WSUS
.. WSUS FAQ
.. WSUS on SBS
.. WSUS Troubleshooting
.. WSUS News Groups
.. Known WSUS Issues
.. WSUS Links
.. WSUS Wish List
WSUS Documents
.. WSUS Deployment Guide
.. WSUS Installation Guide
.. WSUS Release Notes
.. WSUS Best Practice
SUS
.. SUS FAQ
.. What Is SUS
.. SUS Troubleshooting
.. SUS Links
.. SUS Known Issues
.. SUS FAQ
.. What Is SUS
.. SUS Troubleshooting
.. SUS Links
.. SUS Known Issues
Wiki Community
.. Wiki Contributors
.. I Love WSUS
.. WSUS Wiki Diary
.. Wiki Statistics
.. To Do Page
Miscellaneous Stuff
.. Other Resources
.. Do You Know?
..[[windows backup software]]
Troubleshooting Group Policy (GPO) |
Troubleshooting Group Policy settings for Automatic Updates using Software Update Services (SUS)
This article explains Troubleshooting Group Policy for Automatic Updates using Software Update Services, SUS.
First, the basics:
1. The policy settings for SUS are applicable to computers only. They will have no effect if they are in a GPO that is not targetted at users.
2. Make sure you have a good & healthy DNS. By that it means, your HOST RECORD (A) should exist in your local DNS Server. Run NSLOOKUP to see if the DNS is responding properly.
3. Also, you should be able to resolve YOUR-SUSSERVER-NETBIOSNAME from the workstation. Do PING -a YOUR-SUSSERVER-IP ADDRESS
4. There are some free tools available from Microsoft which will help troubleshooting issues with Group Policy..
I will explain them in detail.
1. GPMC: Group Policy Management Console with Service Pack 1
If you are doing ANYTHING with Group Policy you should absolutely be using GPMC! Install it now.
GPMC simplifies the management of Group Policy by making it easier to understand, deploy, manage, and troubleshoot Group Policy implementations. GPMC also enables automation of Group Policy operations via scripting.
Download:
GPMC can be used to manage Windows Server 2003 as well as Windows 2000-based Group Policy implementations. Customers who have at least one valid license of Windows Server 2003 or Windows 2000 Server can obtain and use an unlimited number of copies of GPMC. Please see the End User License
Key features delivered via GPMC include:
A unified graphical user interface (GUI) that makes Group Policy much easier to use.
Backup/restore of Group Policy objects (GPOs).
Import/export and copy/paste of GPOs and Windows Management Instrumentation (WMI) filters.
Simplified management of Group Policy–related security.
HTML reporting for GPO settings and Resultant Set of Policy (RSoP) data.
Scripting of Group Policy related tasks that are exposed within this tool (not scripting of settings within a GPO).
2. GPRESULT: Gpresult.exe: Group Policy Results
This command-line tool displays information about the result Group Policy has had on the current computer and logged-on user.
Download: http://download.microsoft.com/download/win2000platform/gpresult/1.0/NT5/EN-US/gpresult.exe
GPResult provides the following general information:
Operating System
Type (Professional, Server, Domain Controller).
Build number and Service Pack details.
Whether Terminal Services is installed and, if so, the mode it is using.
User Information
User name and location in Active Directory (if applicable).
Domain name and type (Windows 2000 or Windows NT).
Site name.
Whether the user has a local or roaming profile and location of the profile.
Security group membership.
Security privileges.
Computer Information
Computer name and location in Active Directory (if applicable).
Domain name and type (Windows 2000 or Windows NT).
Site name.
GPResult also provides the following information about Group Policy:
The last time policy was applied and the domain controller that applied policy, for the user and computer.
The complete list of applied Group Policy objects and their details, including a summary of the extensions that each Group Policy object contains.
Registry settings that were applied and their details.
Folders that are re-directed and their details.
Software management information detailing assigned and published applications.
Disk quota information.
IP Security settings.
Scripts.
3. Gpotool: Gpotool.exe is an advanced Group Policy troubleshooting tool that's included in the Windows Server 2003 and Windows 2000 Server resource kits.
You can find information about the Windows 2003 version of Gpotool in the resource kit and at
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/gpotool-o.asp
Download GPO Tool:
Gpotool performs the following tasks:
- checks the consistency of Group Policy Objects (GPOs) between theSysvol- and Active Directory (AD)-based portions of GPOs
- Checks GPO replication
- Searches GPOs
- Targets specific domain controllers (DCs) to allow testing of specific DC Group Policy status
- Displays GPO information
- Checks cross-domain GPOs
4. FAZAM 2000, Reduced-Functionality Version:
This third-party GUI tool extends the Group Policy management functionality of Windows 2000.
Download: http://download.microsoft.com/download/win2000platform/fazam/1.00.0.1/nt5/en-us/fazam_setup.exe
This reduced-function version of the tool offers the following features:
Central user interface for managing Group Policy objects (GPOs) that provides a hierarchical view of policies associated with organizational units (OUs) and domains.
Resultant Set of Policies (RSoP) feature that enables the display of applicable policies for software installation, registry settings, folder redirection, and scripts.
Simulation of scenarios in which a computer or a user moves from one OU to another and analysis of the RSoPs.
Diagnostics that show the histories of applied GPOs.
Search feature for GPOs based on the globally unique identifier (GUID) and GPO name.
Backup of GPO settings.
Restoration of GPO settings for a single domain.
Partial reporting of registry settings.
This version of FAZAM 2000 is designed for small enterprises, Windows 2000 deployment test labs, and single domains with fewer than 500 users or computers.
Technical Resources for IT Pros: -
Fourteen-part Webcast Series on Group Policy:
This
series of Webcasts give you the chance to understand Group Policy in
detail through the use of presentations, virtual sessions, and live
demos.
Where to find the non-Microsoft tools and products that work with and extend Group Policy:
Microsoft "landing" pages for Group Policy:
Group Policy Support pages:
Links to White Papers and KB articles of interest:
White Paper: Troubleshooting Group Policy in Windows 2000:
http://support.microsoft.com/default.aspx?scid=kb;en-us;810739
- Group policies are not applied the way you expect; "Event ID 1058" and "Event ID 1030" errors in the application log:
http://support.microsoft.com/default.aspx?scid=kb;en-us;314494 - Client computers record Event ID 1030 and Event ID 1058 when DFS is not started on a Windows 2000-based domain controller:
http://support.microsoft.com/default.aspx?scid=kb;en-us;834649 - Group Policy processing does not work and events 1030 and 1058 are logged in the application log of a domain controller:
http://support.microsoft.com/default.aspx?scid=kb;en-us;842804 - Troubleshooting Group Policy application problems:
http://support.microsoft.com/default.aspx?scid=kb;en-us;250842 - Group Policy Is Not Applied and You Receive No Error Message:
http://support.microsoft.com/default.aspx?scid=kb;en-us;310741 - Important issue with XP SP2 .adm fileshttp://support.microsoft.com/default.aspx?kbid=842933
Last Modified 3/26/05 11:23 AM