Sunday, February 28, 2010

Group Policy Failure on Windows 7

The scene: Windows Server 2008 Active Directory (single forest, single domain, 2008 native FF and DF level), Windows 7 Ultimate client, user is member of Domain Admins.

Open CMD console and type “gpupdate /force”

Comes back with…

Updating Policy…

User Policy update has completed successfully.

Computer policy could not be updated successfully.  The following errors were encountered:

The processing of Group Policy failed. Windows could not resolve the user name. This could be caused by one of more of the following:
a) Name Resolution failure on the current domain controller.
b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).

To diagnose the failure, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.

Just before this it shows the the user policies were successfully applied, only the computer policies are failing.  I ran a few searches and came up with this thread on TechNet Social “W7 Group Policy failed” posted by “drave”.

I did the recommended reboot. I also disjoined and rejoined the domain.  Nada.

The odd thing is that it appears to have applied the computer policies recently, but the event log error recurrs going back a long way it seems.  The only support article I can find involves Vista, but says the problem was fixed as of Vista SP1.  I guess that’s not entirely true?

No comments: