Hi all,
I've recently joined a new company and I'm trying to diagnose why I'm getting gpupdate errors on certain GPO's, which is leading to mapped drives not creating correctly. My setup is this:
Domain: corp.company.local
4 sites
HQ - 2 DC's (DC1, DC2) - Both Server 2012
DataCentre - 3 DCs with the FSMO roles on DC4. DC5 and DC6 - All Server 2008 R2
Branch Site 1: BranchDC1 - Server 2012 - RODC
Branch Site 2: BranchDC1 - Server 2008 R2
The PDC is a Windows 2008 R2 machine. DFL is Windows 2008 R2
I was recently adding in new GPOs for mapped drives but I'm getting inconsistent gpudates, sometimes it will process fine but the majority I will get failures like this:
The processing of Group Policy failed. Windows attempted to read the file \\corp.company.local\SysVol\corp.company.local\Policies\{F4C95433-F34F-4819-BB2C-9E05245C969F}\gpt.ini from a domain controller and was not successful. Group
Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
Also, I've had instances when I loaded up GPMC I got a "system cannot find file specified" - appears to be on the last set of GPO's I created. If I switch to other DC's I can appear to open them. In some cases if I edit one of the files I get a
permission denied message, even though I initially created with the same account!
I'm at a bit of a loss at to why this is failing, I've ran a DFS health check and all checks out ok & DCdiags "appear" to be ok but I'm reaching my limit of taking this further - considering raising an MS case.
Keen for any suggestions or pointers to help me out :)
Thanks
Simon