Policy mismatch, but I don't see it

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

GPOTool reports that we have a policy mismatch, but I don't see it. I
looked at GPT.ini on both servers list this:

[General]
Version=15466574

Below are the relevant lines from GPOTool of the two conflicting
servers. I don't see anything different though.

Steve

============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Error: Version mismatch on apple.omni.imsweb.com, DS=20250702,
sysvol=15466574
Error: Version mismatch on stone.omni.imsweb.com, DS=20250702,
sysvol=15466574
Details:
------------------------------------------------------------
DC: apple.omni.imsweb.com
Friendly name: Default Domain Policy
Created: 1/17/2002 8:58:44 PM
Changed: 10/27/2004 6:56:26 PM
DS version: 309(user) 78(machine)
Sysvol version: 236(user) 78(machine)
Flags: 0
User extensions:
[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4
}][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB960
3F}]
Machine extensions:
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3
}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F8
3A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79
F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{C6DC5466-785A-11D2-84D0-00C04F
B169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: stone.omni.imsweb.com
Friendly name: Default Domain Policy
Created: 1/17/2002 8:58:44 PM
Changed: 10/27/2004 6:59:06 PM
DS version: 309(user) 78(machine)
Sysvol version: 236(user) 78(machine)
Flags: 0
User extensions:
[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4
}][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB960
3F}]
Machine extensions:
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3
}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F8
3A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79
F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{C6DC5466-785A-11D2-84D0-00C04F
B169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
Functionality version: 2

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

You should make a benign change to the a user policy to hopefully help the
DS SYSVOL version get up to date with the DS version.
This will bump the DS version number, which should cause the sysvol version
to update settings and follow suite with the version number.

"Steve Stormont" <s.stormont@verizon.net> wrote in message
news:uBcvDbSwEHA.612@TK2MSFTNGP15.phx.gbl...
> GPOTool reports that we have a policy mismatch, but I don't see it. I
> looked at GPT.ini on both servers list this:
>
> [General]
> Version=15466574
>
> Below are the relevant lines from GPOTool of the two conflicting
> servers. I don't see anything different though.
>
> Steve
>
> ============================================================
> Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
> Error: Version mismatch on apple.omni.imsweb.com, DS=20250702,
> sysvol=15466574
> Error: Version mismatch on stone.omni.imsweb.com, DS=20250702,
> sysvol=15466574
> Details:
> ------------------------------------------------------------
> DC: apple.omni.imsweb.com
> Friendly name: Default Domain Policy
> Created: 1/17/2002 8:58:44 PM
> Changed: 10/27/2004 6:56:26 PM
> DS version: 309(user) 78(machine)
> Sysvol version: 236(user) 78(machine)
> Flags: 0
> User extensions:
> [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4
> }][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB960
> 3F}]
> Machine extensions:
> [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3
> }{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F8
> 3A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79
> F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{C6DC5466-785A-11D2-84D0-00C04F
> B169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
> Functionality version: 2
> ------------------------------------------------------------
> ------------------------------------------------------------
> DC: stone.omni.imsweb.com
> Friendly name: Default Domain Policy
> Created: 1/17/2002 8:58:44 PM
> Changed: 10/27/2004 6:59:06 PM
> DS version: 309(user) 78(machine)
> Sysvol version: 236(user) 78(machine)
> Flags: 0
> User extensions:
> [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4
> }][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB960
> 3F}]
> Machine extensions:
> [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3
> }{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F8
> 3A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79
> F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{C6DC5466-785A-11D2-84D0-00C04F
> B169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
> Functionality version: 2
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

I did. Now the error that I am getting says:

Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Error: apple.omni.imsweb.com - grape.omni.imsweb.com sysvol mismatch

We have 3 domain controllers. The error above is complaining about one
of the controllers from the first error and the third domain controller that
until now hadn't been involved.

