Monitoring Group Policy with Log Files 11

What’s in the Userenv log? 11

Troubleshooting Information from the Event Log 11

Verbose Logging to Event Log 12

GP Editing Failures 12

Troubleshooting Status of Primary Domain Controller (PDC) 12

Group Policy Engine/Core Processing Failures 14

Investigating Core Failures 14

Client Side Extension (CSE) Processing Failures 14

GUID for Group Policy Extensions 14

Client Side Extension Failures 15

Administrative Templates CSE 15

Folder Redirection CSE 15

Security CSE 16

Scripts CSE 16

Troubleshooting Common Scenarios 17

If Group Policy Settings Aren’t Applied 17

Resolving Group Policy Inheritance Conflicts 17

Resolving Group Policy Security/Permissions Issues 17

Disabled GPOs 17

Resolving Replication Problems 18

Inter-Domain GPO Link Problems 18

Did You Move the User or Computer Object? 18

Are You Migrating from Windows NT 4.0? 18

Table 2. How Policy is Applied on the Client Computer 19

If Group Policy Settings Apply Inconsistently 19

Preferences Versus Policies 20

Synchronous Versus Asynchronous Processing 20

If You Can’t Manage Group Policy 20

Required Permissions for Group Policy Snap-in 20

Creating a Site GPO 20

Delegating Control of Group Policy 21

Manage Group Policy Links 21

Create GPO 21

Edit GPO 21

Consistency/Performance Problems: Where are GPOs Managed? 21

Which Domain Controller Should I Choose? 22