Group policy on certain servers in an OU

[Molenski]

Hi there,

We have one OU with a bunch of servers in there. All the servers have exactly the same permissions on the OU - are members of the same group etc. I've been through and checked the permissions on the OU. I've also checked access to the sysvol.

The problem is, that we are receiving 1030 and 1101 errors in the app logs on some servers...not all! I've enabled userenv logging on one of the servers and everything that I'm getting is pointing at an OU permissions problem. When running RSOP, I receive the user policy OK but no policies, including the domain policy for the computer. The error once again tells me that I have no permissions on a specific OU. I have double checked and followed various MS articles and know that the permissions are 100% correct. There are no DNS issues and connectivity is fine. I'm assuming that any major issues would also effect the user policy.

I've thought about removing and re-adding to the domain but haven't done that yet. There is nothing else of any significance in the Event logs. Anyone got any ideas?

Cheers.

 

[TechyMcSe2k]

i know you have reviewed various MS articles, but how about this one: (I know it states that it is for 2008, but it might apply here)

http://technet.microsoft.com/en-us/library/cc727256(WS.10).aspx

http://www.samtechconsulting.com

_______________________________________
Great knowledge can be obtained by mastering the Google algorithm.

 

[TechyMcSe2k]

Another one for the same exact errors. Is your domain at full Windows 2003 or is it still in a mixed mode?
Are there any older Domain Controllers in your domain? This could mess with OU security.

Domain Levels:

http://www.petri.co.il/understanding_function_levels_in_windows_2003_ad.htm

Your Errors:

http://support.microsoft.com/kb/909260

http://www.samtechconsulting.com

_______________________________________
Great knowledge can be obtained by mastering the Google algorithm.