Steve


"Glenn L" <the.only(delete)@gmail.com> wrote in message
news:%23VsJcfWwEHA.4028@TK2MSFTNGP15.phx.gbl...
> You should make a benign change to the a user policy to hopefully help the
> DS SYSVOL version get up to date with the DS version.
> This will bump the DS version number, which should cause the sysvol
version
> to update settings and follow suite with the version number.
>
> "Steve Stormont" <s.stormont@verizon.net> wrote in message
> news:uBcvDbSwEHA.612@TK2MSFTNGP15.phx.gbl...
> > GPOTool reports that we have a policy mismatch, but I don't see it.
I
> > looked at GPT.ini on both servers list this:
> >
> > [General]
> > Version=15466574
> >
> > Below are the relevant lines from GPOTool of the two conflicting
> > servers. I don't see anything different though.
> >
> > Steve
> >
> > ============================================================
> > Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
> > Error: Version mismatch on apple.omni.imsweb.com, DS=20250702,
> > sysvol=15466574
> > Error: Version mismatch on stone.omni.imsweb.com, DS=20250702,
> > sysvol=15466574
> > Details:
> > ------------------------------------------------------------
> > DC: apple.omni.imsweb.com
> > Friendly name: Default Domain Policy
> > Created: 1/17/2002 8:58:44 PM
> > Changed: 10/27/2004 6:56:26 PM
> > DS version: 309(user) 78(machine)
> > Sysvol version: 236(user) 78(machine)
> > Flags: 0
> > User extensions:
> >
[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4
>
> }][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB9
60
> > 3F}]
> > Machine extensions:
> >
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3
>
> }{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79
F8
> >
3A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79
> >
F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{C6DC5466-785A-11D2-84D0-00C04F
> > B169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
> > Functionality version: 2
> > ------------------------------------------------------------
> > ------------------------------------------------------------
> > DC: stone.omni.imsweb.com
> > Friendly name: Default Domain Policy
> > Created: 1/17/2002 8:58:44 PM
> > Changed: 10/27/2004 6:59:06 PM
> > DS version: 309(user) 78(machine)
> > Sysvol version: 236(user) 78(machine)
> > Flags: 0
> > User extensions:
> >
[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4
>
> }][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB9
60
> > 3F}]
> > Machine extensions:
> >
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3
>
> }{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79
F8
> >
3A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79
> >
F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{C6DC5466-785A-11D2-84D0-00C04F
> > B169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
> > Functionality version: 2
> >
> >
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Steve,

It looks like you are having an issue with the mismatch ( okay, that is
obvious! ). Let's do a really quick test to see where the problem is.

Create a test user account object but do not mail-enable it....just create
the user account object. After a few minutes do you see this user account
object on DC02 and DC03? You should.

Now, open up NotePad and create a very simple .txt file. I usually like to
call it something like 'createdonDC01.txt' and the body of the text is
usually something like "created on DC01 on Wednesday November 03, 2004 at
10:09AM". I put that .txt file in the SYSVOL shared folder of DC01. It
should quickly appear in the SYSVOL shared folders on all of the other
Domain Controllers in the Domain.

Glenn's idea is a good one. I am simply trying to make sure that
replication ( on both sides ) is working. You see, GPOs are actually two
distinct halves: one half lives in Active Directory ( the Group Policy
Container, or GPC ) and the other half lives in the SYSVOL ( the Group
Policy Template, or GPT ). Both are subject to their replication cycles (
the GPC to Active Directory replication and the GPT to FRS replication ).

If there is a problem then I might suggest that you run dcdiag /c /v on all
of the Domain Controllers. This will give us an idea of what is going on.
I suspect that you might have done this already?

