Q

GPOtool found errors on 90% of my policies

I just thought I'd run GPOtool to see what the output would look like for our domain, and to my dismay about 90% of the group policies came up with errors like the ones below. These policies work and the errors suggest file attributes are not what would be expected, so I don't know if it is anything to be concerned about. It does make one wonder what it's all about as I'm having little luck finding anything on the Internet about it. What do you think?

Policy {0038816E-AA99-406E-A8EF-A2C091639ADD}
gpotool: e ERROR: Err: CreateTime different between Adm

Error: TDSERVER.page-moy.local - ABBEYHOME.page-moy.local sysvol mismatch
gpotool: e ERROR: Err: CreateTime different between Adm

Error: TDSERVER.page-moy.local - PAFSERVER.page-moy.local sysvol mismatch

Details:
------------------------------------------------------------
DC: TDSERVER.page-moy.local
Friendly name: Web Unit T drive
Created: 24/01/2002 09:57:17
Changed: 27/03/2002 21:46:00
DS version: 2(user) 0(machine)
Sysvol version: 2(user) 0(machine)
Flags: 0
User extensions: [{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B66650-4972-11D1-A7CA-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: ABBEYHOME.page-moy.local
Friendly name: Web Unit T drive
Created: 24/01/2002 09:57:17
Changed: 27/03/2002 21:53:10
DS version: 2(user) 0(machine)
Sysvol version: 2(user) 0(machine)
Flags: 0
User extensions: [{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B66650-4972-11D1-A7CA-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: PAFSERVER.page-moy.local
Friendly name: Web Unit T drive
Created: 24/01/2002 09:57:17
Changed: 27/03/2002 21:50:20
DS version: 2(user) 0(machine)
Sysvol version: 2(user) 0(machine)
Flags: 0
User extensions: [{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B66650-4972-11D1-A7CA-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: printserver.page-moy.local
Friendly name: Web Unit T drive
Created: 24/01/2002 09:57:17
Changed: 27/03/2002 21:49:51
DS version: 2(user) 0(machine)
Sysvol version: 2(user) 0(machine)
Flags: 0
User extensions: [{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B66650-4972-11D1-A7CA-0000F87571E3}]
Machine extensions: not found
Functionality version: 2

GPOtool is a Resource Kit tool. I found little details about it as well. From the output you provided, it seems like there is a file time stamp difference between two or more group policy objects (GPOs). It may also indicate the presence of computer accounts in the domain that are no longer used by real systems. If the GPOs are working, I would not worry about the output of this tool.

You might try running the GPOtool in verbose mode (if you've not already) to see if it provides additional details.

This was first published in January 2003

Dig Deeper

PRO+

Content

Find more PRO+ content and other member only offers, here.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchServerVirtualization

SearchCloudComputing

SearchExchange

SearchSQLServer

SearchWinIT

SearchEnterpriseDesktop

SearchVirtualDesktop

  • Virtual desktop security guide

    To secure virtual desktops, consider antivirus, certificates and network vulnerabilities. Just remember, VDI doesn't always ...

  • Guide to low-cost desktop virtualization

    In this guide, learn to virtualize desktops without spending more than you would when deploying PCs, and what VDI vendors are ...

  • VDI pilot project guide

    A VDI pilot project should start with a VDI project plan. Know what pitfalls to avoid and test product options to achieve a ...

Close