Slow link over VPN not updating GP settings

[Nathan]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi,

We have a couple of sites that connect to our site over a VPN (Cisco PIX at
both ends) but the GP settings aren't being applied to the remote PCs.

I have added registry settings for slow links but nothing. I have edited the
GP for slow links. Nothing

I can ping the DC and it me, but if I try to ping using the MS test "ping -l
2048 xxx.xxx.xxx.xxx" i get no reponse from the pings. too slow.

How can I get this working?

The only thing that I think I might have a little screwed up are the sites
in the Sites and Services. How important are these.

How do these get setup? For two sites, one with a DC and the other without,
how would you setup sites and services. The intersite transport?, the
subnets?

Any help appreciated.

TIA

Nathan

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi Nathan.

I think the problem is, that once a remote pc's GPO inheritance is blocked
because of the slow link detection, it will not "listen" to new GPO settings
from your AD.

For testing: Is it possible for you to get one of the remote PC's logged on
to your LAN, make sure the GPO are replicated, and then log on remote again,
to see if the problem is solved on that PC?

Hope, this was helpfull

Br. Carsten

"Nathan" skrev:

> Hi,
>
> We have a couple of sites that connect to our site over a VPN (Cisco PIX at
> both ends) but the GP settings aren't being applied to the remote PCs.
>
> I have added registry settings for slow links but nothing. I have edited the
> GP for slow links. Nothing
>
> I can ping the DC and it me, but if I try to ping using the MS test "ping -l
> 2048 xxx.xxx.xxx.xxx" i get no reponse from the pings. too slow.
>
> How can I get this working?
>
> The only thing that I think I might have a little screwed up are the sites
> in the Sites and Services. How important are these.
>
> How do these get setup? For two sites, one with a DC and the other without,
> how would you setup sites and services. The intersite transport?, the
> subnets?
>
> Any help appreciated.
>
> TIA
>
> Nathan
>
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi,

Thanks for the response.

This could be possible.

I am unable to log the PC onto the LAN locally as the site is very remote.
Do you know where this setting maybe stored that stops the future
downloading of GP?

TIA

Nathan




"carsten m" <carstenm@discussions.microsoft.com> wrote in message
news:4F8C5C73-1E42-477A-9742-CE8B30BA2D56@microsoft.com...
> Hi Nathan.
>
> I think the problem is, that once a remote pc's GPO inheritance is blocked
> because of the slow link detection, it will not "listen" to new GPO
> settings
> from your AD.
>
> For testing: Is it possible for you to get one of the remote PC's logged
> on
> to your LAN, make sure the GPO are replicated, and then log on remote
> again,
> to see if the problem is solved on that PC?
>
> Hope, this was helpfull
>
> Br. Carsten
>
> "Nathan" skrev:
>
>> Hi,
>>
>> We have a couple of sites that connect to our site over a VPN (Cisco PIX
>> at
>> both ends) but the GP settings aren't being applied to the remote PCs.
>>
>> I have added registry settings for slow links but nothing. I have edited
>> the
>> GP for slow links. Nothing
>>
>> I can ping the DC and it me, but if I try to ping using the MS test
>> "ping -l
>> 2048 xxx.xxx.xxx.xxx" i get no reponse from the pings. too slow.
>>
>> How can I get this working?
>>
>> The only thing that I think I might have a little screwed up are the
>> sites
>> in the Sites and Services. How important are these.
>>
>> How do these get setup? For two sites, one with a DC and the other
>> without,
>> how would you setup sites and services. The intersite transport?, the
>> subnets?
>>
>> Any help appreciated.
>>
>> TIA
>>
>> Nathan
>>
>>
>>

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi again.

You can't change the setting locally. Maybe you could disable the policy, so
that the pc's default value would be used. Otherwise, I don't reallyt know
waht to do.

Let me know how it goes.