HTH,

Cary

"Steve Stormont" <s.stormont@verizon.net> wrote in message
news:Onv1OdawEHA.2572@tk2msftngp13.phx.gbl...
> I did. Now the error that I am getting says:
>
> Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
> Error: apple.omni.imsweb.com - grape.omni.imsweb.com sysvol mismatch
>
> We have 3 domain controllers. The error above is complaining about
one
> of the controllers from the first error and the third domain controller
that
> until now hadn't been involved.
>
> Steve
>
>
> "Glenn L" <the.only(delete)@gmail.com> wrote in message
> news:%23VsJcfWwEHA.4028@TK2MSFTNGP15.phx.gbl...
> > You should make a benign change to the a user policy to hopefully help
the
> > DS SYSVOL version get up to date with the DS version.
> > This will bump the DS version number, which should cause the sysvol
> version
> > to update settings and follow suite with the version number.
> >
> > "Steve Stormont" <s.stormont@verizon.net> wrote in message
> > news:uBcvDbSwEHA.612@TK2MSFTNGP15.phx.gbl...
> > > GPOTool reports that we have a policy mismatch, but I don't see it.
> I
> > > looked at GPT.ini on both servers list this:
> > >
> > > [General]
> > > Version=15466574
> > >
> > > Below are the relevant lines from GPOTool of the two conflicting
> > > servers. I don't see anything different though.
> > >
> > > Steve
> > >
> > > ============================================================
> > > Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
> > > Error: Version mismatch on apple.omni.imsweb.com, DS=20250702,
> > > sysvol=15466574
> > > Error: Version mismatch on stone.omni.imsweb.com, DS=20250702,
> > > sysvol=15466574
> > > Details:
> > > ------------------------------------------------------------
> > > DC: apple.omni.imsweb.com
> > > Friendly name: Default Domain Policy
> > > Created: 1/17/2002 8:58:44 PM
> > > Changed: 10/27/2004 6:56:26 PM
> > > DS version: 309(user) 78(machine)
> > > Sysvol version: 236(user) 78(machine)
> > > Flags: 0
> > > User extensions:
> > >
>
[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4
> >
>
> }][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB9
> 60
> > > 3F}]
> > > Machine extensions:
> > >
>
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3
> >
>
> }{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79
> F8
> > >
>
3A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79
> > >
>
F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{C6DC5466-785A-11D2-84D0-00C04F
> > > B169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
> > > Functionality version: 2
> > > ------------------------------------------------------------
> > > ------------------------------------------------------------
> > > DC: stone.omni.imsweb.com
> > > Friendly name: Default Domain Policy
> > > Created: 1/17/2002 8:58:44 PM
> > > Changed: 10/27/2004 6:59:06 PM
> > > DS version: 309(user) 78(machine)
> > > Sysvol version: 236(user) 78(machine)
> > > Flags: 0
> > > User extensions:
> > >
>
[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4
> >
>
> }][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB9
> 60
> > > 3F}]
> > > Machine extensions:
> > >
>
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3
> >
>
> }{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79
> F8
> > >
>
3A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79
> > >
>
F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{C6DC5466-785A-11D2-84D0-00C04F
> > > B169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
> > > Functionality version: 2
> > >
> > >
> >
> >
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

I figured it out. I followed the steps here and it fixed it right up.

