Buchatech.com

Posts Tagged ‘Group Policy’

Recently I had a virtual machine that would not obtain an IP from DHCP. I noticed the DHCP client service was disabled in windows services. I would enable it, start it and it would start just fine. I would then reboot the VM. The DHCP client service would be disabled again. I had a feeling there was a GPO that was disabling that service. I wanted to check this without going through the domain policy, the local policy and any other group policies that could be causing this. I used a tool in windows called Group Policy Results Tool. You can use this tool to find out how Group Policy settings are affecting both the the computer and the logged-on user.

To track down the GPO setting faster this is what I did:

• Open a command prompt on the client machine
• Type: cd\ (to go to the root of C:)
• Type: gpresult /v >gposettings.txt (This gave me a verbose report of all group polocies applied on the client machine)
• Go to the C: drive and open gposettings.txt in notepad
• I did a search for DHCP in this text file

This brought me to any GPO settings that had anything to do with DHCP. This helped me identify which group policy was pushing down the setting that was disabling the DHCP client service. It was in the Default Domain Policy. This is the path to system services:  Computer configuration\Windows settings\Security settings\System services

If you have a similar issue you can use the above method and Group Policy Results Tool to track down the cause of it.

More information on using the Group Policy Results Tool:

• http://www.microsoft.com/windowsxp/using/setup/expert/gpresults.mspx
• http://support.microsoft.com/kb/321709

Some applications on my network were having issues because the workstation clocks had the wrong time. I had to fix this but did not want to manually change it on every workstation. I did not want the user to have to always update this either. What I did is checked the time server my domain controller was using to sync with. It was set to time.windows.com. I used the NET TIME /QUERYSNTP command to check the NTP server.

I then went to Microsoft’s time server list here: http://support.microsoft.com/kb/262680 tracked down the correct time server. Once I found the NTP server I wanted to use I set the Configure Windows NTP client GPO to reflect this so all of the workstations would sync with this time server. Here is the GPO path:

Computer Configuration\Administrative Templates\System\Windows Time Service\Time Providers

I checked the next day and all of the computers on my network had the correct time.
If you don’t want to wait you can run the following commands to stop and start the time service on your clients:

Read the rest of this entry »