server.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Guys,
> Strangely I have 2 computers loosing their GPO settings. One of these
> computers was installed yesterday and its not retaining it settings
> while
> the other was having this problem for about a week now. I've looked at
> the
> gpresult and can see that the settings are not being applied. Any idea
> why
> this may be so.
> Thanks
> Win2k3 sp2 and XP Client

Hey Meinolf

--------- Server ----------



Windows IP Configuration



Host Name . . . . . . . . . . . . : MSDCEDM04

Primary Dns Suffix . . . . . . . : domain.lab

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : domain.lab



Ethernet adapter Local Area Connection 2:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : HP NC326i PCIe Dual Port Gigabit
Server Adapter

Physical Address. . . . . . . . . : 00-21-5A-0C-BF-FD

DHCP Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

Autoconfiguration IP Address. . . : 169.254.143.130

Subnet Mask . . . . . . . . . . . : 255.255.0.0

Default Gateway . . . . . . . . . :



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : HP NC326i PCIe Dual Port Gigabit
Server Adapter #2

Physical Address. . . . . . . . . : 00-21-5A-0C-BF-FC

DHCP Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 192.168.93.11

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.93.8

DNS Servers . . . . . . . . . . . : 192.168.93.11

192.168.2.8






------------------ Client ----------------

Windows IP Configuration



Host Name . . . . . . . . . . . . : EDMINDLGN030250

Primary Dns Suffix . . . . . . . : domain.lab

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : domain.lab

domain.lab

domain.lab



Ethernet adapter Wireless Network Connection:



Connection-specific DNS Suffix . : domain.lab

Description . . . . . . . . . . . : Intel(R) PRO/Wireless 3945ABG
Network Connection

Physical Address. . . . . . . . . : 00-18-DE-CF-C4-4C

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 192.168.95.143

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.95.1

DHCP Server . . . . . . . . . . . : 192.168.93.11

DNS Servers . . . . . . . . . . . : 192.168.93.11

192.168.193.11

Lease Obtained. . . . . . . . . . : Wednesday, November 25, 2009
8:01:47 AM

Lease Expires . . . . . . . . . . : Thursday, December 03, 2009
8:01:47 AM



Ethernet adapter {E998F696-43AE-4998-B9C5-69EAF5B28BAA}:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Nortel IPSECSHM Adapter - Packet
Scheduler Miniport

Physical Address. . . . . . . . . : 44-45-53-54-42-00

Dhcp Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 0.0.0.0

Subnet Mask . . . . . . . . . . . : 0.0.0.0

Default Gateway . . . . . . . . . :



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . : domain.lab

Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit
Ethernet

Physical Address. . . . . . . . . : 00-17-08-4B-F3-F4

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 192.168.93.159

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.93.8

DHCP Server . . . . . . . . . . . : 192.168.93.11

DNS Servers . . . . . . . . . . . : 192.168.93.11

192.168.193.11

192.168.2.8

Lease Obtained. . . . . . . . . . : Wednesday, November 25, 2009
8:02:00 AM

Lease Expires . . . . . . . . . . : Thursday, December 03, 2009
8:02:00 AM





"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911da30c8cc3c319785830c@msnews.microsoft.com...
> Hello Nik" nik,
>
> Are the computer accounts/user accounts in the OU where the GPO is linked
> to, depending on the settings you configured?
>
> Do you use only domain internal DNS servers on the NIC?
>
> Are the machines manual installed or from an image, that isn't sysprepped?
>
> Please post an unedited ipconfig /all from a problem computer and also the
> DC/DNS server.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Guys,
>> Strangely I have 2 computers loosing their GPO settings. One of these
>> computers was installed yesterday and its not retaining it settings
>> while
>> the other was having this problem for about a week now. I've looked at
>> the
>> gpresult and can see that the settings are not being applied. Any idea
>> why
>> this may be so.
>> Thanks
>> Win2k3 sp2 and XP Client
>
>

Hello Nik" nik,

On the server MSDCEDM04 disable the unused NIC and make sure it is not listed
with 169.254.x.x in the DNS zones.