http://www.uta.edu/oit/how-to/docs/dcreplication1.php

Steve

"Cary Shultz [A.D. MVP]" <cwshultz@mvps.org> wrote in message
news:OzqTngbwEHA.1392@tk2msftngp13.phx.gbl...
> Steve,
>
> It looks like you are having an issue with the mismatch ( okay, that is
> obvious! ). Let's do a really quick test to see where the problem is.
>
> Create a test user account object but do not mail-enable it....just create
> the user account object. After a few minutes do you see this user account
> object on DC02 and DC03? You should.
>
> Now, open up NotePad and create a very simple .txt file. I usually like
to
> call it something like 'createdonDC01.txt' and the body of the text is
> usually something like "created on DC01 on Wednesday November 03, 2004 at
> 10:09AM". I put that .txt file in the SYSVOL shared folder of DC01. It
> should quickly appear in the SYSVOL shared folders on all of the other
> Domain Controllers in the Domain.
>
> Glenn's idea is a good one. I am simply trying to make sure that
> replication ( on both sides ) is working. You see, GPOs are actually two
> distinct halves: one half lives in Active Directory ( the Group Policy
> Container, or GPC ) and the other half lives in the SYSVOL ( the Group
> Policy Template, or GPT ). Both are subject to their replication cycles (
> the GPC to Active Directory replication and the GPT to FRS replication ).
>
> If there is a problem then I might suggest that you run dcdiag /c /v on
all
> of the Domain Controllers. This will give us an idea of what is going on.
> I suspect that you might have done this already?
>
> HTH,
>
> Cary
>
> "Steve Stormont" <s.stormont@verizon.net> wrote in message
> news:Onv1OdawEHA.2572@tk2msftngp13.phx.gbl...
> > I did. Now the error that I am getting says:
> >
> > Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
> > Error: apple.omni.imsweb.com - grape.omni.imsweb.com sysvol mismatch
> >
> > We have 3 domain controllers. The error above is complaining about
> one
> > of the controllers from the first error and the third domain controller
> that
> > until now hadn't been involved.
> >
> > Steve
> >
> >
> > "Glenn L" <the.only(delete)@gmail.com> wrote in message
> > news:%23VsJcfWwEHA.4028@TK2MSFTNGP15.phx.gbl...
> > > You should make a benign change to the a user policy to hopefully help
> the
> > > DS SYSVOL version get up to date with the DS version.
> > > This will bump the DS version number, which should cause the sysvol
> > version
> > > to update settings and follow suite with the version number.
> > >
> > > "Steve Stormont" <s.stormont@verizon.net> wrote in message
> > > news:uBcvDbSwEHA.612@TK2MSFTNGP15.phx.gbl...
> > > > GPOTool reports that we have a policy mismatch, but I don't see
it.
> > I
> > > > looked at GPT.ini on both servers list this:
> > > >
> > > > [General]
> > > > Version=15466574
> > > >
> > > > Below are the relevant lines from GPOTool of the two conflicting
> > > > servers. I don't see anything different though.
> > > >
> > > > Steve
> > > >
> > > > ============================================================
> > > > Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
> > > > Error: Version mismatch on apple.omni.imsweb.com, DS=20250702,
> > > > sysvol=15466574
> > > > Error: Version mismatch on stone.omni.imsweb.com, DS=20250702,
> > > > sysvol=15466574
> > > > Details:
> > > > ------------------------------------------------------------
> > > > DC: apple.omni.imsweb.com
> > > > Friendly name: Default Domain Policy
> > > > Created: 1/17/2002 8:58:44 PM
> > > > Changed: 10/27/2004 6:56:26 PM
> > > > DS version: 309(user) 78(machine)
> > > > Sysvol version: 236(user) 78(machine)
> > > > Flags: 0
> > > > User extensions:
> > > >
> >
>
[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4
> > >
> >
>
> }][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB9
> > 60
> > > > 3F}]
> > > > Machine extensions:
> > > >
> >
>
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3
> > >
> >
>
> }{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79
> > F8
> > > >
> >
>
3A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79
> > > >
> >
>
F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{C6DC5466-785A-11D2-84D0-00C04F
> > > > B169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
> > > > Functionality version: 2
> > > > ------------------------------------------------------------
> > > > ------------------------------------------------------------
> > > > DC: stone.omni.imsweb.com
> > > > Friendly name: Default Domain Policy
> > > > Created: 1/17/2002 8:58:44 PM
> > > > Changed: 10/27/2004 6:59:06 PM
> > > > DS version: 309(user) 78(machine)
> > > > Sysvol version: 236(user) 78(machine)
> > > > Flags: 0
> > > > User extensions:
> > > >
> >
>
[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4
> > >
> >
>
> }][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB9
> > 60
> > > > 3F}]
> > > > Machine extensions:
> > > >
> >
>
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3
> > >
> >
>
> }{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79
> > F8
> > > >
> >
>
3A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79
> > > >
> >
>
F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{C6DC5466-785A-11D2-84D0-00C04F
> > > > B169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
> > > > Functionality version: 2
> > > >
> > > >
> > >
> > >
> >
> >
>
>