Troubleshooting Active Directory and FRS Replication

A GPO will not be downloaded to the client if the client cannot authenticate to the domain. When this occurs, the cached policy is applied. Any changes made since the policy was cached will not be applied. A number of Active Directory and related GPO issues, such as problems with trust relationships or Active Directory Replication, Domain Controller/Active Directory Configuration, and even the File Replication System (FRS) can either prevent GPOs from downloading or hinder proper processing for appropriate computer and user accounts.

Trust Relationship Problems

Although it is not advised, GPOs can be linked across domains if a trust relationship exists between the domains. By default, all domains ...

Get Windows Server 2003 Security: A Technical Reference now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.