I am a bit confused about the subnets you are using on the 2 machines 192.168.93.x
and 192.168.193.x and 192.168.95.x and 192.168.2.x, please give some more
info about this?

Also your client has multiple NICs with different ip addresses, at least
2, according to your posting.

A computer should have not more then one ip address. If that output is configured
then i understand your problems.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hey Meinolf
>
> --------- Server ----------
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : MSDCEDM04
>
> Primary Dns Suffix . . . . . . . : domain.lab
>
> Node Type . . . . . . . . . . . . : Unknown
>
> IP Routing Enabled. . . . . . . . : No
>
> WINS Proxy Enabled. . . . . . . . : No
>
> DNS Suffix Search List. . . . . . : domain.lab
>
> Ethernet adapter Local Area Connection 2:
>
> Connection-specific DNS Suffix . :
>
> Description . . . . . . . . . . . : HP NC326i PCIe Dual Port
> Gigabit Server Adapter
>
> Physical Address. . . . . . . . . : 00-21-5A-0C-BF-FD
>
> DHCP Enabled. . . . . . . . . . . : Yes
>
> Autoconfiguration Enabled . . . . : Yes
>
> Autoconfiguration IP Address. . . : 169.254.143.130
>
> Subnet Mask . . . . . . . . . . . : 255.255.0.0
>
> Default Gateway . . . . . . . . . :
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
>
> Description . . . . . . . . . . . : HP NC326i PCIe Dual Port
> Gigabit Server Adapter #2
>
> Physical Address. . . . . . . . . : 00-21-5A-0C-BF-FC
>
> DHCP Enabled. . . . . . . . . . . : No
>
> IP Address. . . . . . . . . . . . : 192.168.93.11
>
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
>
> Default Gateway . . . . . . . . . : 192.168.93.8
>
> DNS Servers . . . . . . . . . . . : 192.168.93.11
>
> 192.168.2.8
>
> ------------------ Client ----------------
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : EDMINDLGN030250
>
> Primary Dns Suffix . . . . . . . : domain.lab
>
> Node Type . . . . . . . . . . . . : Unknown
>
> IP Routing Enabled. . . . . . . . : No
>
> WINS Proxy Enabled. . . . . . . . : No
>
> DNS Suffix Search List. . . . . . : domain.lab
>
> domain.lab
>
> domain.lab
>
> Ethernet adapter Wireless Network Connection:
>
> Connection-specific DNS Suffix . : domain.lab
>
> Description . . . . . . . . . . . : Intel(R) PRO/Wireless
> 3945ABG Network Connection
>
> Physical Address. . . . . . . . . : 00-18-DE-CF-C4-4C
>
> Dhcp Enabled. . . . . . . . . . . : Yes
>
> Autoconfiguration Enabled . . . . : Yes
>
> IP Address. . . . . . . . . . . . : 192.168.95.143
>
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
>
> Default Gateway . . . . . . . . . : 192.168.95.1
>
> DHCP Server . . . . . . . . . . . : 192.168.93.11
>
> DNS Servers . . . . . . . . . . . : 192.168.93.11
>
> 192.168.193.11
>
> Lease Obtained. . . . . . . . . . : Wednesday, November 25,
> 2009 8:01:47 AM
>
> Lease Expires . . . . . . . . . . : Thursday, December 03,
> 2009 8:01:47 AM
>
> Ethernet adapter {E998F696-43AE-4998-B9C5-69EAF5B28BAA}:
>
> Connection-specific DNS Suffix . :
>
> Description . . . . . . . . . . . : Nortel IPSECSHM Adapter -
> Packet Scheduler Miniport
>
> Physical Address. . . . . . . . . : 44-45-53-54-42-00
>
> Dhcp Enabled. . . . . . . . . . . : No
>
> IP Address. . . . . . . . . . . . : 0.0.0.0
>
> Subnet Mask . . . . . . . . . . . : 0.0.0.0
>
> Default Gateway . . . . . . . . . :
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . : domain.lab
>
> Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit
> Ethernet
>
> Physical Address. . . . . . . . . : 00-17-08-4B-F3-F4
>
> Dhcp Enabled. . . . . . . . . . . : Yes
>
> Autoconfiguration Enabled . . . . : Yes
>
> IP Address. . . . . . . . . . . . : 192.168.93.159
>
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
>
> Default Gateway . . . . . . . . . : 192.168.93.8
>
> DHCP Server . . . . . . . . . . . : 192.168.93.11
>
> DNS Servers . . . . . . . . . . . : 192.168.93.11
>
> 192.168.193.11
>
> 192.168.2.8
>
> Lease Obtained. . . . . . . . . . : Wednesday, November 25,
> 2009 8:02:00 AM
>
> Lease Expires . . . . . . . . . . : Thursday, December 03,
> 2009 8:02:00 AM
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:6cb2911da30c8cc3c319785830c@msnews.microsoft.com...
>
>> Hello Nik" nik,
>>
>> Are the computer accounts/user accounts in the OU where the GPO is
>> linked to, depending on the settings you configured?
>>
>> Do you use only domain internal DNS servers on the NIC?
>>
>> Are the machines manual installed or from an image, that isn't
>> sysprepped?
>>
>> Please post an unedited ipconfig /all from a problem computer and
>> also the DC/DNS server.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Guys,
>>> Strangely I have 2 computers loosing their GPO settings. One of
>>> these
>>> computers was installed yesterday and its not retaining it settings
>>> while
>>> the other was having this problem for about a week now. I've looked
>>> at
>>> the
>>> gpresult and can see that the settings are not being applied. Any
>>> idea
>>> why
>>> this may be so.
>>> Thanks
>>> Win2k3 sp2 and XP Client

