destroyed
Goto Top

Gruppenrichtlinien werden nicht auf Terminal server übernommen

Hallo zusammen.
Ich habe ein sehr seltsames Problem bei dem ich nicht mehr so recht weiter weiß. Zum eigentlichen Problem: Immoment gibt es bei uns im Netzwerk kein Active Directory. Alles wird lokal an den Clients eingestellt. Es gibt für jedes System einen anderen Login. Kurz gesagt Chaos. Deshalb haben wir uns entschieden Active Directory zu nutzen. Zusätzlich zum Active Directory sind auch noch 2 Terminal Server hinzugekommen. Allerdings funktioniert das übernehmen der Gruppenrichtlinen nicht bzw nur teilweise auf den Terminal Servern. Als DC kommt Windows 2008 Std. X64 zum einsatz. Die Terminal Server laufen unter 2008 Std. X64.

Gruppenrichtlinien gibt es bis jetzt 3. Default Domain Policy, Windows Update (verteilt den WSUS) und ts_general_lockdown.

d324d427a0704cd12e485b4c1c8a83a8

Das Problem das ich habe ist, dass die Policy ts_general_lockdown nicht bzw nicht immer übernommen wird. Anfänglich, als wir das AD installiert haben, hatten wir das Problem, dass eben diese Policy nicht immer übernommen wurde. Dann 2 Wochen lang keine Probleme und jetzt wird sie gar nicht mehr übernommen.

GPResult auf einem der Terminal Server zeigt folgendes:

C:\Users\xxx.xxx>gpresult /z

Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 29.01.2010 at 12:00:00


RSOP data for MIMOON\xxx.xxx on TS02 : Logging Mode

OS Configuration: Member Server
OS Version: 6.0.6002
Site Name: N/A
Roaming Profile: \\pdc\ts\xxx.xxx.V2
Local Profile: C:\Users\xxx.xxx
Connected over a slow link?: No


USER SETTINGS
CN=xxx xxx,OU=user,OU=organisation,DC=intra,DC=mimoon,DC=de
Last time Group Policy was applied: 29.01.2010 at 11:27:20
Group Policy was applied from: pdc.intra.mimoon.de
Group Policy slow link threshold: 500 kbps
Domain Name: MIMOON
Domain Type: Windows 2000

Applied Group Policy Objects
-----------------------------
N/A

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Windows Update
Filtering: Not Applied (Empty)

Local Group Policy
Filtering: Not Applied (Empty)

Default Domain Policy
Filtering: Not Applied (Empty)

The user is a part of the following security groups
---------------------------------------------------
terminal server user
Everyone
Remote Desktop Users
BUILTIN\Users
REMOTE INTERACTIVE LOGON
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
This Organization
LOCAL
Domänen-Benutzer
Medium Mandatory Level

The user has the following security privileges
----------------------------------------------


Resultant Set Of Policies for User
-----------------------------------

Software Installations
----------------------
N/A

Logon Scripts
-------------
N/A

Logoff Scripts
--------------
N/A

Public Key Policies
-------------------
N/A

Administrative Templates
------------------------
N/A

Folder Redirection
------------------
N/A

Internet Explorer Browser User Interface
----------------------------------------
N/A

Internet Explorer Connection
----------------------------
N/A

Internet Explorer URLs
----------------------
N/A

Internet Explorer Security
--------------------------
N/A

Internet Explorer Programs
--------------------------
N/A


Was mich hier etwas stutzig macht ist: Domain Type: Windows 2000 Auf dem DC wird allerdings 2003 Als Domänenfunktionsebene angezeigt.

c8ae5e0be42e6e93c4bc2ce92e866da1

Das gpsvc.log zeigt fogendes nach einmaligem An- und Abmelden:

GPSVC(174.cdc) 12:05:28:090 Setting GPsession state = 1
GPSVC(174.cdc) 12:05:33:004 SID = S-1-5-21-4237697578-1646222034-3433114108-1106
GPSVC(174.cdc) 12:05:33:004 bMachine = 0
GPSVC(174.cdc) 12:05:33:004 Setting GPsession state = 1
GPSVC(174.cdc) 12:05:33:004 Message Status = <Applying user settings...>
GPSVC(174.b30) 12:05:33:004 StartTime For network wait: 42541ms
GPSVC(174.b30) 12:05:33:004 Current Time: 3013611ms
GPSVC(174.b30) 12:05:33:004 MaxTimeToWaitForNetwork: 37754ms
GPSVC(174.b30) 12:05:33:004 TimeRemainingToWaitForNetwork: 0ms
GPSVC(174.cdc) 12:05:33:004 Setting GPsession state = 1
GPSVC(174.b30) 12:05:33:004 UserPolicy: Waiting for machine policy wait for network event with timeout 0 ms
GPSVC(174.b30) 12:05:33:019 GPLockPolicySection: Sid = (null), dwTimeout = 30000, dwFlags = 65538
GPSVC(174.b30) 12:05:33:019 LockPolicySection called for user <Machine>
GPSVC(174.b30) 12:05:33:019 Sync Lock Called
GPSVC(174.b30) 12:05:33:019 Reader Lock got immediately. m_cReadersInLock : 1
GPSVC(174.b30) 12:05:33:019 Lock taken successfully
GPSVC(174.b30) 12:05:33:019 UnLockPolicySection called for user <Machine>
GPSVC(174.b30) 12:05:33:019 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(174.b30) 12:05:33:019 Setting lock state as notLocked
GPSVC(174.b30) 12:05:33:019 UnLocked successfully
GPSVC(174.b30) 12:05:33:019 GetDomainControllerConnectionInfo: Enabling bandwidth estimate.
GPSVC(174.b30) 12:05:35:032 Started bandwidth estimation successfully
GPSVC(174.b30) 12:05:35:032 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\dskquota.dll.
GPSVC(174.b30) 12:05:35:032 ReadGPExtensions: Rsop entry point not found for gptext.dll.
GPSVC(174.b30) 12:05:35:048 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\iedkcs32.dll.
GPSVC(174.b30) 12:05:35:048 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\srchadmin.dll.
GPSVC(174.b30) 12:05:35:048 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\iedkcs32.dll.
GPSVC(174.b30) 12:05:35:048 ReadGPExtensions: Rsop entry point not found for scecli.dll.
GPSVC(174.b30) 12:05:35:048 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\cscobj.dll.
GPSVC(174.b30) 12:05:35:048 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\iedkcs32.dll.
GPSVC(174.b30) 12:05:35:048 ReadGPExtensions: Rsop entry point not found for gptext.dll.
GPSVC(174.b30) 12:05:37:185 NlaQueryNetSignatures returned 1 networks
GPSVC(174.b30) 12:05:37:185 Estimated bandwidth on one of the connections : 0 kbps
GPSVC(174.b30) 12:05:37:185 Estimated bandwidth on one of the connections : 99572 kbps
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: Logging Data for Target <benjamin.simon>.
GPSVC(174.b30) 12:05:37:185 GPLockPolicySection: Sid = S-1-5-21-4237697578-1646222034-3433114108-1106, dwTimeout = 30000, dwFlags = 0
GPSVC(174.b30) 12:05:37:185 LockPolicySection called for user <S-1-5-21-4237697578-1646222034-3433114108-1106>
GPSVC(174.b30) 12:05:37:185 Sync Lock Called
GPSVC(174.b30) 12:05:37:185 Writer Lock got immediately.
GPSVC(174.b30) 12:05:37:185 Lock taken successfully
GPSVC(174.b30) 12:05:37:185 UnLockPolicySection called for user <S-1-5-21-4237697578-1646222034-3433114108-1106>
GPSVC(174.b30) 12:05:37:185 UnLocked successfully
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: OpenThreadToken failed with error 1008, assuming thread is not impersonating
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: Processing extension Registry
GPSVC(174.b30) 12:05:37:185 ReadStatus: Read Extension's Previous status successfully.
GPSVC(174.b30) 12:05:37:185 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:185 CheckGPOs: No GPO changes and no security group membership change and extension Registry has NoGPOChanges set.
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: Processing extension Wireless Group Policy
GPSVC(174.b30) 12:05:37:185 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:185 CheckGPOs: No GPO changes but couldn't read extension Wireless Group Policy's status or policy time.
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: Extension Wireless Group Policy skipped with flags 0x6.
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: Processing extension Group Policy Environment
GPSVC(174.b30) 12:05:37:185 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:185 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:185 CheckGPOs: No GPO changes but couldn't read extension Group Policy Environment's status or policy time.
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: Extension Group Policy Environment skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: Processing extension Group Policy Local Users and Groups
GPSVC(174.b30) 12:05:37:185 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:185 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:185 CheckGPOs: No GPO changes but couldn't read extension Group Policy Local Users and Groups's status or policy time.
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: Extension Group Policy Local Users and Groups skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: Processing extension Group Policy Device Settings
GPSVC(174.b30) 12:05:37:185 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:185 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:185 CheckGPOs: No GPO changes but couldn't read extension Group Policy Device Settings's status or policy time.
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: Extension Group Policy Device Settings skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: Processing extension Folder Redirection
GPSVC(174.b30) 12:05:37:185 ReadStatus: Read Extension's Previous status successfully.
GPSVC(174.b30) 12:05:37:185 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:185 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: Extension Folder Redirection skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: Processing extension Microsoft Disk Quota
GPSVC(174.b30) 12:05:37:185 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:185 CheckGPOs: No GPO changes but couldn't read extension Microsoft Disk Quota's status or policy time.
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: Extension Microsoft Disk Quota skipped with flags 0x6.
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: Processing extension Group Policy Network Options
GPSVC(174.b30) 12:05:37:185 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:185 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:185 CheckGPOs: No GPO changes but couldn't read extension Group Policy Network Options's status or policy time.
