Re: Mangage XP Firewall centrally

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 04/28/05

  • Next message: Joe Richards [MVP]: "Re: Multiple Password Policies"
    Date: Wed, 27 Apr 2005 21:59:24 -0500
    
    

    I did a search on Google and found the links below that may relate to your
    problem. The second link is for Small Business Server if that is what your
    server is. If you are not using Small Business Server make sure you read the
    "cause" section of the article for other possible causes such as ---

    However, there are several other scenarios that may also cause this problem.
    Make sure that the following components are started and correctly configured
    before you apply this hotfix: . Netlogon and DFS services are started.
          . Domain controllers have the read and apply rights to the Domain
    Controllers Policy.
          . NTFS file system permissions and share permissions are set correctly
    on the Sysvol share.
          . DNS entries are correct for the domain controllers.

    http://support.microsoft.com/?kbid=842804
    http://support.microsoft.com/default.aspx?scid=kb;en-us;888943

    As the cause states, dns is often a caused of Group Policy problems. Review
    the link below to make sure your dns is configured correctly for your
    domain. A common problem is that domain controllers are not pointing to
    themselves or the pdc fsmo domain controller as their preferred dns server
    and that domain computers are not pointing to ONLY [ never an ISP dns
    server] domain controllers running dns as their preferred dns server. Since
    you are experiencing problems, run the support tools netdiag and dcdiag on
    the domain controllers and netdiag on problem domain computer/servers to
    check for problems such as dc discovery, dns, kerberos, and trust/secure
    channel. Support tools are on the install disk of the operating system in
    the support/tools folder where you will need to run the setup program to
    install the set. Failed tests/errors/warnings can help pinpoint the problem
    and what may need to be fixed. --- Steve

    http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B291382 --- AD
    dns FAQ
    http://www.windowsnetworking.com/articles_tutorials/Windows_2003_Support_Tools.html
    --- support tools

    "Durby Groy" <someone@microsoft.com> wrote in message
    news:OSzt5g5SFHA.1044@TK2MSFTNGP10.phx.gbl...
    > Thanks steven,
    >
    > but i cannot open my GPO from my server.
    > it show "Failed to open the Group Pilicy Object. You may not
    > have appropriate rights"
    >
    > I log in using server's administrator account. when i check server's
    > event log.
    > it show a lot of error event ID : 1058 & 1030.
    > seems like this things have happen so some times.
    >
    > Pls help....
    >
    >
    > "Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
    > news:u4FjjtsSFHA.3056@TK2MSFTNGP14.phx.gbl...
    >> Sure. You will need to upgrade to the XP SP2 administrative templates to
    >> do such OR manage Group Policy from a known secure administrative XP Pro
    >> SP2 workstation while logged on as a domain admin using the mmc snapin
    >> for Group Policy. Then you will have more firewall options under computer
    >> configuration/administrative templates/network/network
    >> connections/Windows Firewall. The domain profile is in effect when a
    >> domain computer is connected to the domain. --- Steve
    >>
    >> http://support.microsoft.com/default.aspx?scid=kb;en-us;816662
    >>
    >> "Durby Groy" <someone@microsoft.com> wrote in message
    >> news:eFDuHisSFHA.1896@TK2MSFTNGP14.phx.gbl...
    >>> How can open certain firewall port on XP Pro SP2 centrally
    >>> through GPO from server 2003 ?
    >>>
    >>
    >>
    >
    >


  • Next message: Joe Richards [MVP]: "Re: Multiple Password Policies"

    Relevant Pages

    • Re: Multi-homed WINS Server does not let me administer it.
      ... Being a VPN Server and even simply running RRAS makes it multi-homed. ... Domain Controllers with the PDF Role are automatically Domain Master Browser. ... Multihomed DCs, DNS, RRAS servers. ... Insure that all the NICS only point to your internal DNS serveronly and none others, ...
      (microsoft.public.windows.server.dns)
    • Re: DNS on Windows Server 2003
      ... You should never multihome domain controllers. ... Then configure the clients toi use the domain internal DNS server only on ther e NIC's and add the ISP's DNS server to the FORWARDERS tab under the DNS server properties in the DNS management console. ... Insure that all the NICS only point to your internal DNS serveronly and none others, such as your ISP's DNS servers' IP addresses. ...
      (microsoft.public.windows.server.dns)
    • Re: Is it safe to use a DHCP to assign the IP addresses to the servers
      ... Being a VPN Server and even simply running RRAS makes it multi-homed. ... Domain Controllers with the PDF Role are automatically Domain Master Browser. ... Multihomed DCs, DNS, RRAS servers. ... there are some registry changes to eliminate the registration of the external NIC. ...
      (microsoft.public.windows.server.networking)
    • Re: Strange Logon Behaviour.
      ... Being a VPN Server and even simply running RRAS makes it multi-homed. ... Domain Controllers with the PDF Role are automatically Domain Master Browser. ... Multihomed DCs, DNS, RRAS servers. ... there are some registry changes to eliminate the registration of the external NIC. ...
      (microsoft.public.windows.server.active_directory)
    • Re: Installing Windows 2003 DC in a Windows 2000 Evironment-- Need Hel
      ... How to Upgrade Windows 2000 Domain Controllers to Windows Server 2003 ... Initial synchronization requirements for Windows 2000 Server and Windows ... ensure that you have designed a DNS and Active ...
      (microsoft.public.windows.server.active_directory)