Howdie!

Nik schrieb:
> Strangely I have 2 computers loosing their GPO settings. One of these
> computers was installed yesterday and its not retaining it settings while
> the other was having this problem for about a week now. I've looked at the
> gpresult and can see that the settings are not being applied. Any idea why
> this may be so.

Were those machines imaged/not properly sysprep'ed?

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
ANY advice you get on the Newsgroups should be tested thoroughly in your
lab.

Sorry about the late response guys, this problem is happening at a remote
site while there is also a time zone differentiation.

Meinolf:
On the server MSDCEDM04 disable the unused NIC and make sure it is not
listed
with 169.254.x.x in the DNS zones.
Done! I disabled the second LAN Connection and remove all entries of
169.254.x.x from the DNS and then did an ipconfig /registerdns

I am a bit confused about the subnets you are using on the 2 machines
192.168.93.x
and 192.168.193.x and 192.168.95.x and 192.168.2.x, please give some more
info about this?
One was wireless and the other was wired. I disabled the wireless and the
problem still persists
Also one of these computers is a laptop and the other a desktop.

Florian:
Were those machines imaged/not properly sysprep'ed?
Nope! They were freshly installed from the media. Actually the laptop was
working well until the day i submitted the post and the desktop is a clean
installation.





"Nik" <nik> wrote in message news:uKFvgBhbKHA.1596@TK2MSFTNGP06.phx.gbl...
> Guys,
> Strangely I have 2 computers loosing their GPO settings. One of these
> computers was installed yesterday and its not retaining it settings while
> the other was having this problem for about a week now. I've looked at the
> gpresult and can see that the settings are not being applied. Any idea why
> this may be so.
> Thanks
> Win2k3 sp2 and XP Client
>

Hello Nik" nik,

Then i will asked the other way around, where is this DNS server coming from
192.168.2.8? It is not from your used subnets on the machine?