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: Extension Group Policy Network Options skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: Processing extension QoS Packet Scheduler
GPSVC(174.b30) 12:05:37:185 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:185 CheckGPOs: No GPO changes but couldn't read extension QoS Packet Scheduler's status or policy time.
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: Extension QoS Packet Scheduler skipped with flags 0x6.
GPSVC(174.b30) 12:05:37:185 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Processing extension Scripts
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CheckGPOs: No GPO changes but couldn't read extension Scripts's status or policy time.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Extension Scripts skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Processing extension Internet Explorer Zonemapping
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CheckGPOs: No GPO changes but couldn't read extension Internet Explorer Zonemapping's status or policy time.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Extension Internet Explorer Zonemapping skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Processing extension Group Policy Drive Maps
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CheckGPOs: No GPO changes but couldn't read extension Group Policy Drive Maps's status or policy time.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Extension Group Policy Drive Maps skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Processing extension Group Policy Folders
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CheckGPOs: No GPO changes but couldn't read extension Group Policy Folders's status or policy time.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Extension Group Policy Folders skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Processing extension Group Policy Network Shares
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CheckGPOs: No GPO changes but couldn't read extension Group Policy Network Shares's status or policy time.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Extension Group Policy Network Shares skipped with flags 0x6.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Processing extension Group Policy Files
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CheckGPOs: No GPO changes but couldn't read extension Group Policy Files's status or policy time.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Extension Group Policy Files skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Processing extension Group Policy Data Sources
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CheckGPOs: No GPO changes but couldn't read extension Group Policy Data Sources's status or policy time.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Extension Group Policy Data Sources skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Processing extension Group Policy Ini Files
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CheckGPOs: No GPO changes but couldn't read extension Group Policy Ini Files's status or policy time.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Extension Group Policy Ini Files skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Processing extension Windows Search Group Policy Extension
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CheckGPOs: No GPO changes but couldn't read extension Windows Search Group Policy Extension's status or policy time.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Extension Windows Search Group Policy Extension skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Processing extension Internet Explorer User Accelerators
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CheckGPOs: No GPO changes but couldn't read extension Internet Explorer User Accelerators's status or policy time.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Extension Internet Explorer User Accelerators skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Processing extension Security
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CheckGPOs: No GPO changes but couldn't read extension Security's status or policy time.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Extension Security skipped with flags 0x6.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Processing extension Deployed Printer Connections
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CheckGPOs: No GPO changes but couldn't read extension Deployed Printer Connections's status or policy time.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Extension Deployed Printer Connections skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Processing extension Group Policy Services
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CheckGPOs: No GPO changes but couldn't read extension Group Policy Services's status or policy time.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Extension Group Policy Services skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Processing extension Internet Explorer Branding
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CheckGPOs: No GPO changes but couldn't read extension Internet Explorer Branding's status or policy time.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Extension Internet Explorer Branding skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Processing extension Group Policy Folder Options
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CheckGPOs: No GPO changes but couldn't read extension Group Policy Folder Options's status or policy time.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Extension Group Policy Folder Options skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Processing extension Group Policy Scheduled Tasks
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CheckGPOs: No GPO changes but couldn't read extension Group Policy Scheduled Tasks's status or policy time.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Extension Group Policy Scheduled Tasks skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Processing extension Group Policy Registry
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CheckGPOs: No GPO changes but couldn't read extension Group Policy Registry's status or policy time.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Extension Group Policy Registry skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Processing extension EFS recovery
