I'm having problem, I have a DC with AD setup as a DNS and DHCP server. Users are able to log on to the domain, share folders and printers, I have successfully tested DNS with NSLOOKUP but the security policys will not update. On the server I'm getting the following errors:"

Userenv 1000
"Windows cannot unload your registry file. If you have a roaming profile, your settings are not replicated. Contact your administrator."

IPNATHLP 31002
"The DNS proxy agent was unable to bind to the IP address 192.168.0.1. This error may indicate a problem with TCP/IP networking. The data is the error code."

NETLOGON 5781
"Dynamic registration or deregistration of one or more DNS records failed because no DNS servers are available. "

that last error says there no DNS server but there is because users can logon to the domain. Please help

do you have win95 or 98 clients? if so, maybe you have dynamic updates on. correct me if i'm wrong, but i think those clients do not support dynamic updates.

im a beginner at this stuff so if it doesnt make sense just ignore it lol.

Hi;

check the q259277 from MS Technet or KB from MS web sites for NETLOGON 5781

Use the secedit.exe for update the policies

gpresult and gpotool are the tools that give informations about GPO.You can find them W2k SRV Res.Kit

Finally Policy informations stored \\%DCname%\SYSVOL\%Domain NAme%\policies.
There are folders named GUID of the policy object. You should check the SYSVOL share is existing on your DC.

Ertan