So EDMINDLGN030250 is connected wired, 192.168.93.159, and wireless, 192.168.95.143,
to the domain?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Sorry about the late response guys, this problem is happening at a
> remote site while there is also a time zone differentiation.
>
> Meinolf:
> On the server MSDCEDM04 disable the unused NIC and make sure it is not
> listed
> with 169.254.x.x in the DNS zones.
> Done! I disabled the second LAN Connection and remove all entries of
> 169.254.x.x from the DNS and then did an ipconfig /registerdns
> I am a bit confused about the subnets you are using on the 2 machines
> 192.168.93.x
> and 192.168.193.x and 192.168.95.x and 192.168.2.x, please give some
> more
> info about this?
> One was wireless and the other was wired. I disabled the wireless and
> the
> problem still persists
> Also one of these computers is a laptop and the other a desktop.
> Florian:
> Were those machines imaged/not properly sysprep'ed?
> Nope! They were freshly installed from the media. Actually the laptop
> was
> working well until the day i submitted the post and the desktop is a
> clean
> installation.
> "Nik" <nik> wrote in message
> news:uKFvgBhbKHA.1596@TK2MSFTNGP06.phx.gbl...
>
>> Guys,
>> Strangely I have 2 computers loosing their GPO settings. One of these
>> computers was installed yesterday and its not retaining it settings
>> while
>> the other was having this problem for about a week now. I've looked
>> at the
>> gpresult and can see that the settings are not being applied. Any
>> idea why
>> this may be so.
>> Thanks
>> Win2k3 sp2 and XP Client

"Nik" <nik> wrote in message news:e%23QIfS2bKHA.1648@TK2MSFTNGP05.phx.gbl...
> Sorry about the late response guys, this problem is happening at a remote
> site while there is also a time zone differentiation.
>
> Meinolf:
> On the server MSDCEDM04 disable the unused NIC and make sure it is not
> listed
> with 169.254.x.x in the DNS zones.
> Done! I disabled the second LAN Connection and remove all entries of
> 169.254.x.x from the DNS and then did an ipconfig /registerdns

Did you also remove it from the DNS zones' properties, Nameserver tab?
How about under your _gc._msdcs.domain.local zone?


>
> I am a bit confused about the subnets you are using on the 2 machines
> 192.168.93.x
> and 192.168.193.x and 192.168.95.x and 192.168.2.x, please give some more
> info about this?
> One was wireless and the other was wired. I disabled the wireless and the
> problem still persists
> Also one of these computers is a laptop and the other a desktop.

If the wireless hosts are on a different subnet, is that subnet behind a
NAT, eg, the AP (wireless access point) is performing NAT for it;s wireless
clients? If so, AD communications fail across a NAT. It is suggested to use
'corporate' mode, or simply do not use the WAN interface on an AP that is
also a router, such as the retail box wireless routers, to eliminate NAT.
This way, wireless clients will get an IP from the wired infrastructure
DHCP.

>
> Florian:
> Were those machines imaged/not properly sysprep'ed?
> Nope! They were freshly installed from the media. Actually the laptop was
> working well until the day i submitted the post and the desktop is a clean
> installation.
>
>
>


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.

I think it was accidental that they had both connection on at the same time.
However, I disabled the wireless to ensure only the LAN connection is used
and the problem still persists.
192.168.2.8 is the secondary DNS and is at the hub site while