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:200 CheckGPOs: No GPO changes but couldn't read extension EFS recovery's status or policy time.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Extension EFS recovery skipped with flags 0x6.
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:200 ProcessGPOs: Processing extension 802.3 Group Policy
GPSVC(174.b30) 12:05:37:200 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CheckGPOs: No GPO changes but couldn't read extension 802.3 Group Policy's status or policy time.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Extension 802.3 Group Policy skipped with flags 0x6.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Processing extension Group Policy Printers
GPSVC(174.b30) 12:05:37:216 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CheckGPOs: No GPO changes but couldn't read extension Group Policy Printers's status or policy time.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Extension Group Policy Printers skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Processing extension Group Policy Shortcuts
GPSVC(174.b30) 12:05:37:216 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CheckGPOs: No GPO changes but couldn't read extension Group Policy Shortcuts's status or policy time.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Extension Group Policy Shortcuts skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Processing extension Microsoft Offline Files
GPSVC(174.b30) 12:05:37:216 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CheckGPOs: No GPO changes but couldn't read extension Microsoft Offline Files's status or policy time.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Extension Microsoft Offline Files skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Processing extension Software Installation
GPSVC(174.b30) 12:05:37:216 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CheckGPOs: No GPO changes but couldn't read extension Software Installation's status or policy time.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Extension Software Installation skipped with flags 0x6.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Processing extension Internet Explorer Machine Accelerators
GPSVC(174.b30) 12:05:37:216 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CheckGPOs: No GPO changes but couldn't read extension Internet Explorer Machine Accelerators's status or policy time.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Extension Internet Explorer Machine Accelerators skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Processing extension IP Security
GPSVC(174.b30) 12:05:37:216 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CheckGPOs: No GPO changes but couldn't read extension IP Security's status or policy time.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Extension IP Security skipped with flags 0x6.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Processing extension Group Policy Internet Settings
GPSVC(174.b30) 12:05:37:216 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CheckGPOs: No GPO changes but couldn't read extension Group Policy Internet Settings's status or policy time.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Extension Group Policy Internet Settings skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Processing extension Group Policy Start Menu Settings
GPSVC(174.b30) 12:05:37:216 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CheckGPOs: No GPO changes but couldn't read extension Group Policy Start Menu Settings's status or policy time.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Extension Group Policy Start Menu Settings skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Processing extension Group Policy Regional Options
GPSVC(174.b30) 12:05:37:216 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CheckGPOs: No GPO changes but couldn't read extension Group Policy Regional Options's status or policy time.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Extension Group Policy Regional Options skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Processing extension Group Policy Power Options
GPSVC(174.b30) 12:05:37:216 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CheckGPOs: No GPO changes but couldn't read extension Group Policy Power Options's status or policy time.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Extension Group Policy Power Options skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Processing extension Group Policy Applications
GPSVC(174.b30) 12:05:37:216 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CheckGPOs: No GPO changes but couldn't read extension Group Policy Applications's status or policy time.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Extension Group Policy Applications skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: -----------------------
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Processing extension Enterprise QoS
GPSVC(174.b30) 12:05:37:216 CompareGPOLists: The lists are the same.
GPSVC(174.b30) 12:05:37:216 CheckGPOs: No GPO changes but couldn't read extension Enterprise QoS's status or policy time.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: Extension Enterprise QoS skipped because both deleted and changed GPO lists are empty.
GPSVC(174.b30) 12:05:37:216 SetFgRefreshInfo: Previous User Fg policy Synchronous, Reason: SKU.
GPSVC(174.b30) 12:05:37:216 SetFgRefreshInfo: Next User Fg policy Synchronous, Reason: SKU.
GPSVC(174.b30) 12:05:37:216 ProcessGPOs: No WMI logging done in this policy cycle.
GPSVC(174.b30) 12:05:37:216 Application complete with bConnectivityFailure = 0.
GPSVC(174.b30) 12:05:37:216 Application complete with bConnectivityFailure = 0.
GPSVC(174.cdc) 12:05:37:372 Target = S-1-5-21-4237697578-1646222034-3433114108-1106
GPSVC(174.cdc) 12:05:37:372 Target = S-1-5-21-4237697578-1646222034-3433114108-1106, ChangeNumber 0
GPSVC(174.cdc) 12:06:01:131 Waiting for user group policy thread to terminate.
GPSVC(174.cdc) 12:06:01:131 User group policy thread has terminated.
GPSVC(174.cdc) 12:06:01:131 Setting GPsession state = 0
GPSVC(174.cdc) 12:06:01:131 Deleting critical section for UserSid <S-1-5-21-4237697578-1646222034-3433114108-1106>
GPSVC(174.cdc) 12:06:01:131 Deleting sidString <S-1-5-21-4237697578-1646222034-3433114108-1106>


