Group Policies Are Not Applied to Computers Other Than the Domain Controller (260218)



The information in this article applies to:

  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server
  • Microsoft Windows 2000 Professional
  • Microsoft Windows 2000 Server

This article was previously published under Q260218

SYMPTOMS

When a domain user or a domain administrator logs on to a Windows 2000-based computer, the site, domain and Organizational Unit group policies may not be applied. However, the policies may be applied when the domain administrator logs on to a domain controller. Also, the following event may be recorded in the Application log: Event Type: Warning
Event Source: NETLOGON
Event Category: None
Event ID: 5773
Date: date
Time: time
User: N/A
Computer: DC
Description: The DNS server for this DC does not support dynamic DNS. Add the DNS records from the file '%SystemRoot%\System32\Config\netlogon.dns' to the DNS server serving the domain referenced in that file.

CAUSE

This problem may occur if the Windows 2000 domain controller is configured to use a DNS server that does not support dynamic updates.

RESOLUTION

To resolve this problem, configure the domain controller to use a DNS server that supports dynamic updates or SRV records. For additional information about how to configure a DNS server for dynamic updates and how to resolve event 5773, click the following article number to view the article in the Microsoft Knowledge Base:

255913 Integrating Windows 2000 DNS into an Existing BIND or Windows NT 4.0-Based DNS Namespace

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

Modification Type:MajorLast Reviewed:6/6/2003
Keywords:kbprb KB260218