Hi All,
We are in the middle of upgrading our DC's from Windows 2003 to 2008 R2. All seems well, apart from 3 (W2K8 R2) boxes. The other 13 (W2K8) boxes don't show the issue.
When I run the AD DS BPA against the 3 problem boxes, I get the following error:
Title:
The AD DS BPA should be able to collect data about Group Policy Results setting "Access this computer from the network" from the domain controller SERVERNAME
Severity:
Error
Date:
9/21/2010 1:19:30 PM
Category:
Configuration
Issue:
The Active Directory Domain Services Best Practices Analyzer (AD DS BPA) is not able to collect data about Group Policy Results setting "Access this computer from the network" from the domain controller SERVERNAME.
Impact:
The AD DS BPA will not be able to validate configuration data about Group Policy Results setting "Access this computer from the network".
Resolution:
Troubleshoot the domain controller SERVERNAME to determine the root cause of the problem.
More information about this best practice and detailed resolution procedures: http://go.microsoft.com/fwlink/?LinkId=142188
I've checked the Default Domain Controller Policy and can confirm the following is applied:
Default on domain controllers:
Administrators
Authenticated Users
Enterprise Domain Controllers
Everyone
Pre-Windows 2000 Compatible Access
Conversley I've checked deny access and they are not listed in there.
I've run RSOP on the servers and confirm the policy is being as expected.
Any ideas?
Thanks in advance,
Chaklie
I should add, dcdiag /v came back clean.
Chalkie