Group Policy Object Error for Application Management

[mrtim5700]

I administer a Windows 2000 network (single mixed mode domain)and have recently been taksed with pushing out the most recent service pack to all computers. I have an OU for each branch location in active directory. Within that OU I created a security group which contains all the computers in the OU. I then created a GPO to push out the service pack. The package is under computer configuration, software settings, software installation. The path for the service pack msi file is shared out on a server which resides on the local subnet. The security group for the computers has read NTFS permission for the service pack share. The computer security group also has read permission to the GPO. In theory when the computers reboot the policy will kick in and install the service pack during start up, before the user logs on. I have confirmed that the workstations can communicate with the local server and see the share. The problem is this: the service pack does not install. When I check the application log on the workstation there are errors they read:

Source: userenv
event id: 1000
The group policy client-side extension security was passed flags(1) and returned an failure status code of (1788)

source: application management
event id: 101
The assignment of application windows 2000 service pack 4(1033)(2) from policy SP4_Deploy failed. The system cannot find the file specified.

source: application management
event id: 103
The removal of the assignment of application windows 2000 service pack 4(1033)(2) from policy SP4_Deploy failed. The error was the system cannot find the file specified.

source userenv
event id: 1000
The group policy client-side extension application management was passed flags(1) and returned a failure status code of (2).

Does anyone have any ideas?

 

[GiaBetiu]

error 1788:
The trust relationship between the primary domain and the trusted domain failed.

error 2:
The system cannot find the file specified.

Conclusion? Your workstation cannot access that share. It doesn't have the rights for accessing it.

Whatever, enable the following logging, and tel us the results:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;223300

http://support.microsoft.com/default.aspx?scid=kb;EN-US;246509

Gia Betiu
gia@almondeyes.net
Computer Eng. CNE 4, CNE 5, MCSE Win2K
new:

http://www.almondeyes.net

(just started)