Br. Carsten


"Nathan Simpson" wrote:

> Hi,
>
> Thanks for the response.
>
> This could be possible.
>
> I am unable to log the PC onto the LAN locally as the site is very remote.
> Do you know where this setting maybe stored that stops the future
> downloading of GP?
>
> TIA
>
> Nathan
>
>
>
>
> "carsten m" <carstenm@discussions.microsoft.com> wrote in message
> news:4F8C5C73-1E42-477A-9742-CE8B30BA2D56@microsoft.com...
> > Hi Nathan.
> >
> > I think the problem is, that once a remote pc's GPO inheritance is blocked
> > because of the slow link detection, it will not "listen" to new GPO
> > settings
> > from your AD.
> >
> > For testing: Is it possible for you to get one of the remote PC's logged
> > on
> > to your LAN, make sure the GPO are replicated, and then log on remote
> > again,
> > to see if the problem is solved on that PC?
> >
> > Hope, this was helpfull
> >
> > Br. Carsten
> >
> > "Nathan" skrev:
> >
> >> Hi,
> >>
> >> We have a couple of sites that connect to our site over a VPN (Cisco PIX
> >> at
> >> both ends) but the GP settings aren't being applied to the remote PCs.
> >>
> >> I have added registry settings for slow links but nothing. I have edited
> >> the
> >> GP for slow links. Nothing
> >>
> >> I can ping the DC and it me, but if I try to ping using the MS test
> >> "ping -l
> >> 2048 xxx.xxx.xxx.xxx" i get no reponse from the pings. too slow.
> >>
> >> How can I get this working?
> >>
> >> The only thing that I think I might have a little screwed up are the
> >> sites
> >> in the Sites and Services. How important are these.
> >>
> >> How do these get setup? For two sites, one with a DC and the other
> >> without,
> >> how would you setup sites and services. The intersite transport?, the
> >> subnets?
> >>
> >> Any help appreciated.
> >>
> >> TIA
> >>
> >> Nathan
> >>
> >>
> >>
>
>
>

 

[Nathan]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

changing the registry entries

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"GroupPolicyMinTransferRate"=dword:00000000


Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System]
"GroupPolicyMinTransferRate"=dword:00000000


fixed the problem. I thought I changed this before but nothing happened, but
now things are working ok

thanks for your help

Nathan

"carsten m" <carstenm@discussions.microsoft.com> wrote in message
news:5DA227B1-3CE6-4741-B569-FCABFDE226AE@microsoft.com...
> Hi again.
>
> You can't change the setting locally. Maybe you could disable the policy,
> so
> that the pc's default value would be used. Otherwise, I don't reallyt know
> waht to do.
>
> Let me know how it goes.
>
> Br. Carsten
>
>
> "Nathan Simpson" wrote:
>
>> Hi,
>>
>> Thanks for the response.
>>
>> This could be possible.
>>
>> I am unable to log the PC onto the LAN locally as the site is very
>> remote.
>> Do you know where this setting maybe stored that stops the future
>> downloading of GP?
>>
>> TIA
>>
>> Nathan
>>
>>
>>
>>
>> "carsten m" <carstenm@discussions.microsoft.com> wrote in message
>> news:4F8C5C73-1E42-477A-9742-CE8B30BA2D56@microsoft.com...
>> > Hi Nathan.
>> >
>> > I think the problem is, that once a remote pc's GPO inheritance is
>> > blocked
>> > because of the slow link detection, it will not "listen" to new GPO
>> > settings
>> > from your AD.
>> >
>> > For testing: Is it possible for you to get one of the remote PC's
>> > logged
>> > on
>> > to your LAN, make sure the GPO are replicated, and then log on remote
>> > again,
>> > to see if the problem is solved on that PC?
>> >
>> > Hope, this was helpfull
>> >
>> > Br. Carsten
>> >
>> > "Nathan" skrev:
>> >
>> >> Hi,
>> >>
>> >> We have a couple of sites that connect to our site over a VPN (Cisco
>> >> PIX
>> >> at
>> >> both ends) but the GP settings aren't being applied to the remote PCs.
>> >>
>> >> I have added registry settings for slow links but nothing. I have
>> >> edited
>> >> the
>> >> GP for slow links. Nothing
>> >>
>> >> I can ping the DC and it me, but if I try to ping using the MS test
>> >> "ping -l
>> >> 2048 xxx.xxx.xxx.xxx" i get no reponse from the pings. too slow.
>> >>
>> >> How can I get this working?
>> >>
>> >> The only thing that I think I might have a little screwed up are the
>> >> sites
>> >> in the Sites and Services. How important are these.
>> >>
>> >> How do these get setup? For two sites, one with a DC and the other
>> >> without,
>> >> how would you setup sites and services. The intersite transport?, the
>> >> subnets?
>> >>
>> >> Any help appreciated.
>> >>
>> >> TIA
>> >>
>> >> Nathan
>> >>
>> >>
>> >>
>>
>>
>>