Cannot apply Group Policies over VPN

[themadmonk]

I have a site-to-site VPN setup. I also have a Win2K3 box at site A. Everybody uses this box, however at site B, everybody can log on to the domain yet they cannot apply group policies. Any reason why this is so? I have tried every suggestion so far. These include changing the slow-link detection policy, removing firewall, running netdiag(which reports no errors) and using LMHOSTS files.

Has anybody encountered this error before and if so how did you fix it?

 

[stash]

What errors do the clients get in their app logs? Have you enabled userenv logging?

 

[themadmonk]

error 1054: cannot find domain, group policy aborted.

i know the domain is there because netdiag passes all tests.

 

[stash]

Netdiag on what, the client or the domain controllers? Can you ping yourdomain.com from one of these clients? Can you get to \\yourdomain.com\sysvol from the client?

Are the clients configured to use the correct DNS server(s)?

 

[dphantom]

Look at this. This

DNS could be the issue too.

 

[stash]

Also, what settings did you change with slow-link detection? Did you disable it entirely? If not, make sure you are allowing ICMP across the VPN.

 

[Boscoh]

Make sure you're not only allowing ICMP, but fragmented ICMP as well.