Unable to generate Default Domain Policy report.
Antocobb1
gpmc.msc and select the Default Domain Policy, I receive the error "An error
occurred while generating report: Key cannot be null. Parameter name; key"
Please advise how to resolve error.
Meinolf Weber [MVP-DS]
Do you use the latest version from GPMC:
http://www.microsoft.com/DOWNLOADS/details.aspx?FamilyID=0a6d4c24-8cbd-4b35-9272-dd3cbfc81887&displaylang=en
Best regards
Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Antocobb1
Please advise.
Meinolf Weber [MVP-DS]
Hello Antocobb1,
Do you run it on the server,which OS version, or on a client?
Antocobb1
Meinolf Weber [MVP-DS]
Does it work on the server direct, so it seems to be a problem within XP?
Is you account member of domain admins? Any firewall running between the
machines?
Ace Fekay [MCT]
news:6F2C159F-284F-494E...@microsoft.com...
>I run it on a client. MS Windows XP SP3.
>
> Please advise.
If you try it from a DC, does the errors still come up?
Did you alter the Default Domain Policy? If so, what was was changed or
added? If so, curious, why was the default policy changed and you did not
crate a separate GPO? It is advised and recommended to not touch the Default
Domain Policy and the Default Domain Controller Policy.
Researching this error, it seems that something in the policy that was
changed or added, has a null field, eg, a display name or something. Take a
look at the following link for a posted log that the user was receiving the
same error. The admin had created a certificate template in the Default
policy, but the template name was left blank. Search through the text for "
: Key cannot be null" and look right above that. Notice there's a blank name
for the certificate template?
http://www.eggheadcafe.com/conversation.aspx?messageid=31172560&threadid=31172494
If you are not sure what was changed, you can enable verbose logging and
look for a similar error, which will alert you where the problem is. The
following link explains how to enable verbose logging. Post the log file, if
you are not sure where the error is.
Fixing Group Policy problems by using log files: Group PolicyMar 2, 2005 ...
Output from: Is located in this file: Enable verbose logging by adding this
keyword� �to this registry key. GPMC: error logging only ...
http://technet.microsoft.com/en-us/library/cc775423(WS.10).aspx
If the Default Domain Policy was altered, and you are not sure what was
changed, you can always reset the policy to its default settings, and create
a new policy. It would make it much easier to tech support a problem with an
administrator created policy than to mess with the default policy.
The following are links explaining how to restore the default policy, as
well as links explaining the possible ramifications.
Default Group Policy objects become corrupted: disaster recovery ...Mar 2,
2005 ... The Dcgpofix tool recreates the two default Group Policy objects
and ... If you do not specify /target, dcgpofix uses both by default. ...
http://technet.microsoft.com/en-us/library/cc739095(WS.10).aspx
The Dcgpofix tool does not restore security settings in the ...Explains that
the Dcgpofix tool does not restore security settings in the Default Domain
Controller Policy to the same state that they were in after ...
http://support.microsoft.com/kb/833783
Error message when you use the Dcgpofix.exe command-line tool in a ...Feb
21, 2007 ... Describes an issue that occurs because the schema version of
the domain does not match the schema version that the tool expects.
http://support.microsoft.com/kb/932445
Jane Lewis's Weblog : DCGPOFIX - to be used - only in the last resort.Sep
22, 2006 ... I have been working quite allot with Group Policy objects and
have recently been involved in troubleshooting them.
http://blogs.technet.com/janelewis/archive/2006/09/22/458132.aspx
--
Ace
This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.
Please reply back to the newsgroup or forum to benefit from collaboration
among responding engineers, and to help others benefit from your resolution.
Ace Fekay, MCT, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA Messaging
Microsoft Certified Trainer
ace...@mvps.RemoveThisPart.org
http://twitter.com/acefekay
For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.