Der Server ist natürlich in der OU auf die die Richtlinien angewendet werden sollen. Der Loopbackverarbeitungsmodus ist auch aktiviert. Rechte auf die Richtlinie sind auch außreichend vorhanden. Die Richtlinie macht auch nichts besonderes (vorallem seid dem ich alles wieder deaktiviert habe ;) )

56aa22942d02935e0e8497446919e865

Ich kann den Fehler einfach nicht eingrenzen. In den Windows Logs steht nichts. Keine Fehlermeldung, gar nichts. Komisch ist allerdings auch, dass die Gruppenrichtlinie gar nicht von gpresult angezeigt wird. Weder unter applied noch unter not applied.

Was mache ich falsch?!

Content-Key: 134687

Url: https://administrator.de/contentid/134687

Ausgedruckt am: 28.03.2024 um 10:03 Uhr

Mitglied: 48507
48507 29.01.2010 um 13:43:59 Uhr
Goto Top
- mimoon.de ist eine schlechte Wahl für einen Domänennamen
- Meldet ihr euch als Domänen-Benutzer auf dem TS an? Wenn ja, brauchst du den Loopbackverarbeitungsmodus: http://www.gruppenrichtlinien.de/index.html?/HowTo/Terminal_Server.htm
Mitglied: destroyed
destroyed 29.01.2010 um 13:59:12 Uhr
Goto Top
Der Server ist natürlich in der OU auf die die Richtlinien angewendet werden sollen. Der Loopbackverarbeitungsmodus ist auch aktiviert. Rechte auf die Richtlinie sind auch außreichend vorhanden.

Der User ist natürlich ein Domänenbenutzer. Das Anmelden klappt auch ohne Probleme, allerdings zieht er keine Richtlinien.


Der FQDN ist intra.mimoon.de da mimoon.de für extern gehostete Emails ist. Die DNS auflösung ist aber denke ich mal nicht das Problem da hier alles funktioniert..


GPOTool.exe zeigt folgendes auf dem DC:

Validating DCs...
Available DCs:
pdc.intra.mimoon.de
Searching for policies...
Found 6 policies
Policy {0EFB2434-99DF-4976-8D72-66EB8649EA12}
Friendly name: terminal server
Policy OK
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Friendly name: Default Domain Policy
Policy OK
Policy {5445F66F-FAFA-4EBF-A91C-BAE837FB0BD6}
Friendly name: Windows Update
Policy OK
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Friendly name: Default Domain Controllers Policy
Policy OK
Policy {85DAA982-7500-49C6-9AE8-B37973B43044}
Friendly name: ts_general_lockdown
Policy OK
Policy {EC2A2583-03F8-4099-A4F5-E0EB7BEDFC2E}
Friendly name: test
Policy OK

Policies OK


Bin immoment echt ratlos...
Mitglied: 48507
48507 29.01.2010 um 16:02:45 Uhr
Goto Top
Führe auf dem TS rsop.msc als Benutzer aus. Sorry, hatte dir vorhin den falschen Link gegeben, hier ist der richtige: http://www.gruppenrichtlinien.de/index.html?/Grundlagen/Loopback_Verarb ...
Mitglied: destroyed
destroyed 29.01.2010 um 16:22:23 Uhr
Goto Top
rsop.msc zeigt mir den Fehler:

The PSoP snap-in was unable to generate the computer or user's data due to insufficient permissions. Danach Zeigt er mir nur den "Benutzer Zweig" an. Evtl wird deshalb der Loopbackverarbeitungsmodus nicht aktiviert?! Der Steht ja unter Computer wo er ja anscheinen keinen zugriff drauf hat.
Mitglied: 48507
48507 29.01.2010 um 17:03:46 Uhr
Goto Top
Zitat von @destroyed:
rsop.msc zeigt mir den Fehler:

The PSoP snap-in was unable to generate the computer or user's data due to insufficient permissions.

Das ist normal. Die Computereinstellungen gehen den Benutzer nichts an, sofern er kein Admin ist.


Also ich habe zwei GPOs für den Terminalserver (mit der OU verknüpft):

Reihenfolge:

TerminalBenutzerGPO (mit Computer- und Benutzereinstellungen)
LoopbackGPO (Einzige Einstellung: Computerkonfiguration / Adm Vorlagen / System/Gruppenrichtlinien / Loopbackverarbeitungsmodus für Benutzergruppenrichtlinie: Aktiviert, Modus: Ersetzen).
Mitglied: destroyed
destroyed 29.01.2010 um 17:31:40 Uhr
Goto Top
Es schein zu funktionieren. Ich hab für den Loopbackverarbeitungsmodus eine Extra OU erstellt und diese als 1. Abarbeiten lassen. Wenn es am Montag immer noch funktioniert, sehe ich es als gelöst an. ;) Soweit schon mal danke für deine Hilfe @ spytnik.