"Ace Fekay [MCT]" <aceman@mvps.RemoveThisPart.org> wrote in message
news:OaxvmnKcKHA.2184@TK2MSFTNGP04.phx.gbl...
> "Nik" <nik> wrote in message
> news:e%23QIfS2bKHA.1648@TK2MSFTNGP05.phx.gbl...
>> Sorry about the late response guys, this problem is happening at a remote
>> site while there is also a time zone differentiation.
>>
>> Meinolf:
>> On the server MSDCEDM04 disable the unused NIC and make sure it is not
>> listed
>> with 169.254.x.x in the DNS zones.
>> Done! I disabled the second LAN Connection and remove all entries of
>> 169.254.x.x from the DNS and then did an ipconfig /registerdns
>
> Did you also remove it from the DNS zones' properties, Nameserver tab?
> How about under your _gc._msdcs.domain.local zone?
>
>
>>
>> I am a bit confused about the subnets you are using on the 2 machines
>> 192.168.93.x
>> and 192.168.193.x and 192.168.95.x and 192.168.2.x, please give some more
>> info about this?
>> One was wireless and the other was wired. I disabled the wireless and the
>> problem still persists
>> Also one of these computers is a laptop and the other a desktop.
>
> If the wireless hosts are on a different subnet, is that subnet behind a
> NAT, eg, the AP (wireless access point) is performing NAT for it;s
> wireless clients? If so, AD communications fail across a NAT. It is
> suggested to use 'corporate' mode, or simply do not use the WAN interface
> on an AP that is also a router, such as the retail box wireless routers,
> to eliminate NAT. This way, wireless clients will get an IP from the wired
> infrastructure DHCP.
>
>>
>> Florian:
>> Were those machines imaged/not properly sysprep'ed?
>> Nope! They were freshly installed from the media. Actually the laptop was
>> working well until the day i submitted the post and the desktop is a
>> clean installation.
>>
>>
>>
>
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Please reply back to the newsgroup or forum for collaboration benefit
> among responding engineers, and to help others benefit from your
> resolution.
>
> Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
> 2003/2000, MCSA Messaging 2003
> Microsoft Certified Trainer
>
> For urgent issues, please contact Microsoft PSS directly. Please check
> http://support.microsoft.com for regional support phone numbers.
>
>
>
>

"Nik" <nik> wrote in message news:unMDfXecKHA.5608@TK2MSFTNGP05.phx.gbl...
>I think it was accidental that they had both connection on at the same
>time. However, I disabled the wireless to ensure only the LAN connection is
>used and the problem still persists.
> 192.168.2.8 is the secondary DNS and is at the hub site while

I'm not sure what that last sentence means regarding 192.168.2.8. Are you
talking about the zone on the 192.168.2.8 is a Secondary zone and not on a
DC? Or are you saying that is the second entry in ipconfig of the
workstation?

As far as disabling wireless, sometimes a reboot of the workstation is
required after you physically turn off the wireless button on the laptop.

Also, you didn't explain or respond regarding my wireless subnet question
whether it is NAT or corporate (bridged) to the wireless machines.

I assume you've made the changes Meinolf suggested. If so, it would probably
be very helpful to see an updated ipconfig /all to actually see the current
settings. Please post an updated ipconfig /all from the server and from the
workstation.

Ace

Guys, Sorry about the delay, the problem seemed to have sorted itself out.
Thanks for the help!


"Ace Fekay [MCT]" <aceman@mvps.RemoveThisPart.org> wrote in message
news:%23uI2DjfcKHA.5912@TK2MSFTNGP05.phx.gbl...
> "Nik" <nik> wrote in message news:unMDfXecKHA.5608@TK2MSFTNGP05.phx.gbl...
>>I think it was accidental that they had both connection on at the same
>>time. However, I disabled the wireless to ensure only the LAN connection
>>is used and the problem still persists.
>> 192.168.2.8 is the secondary DNS and is at the hub site while
>
> I'm not sure what that last sentence means regarding 192.168.2.8. Are you
> talking about the zone on the 192.168.2.8 is a Secondary zone and not on a
> DC? Or are you saying that is the second entry in ipconfig of the
> workstation?
>
> As far as disabling wireless, sometimes a reboot of the workstation is
> required after you physically turn off the wireless button on the laptop.
>
> Also, you didn't explain or respond regarding my wireless subnet question
> whether it is NAT or corporate (bridged) to the wireless machines.
>
> I assume you've made the changes Meinolf suggested. If so, it would
> probably be very helpful to see an updated ipconfig /all to actually see
> the current settings. Please post an updated ipconfig /all from the server
> and from the workstation.
>
> Ace
>
>
>
>

"Nik" <nik> wrote in message news:eXFXdFpcKHA.1640@TK2MSFTNGP06.phx.gbl...
> Guys, Sorry about the delay, the problem seemed to have sorted itself out.
> Thanks for the help!
>

Interesting that it sorted itself with the misconfigurations. However, I am
glad to hear that.

Ace