Sign in
 
HomeLibraryLearnDownloadsSupportForums
Forefront Client Security TechCenter > Forefront Client Security Forums > Forefront Client Security Setup and Configuration > policy deployment error
Ask a questionAsk a question
Search Forums:
 

Proposed Answerpolicy deployment error

  • Monday, November 19, 2007 3:31 PMKass Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote

    Hi All,

     

    Getting the follow error trying to deploy a FCS policy to an OU.

     

    "The policy cannot be deployed. Further details: The specified group policy object could not be located. Unable to create a Group Policy link."

     

    The weird this is the if a look on GPMC on the DC, the FCS policy appears in the group policy objects list?

     

    the policy does not get deployed on the client.

     

    Any suggestions.

     

    Thanks

     

    Kass

     

All Replies

  • Tuesday, November 27, 2007 2:37 PMChris Sfanos - MSFTMSFTUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote

    Hello!

    My guess is that the error is generic and that one part of the deployment process is failing - my guess is it's attempting to link or ACL the GPO and that is failing (but the create GPO is successful).  Does the user account that is performing the deployment of the policy have all the proper permissions in AD?

     

    Thanks

    Chris

    Forefront Client Security PM

     
  • Saturday, December 06, 2008 12:43 AMscriptes Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Proposed Answer
    Sign In to Vote
    0
    Sign In to Vote
    I have this problem! And my account is domain admin. The problem continue..
     
  • Monday, December 15, 2008 9:50 PMZakaria Muhammad Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Proposed Answer
    Sign In to Vote
    0
    Sign In to Vote
    if this is the case of redepolying policy of FCS then Do you guys have installed FCS SP1.  because FCS redeploy do not work while the domain controller is decomissioned. please read the artile KB951951 from microsoft site.

    Regards

    ZAK
    ZNM
     
  • Tuesday, December 16, 2008 8:36 PMKurt FaldeMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote

    Couple of things may be the problem..

    You may have an FRS replication issue in your domain. I would recommend downloading SONAR for frs and make sure replication is working properly and if not get it fixed.

    Or you may have issues where your PDC is in another site then where you are using the FCS console and a local DC.  There is an issue where we try to create the policy on the PDC however then try to modify it on the local DC. You can work around this by playing with the local policy through gpedit.msc and editing User Configuration>Administrative Templates>System>Group Policy> Group Policy Domain controller selection and try setting to use any available or inherit from ad snapins.

    CSS Security Support Engineer (FCS/MBSA/WUA/Incident Response) Check out my blog http://blogs.technet.com/kfalde
     
  • Sunday, June 21, 2009 7:24 PMMike Crowley Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    Kurt, could you elaborate on the FRS issue?  Are you just suggesting there may be a replication issue, or FRS specific?  Are there complications when using 2008's DFS replication as opposed to FRS?

    Mike Crowley  A+, Network+, Security+, MCT, MCSE, MCTS, MCITP: Enterprise Administrator / Messaging Administrator