question

manjotsc avatar image
0 Votes"
manjotsc asked FanFan-MSFT answered

Cannot Update Group Policy

Hi,
I am trying to update group policy on computers, I am getting this same error on all computers. I am to ping Windows Server from all computers. Need Help

Computer policy could not be updated successfully. The following errors were encountered:

The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windows will automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful.
User Policy could not be updated successfully. The following errors were encountered:

The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windows will automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful.

windows-group-policy
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

FanFan-MSFT avatar image
0 Votes"
FanFan-MSFT answered FanFan-MSFT edited

Hi,
What's the result when run command :ipconfig /all and command gpresult /h report.html on the computers.
I would recommend you check if the DNS server is working well.
You can try to check if the DCs are working well by command :
Dcdiag /v >c:\dcdiag1.log
Repadmin /showrepl >C:\repl.txt
Repadmin /showreps *
ipconfig /all > C:\dc1.txt

Best Regards,

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

manjotsc avatar image
0 Votes"
manjotsc answered manjotsc edited

@FanFan-MSFT I am not able run commands, I am running windows 10 and windows server 2019


80943-screenshot-2021-03-23-222743.png



· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,

Run command following on the DCs
You can try to check if the DCs are working well by command :
Dcdiag /v >c:\dcdiag1.log
Repadmin /showrepl >C:\repl.txt
Repadmin /showreps *
ipconfig /all > C:\dc1.txt

Run the following command on the members
ipconfig /all and comm
gpresult /h report.html

0 Votes 0 ·
FanFan-MSFT avatar image
0 Votes"
FanFan-MSFT answered

Hi,
Due to security reason , i would delete the logs you shared here!

Would you please tell how many DCs do you have in your domain?
First of all , let's check the ip configuration.
It seems there are 2 IP address for one DC, and the dns configuration also a little strange .Please configure it to:
Dc should have a static IP address .
The dns server for the DC: the primary one point to other DCs' ip address, the second one point to itself :127.0.0.1

Best Regards,

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

manjotsc avatar image
0 Votes"
manjotsc answered FanFan-MSFT commented

@FanFan-MSFT I have removed the second IP, Now only IP I have is 192.168.40.4, the error I am getting is only for computer policy and user policy seems to be working fine.

SupportInfo1 1
SupportInfo2 3044
ProcessingMode 0
ProcessingTimeInMilliseconds 343
ErrorCode 8341
ErrorDescription A directory service error has occurred.
DCName \\SERVER.manjot.net

81562-chrome-ji165d0qqg.png



· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Now, the ipconfig /all shows everything correctly, right?
Did you run the cmd as administrator when run gpresult /h command?
Best Regards,

0 Votes 0 ·
manjotsc avatar image
0 Votes"
manjotsc answered

@FanFan-MSFT

https://drive.google.com/uc?export=download&id=10zJEWKYvbfOxVeDQmjfx7VZBRUNQc4Tp

On Client

C:\Users\cloud>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : room
Primary Dns Suffix . . . . . . . : manjot.net
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : manjot.net

Ethernet adapter Ethernet 2:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : TAP-Windows Adapter V9
Physical Address. . . . . . . . . : 00-FF-3A-94-8D-E7
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Ethernet 4:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller #2
Physical Address. . . . . . . . . : B8-97-5A-47-0C-A7
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.40.37(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.40.1
DNS Servers . . . . . . . . . . . : 192.168.40.4
192.168.40.1
NetBIOS over Tcpip. . . . . . . . : Enabled

On Server

C:\Users\server>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : SERVER
Primary Dns Suffix . . . . . . . : manjot.net
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : manjot.net

Ethernet adapter Ethernet:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) 82579LM Gigabit Network Connection
Physical Address. . . . . . . . . : 18-03-73-DC-BD-76
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.40.4(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.40.1
DNS Servers . . . . . . . . . . . : 127.0.0.1
192.168.40.1
NetBIOS over Tcpip. . . . . . . . : Enabled




5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

manjotsc avatar image
0 Votes"
manjotsc answered manjotsc published

@FanFan-MSFT

https://drive.google.com/uc?export=download&id=10zJEWKYvbfOxVeDQmjfx7VZBRUNQc4Tp

On Client

C:\Users\cloud>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : room
Primary Dns Suffix . . . . . . . : manjot.net
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : manjot.net

Ethernet adapter Ethernet 2:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : TAP-Windows Adapter V9
Physical Address. . . . . . . . . : 00-FF-3A-94-8D-E7
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Ethernet 4:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller #2
Physical Address. . . . . . . . . : B8-97-5A-47-0C-A7
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.40.37(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.40.1
DNS Servers . . . . . . . . . . . : 192.168.40.4
192.168.40.1
NetBIOS over Tcpip. . . . . . . . : Enabled

On Server

C:\Users\server>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : SERVER
Primary Dns Suffix . . . . . . . : manjot.net
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : manjot.net

Ethernet adapter Ethernet:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) 82579LM Gigabit Network Connection
Physical Address. . . . . . . . . : 18-03-73-DC-BD-76
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.40.4(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.40.1
DNS Servers . . . . . . . . . . . : 127.0.0.1
192.168.40.1
NetBIOS over Tcpip. . . . . . . . : Enabled




5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

FanFan-MSFT avatar image
0 Votes"
FanFan-MSFT answered

Hi,
Would you please tell what's the ip address :192.168.40.1 used for?
I found it act as a DNS server too.
Best Regards,

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.