Group Policy Slow Network Connections

[GeorgeTuk]

Afternoon guys,

I am just trying to get Group Policy applying to a remote managed server over VPN. I am getting Userenv 1054 everytime.

I have tried every which I can:

1)GP setting on (didn't work)
2)GP setting off, GroupPolicyMinTransferRate registry keys on (didn't work)
3)Both GP settings on and Registry Keys on (still didn't work).

I now have it so that there is no message in event viewer at all, positive or negative.

So what am I doing wrong? Does one setting cancel the other or something like that?

 

[TechyMcSe2k]

Group Policy
To successfully apply Group Policy, a client must be able to contact a domain controller over the DCOM, ICMP, LDAP, SMB, and RPC protocols
Scroll down to GP:

http://support.microsoft.com/kb/832017

Can that remotely managed server resolve the DC?

Userenv 1054:
Windows cannot obtain the domain controller name for your computer network. (<error description>). Group Policy processing aborted.


_______________________________________
I hope any help I give leads to great successes.
MCSE, MCSA, MCTS, CCA, VCP, CCNA

 

[GeorgeTuk]

Yeah it can resolve, it was joined to the domain that way so no issues there.

I will check all those ports are open but being a VPN I suspect they will be.

Any other ideas?

 

[TechyMcSe2k]

Turn on Group Policy Slow Link Detection
Also, under computer config/admintemp/system/logon turn on Always wait for the network at computer startup and logon

Maybe:

http://support.microsoft.com/kb/840669

Also,Creating a Group Policy network start timeout policy
The GpNetworkStartTimeoutPolicyValue policy timeout can be specified in the registry in two locations:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Current Version\Winlogon
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System
You can do this by adding a DWORD value of GpNetworkStartTimeoutPolicyValue with a number of seconds between 30 and 600.

Windows reads the Winlogon subkey first. Then, Windows reads the Policies subkey. The value in the Policies subkey supersedes any value in the Winlogon subkey. There is no user interface that you can use to set this Group Policy object (GPO). Therefore, you have to deploy a custom ADM file in order to set the GPO.

The value specified should be of sufficient duration to make sure that the connection is made. During the timeout period, Windows examines the connection status every two seconds and continues with system startup as soon as the connection is confirmed. Therefore, setting the value larger than the minimum value of 30 is recommended. However, be advised that if the system is legitimately disconnected, Windows will stall for the whole timeout period.



_______________________________________
I hope any help I give leads to great successes.
MCSE, MCSA, MCTS, CCA, VCP, CCNA

 

[TechyMcSe2k]

Group Policies may not apply because of network ICMP policies

http://support.microsoft.com/kb/816045

_______________________________________
I hope any help I give leads to great successes.
MCSE, MCSA, MCTS, CCA, VCP, CCNA

 

[TechyMcSe2k]

More links here:

http://support.microsoft.com/search...id=global&catalog=LCID=1033&1033comm=1&res=20

_______________________________________
I hope any help I give leads to great successes.
MCSE, MCSA, MCTS, CCA, VCP, CCNA