none
Default Domain Policy Error

    Question

  • Good afternoon,

    We are seeing an issue on our network where the default domain gpo is not applying.

    I looked in the event log and see the following after every reboot.

    The client-side extension could not apply user policy settings for 'Default Domain Policy {31B2F340-016D-11D2-945F-00C04FB984F9}' because it failed with error code '0x80070003 The system cannot find the path specified.' See trace file for more details.

    I have done a bunch of basic troubleshooting - dns is good, all dc's are replicating to each other

    Our setup is 4 domain controllers, one server 2008 holds all the roles, and 3 2008 r2 boxes as backup.

    Workstations are all Windows 7.

    I've tried reading on the internet about this error but I don't understand enough to try to troubleshoot.

    I'm hoping someone might be willing to help out here.

    Thanks for any advice.

    Sean

    Wednesday, November 09, 2016 11:19 PM

All replies

  • Am 10.11.2016 um 00:19 schrieb SRudman:
    > The client-side extension could not apply user policy settings for
    > 'Default Domain Policy {31B2F340-016D-11D2-945F-00C04FB984F9}'
     
    The question is: Why are there Usersettings inside the DDP, usually
    there are none ... and which settings are inside?
     
    Move this settings to a different GPO and remove them from DDP.
     
    Mark
    --
    Mark Heitbrink - MVP Group Policy - Cloud and Datacenter Management
     
    Homepage:  http://www.gruppenrichtlinien.de - deutsch
     
    Thursday, November 10, 2016 8:52 AM
  • Hi Sean,

    A little supplement:

    >> because it failed with error code '0x80070003 The system cannot find the path specified.' See trace file for more details.

    From this error itself to see, we could try the following steps:

    Please check if your domain user could access the shared sysvol\your domain folder.

    Besides, please try: repadmin/syncall command to sync the date between domains.

    For detailed usage, please check link below:

    https://technet.microsoft.com/en-us/library/cc835086%28v=ws.11%29.aspx?f=255&MSPPError=-2147217396

    In addition, please try: dcgpofix to repair default domain GPO:

    https://technet.microsoft.com/en-us/library/hh875588(v=ws.11).aspx

    If you need more assistances, please feedback here.

    Best regards,

    Andy


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, November 11, 2016 9:24 AM
    Moderator
  • Hi,

    Was your issue resolved?

    If you resolved it using our solution, please "mark it as answer" to help other community members find the helpful reply quickly.

    If you resolve it using your own solution, please share your experience and solution here. It will be very beneficial for other community members who have similar questions.

    If no, please reply and tell us the current situation in order to provide further help.

    Best Regards,

    Andy


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, November 24, 2016 9:33 AM
    Moderator