Software Update to prevent Group Policy Import failure and locked shares [HFXCC3117]
Published Date : 20 Apr 2005��
Last Updated : 13 Feb 2020��
Content Ref: DWN397320��
Operating System
Community Connect 3 SR4, RM Smart-Tools 3 SR4
Part No
(none)
Summary
After installing a Software Update, Service Release etc. all group policies are removed resulting in users receiving incorrect desktops, no internet access etc.
Description
**Please note this only applies to Community Connect 3™ and RM Smart-Tools 3 networks**
Before installing any Software Update, please refer to TEC90813 and DWN59018 in 'Other Useful Articles' section below. These articles detail RM's recommendations regarding Software Update installation and support.
Any references to Community Connect 3 in this document apply equally to RM Smart-Tools 3.
Platforms
Community Connect 3 Service Release 4 (SR4) or above both Microsoft� Windows� 2000 and 2003.
Important: Although the issue is only evident on Microsoft Windows 2003 servers, this Software Update must be installed on both Microsoft Windows 2000 and 2003 servers.
Symptoms
After installing a Software Update, Service Release or products such as RM Type Manager, users may receive incorrect desktops, no internet access etc. across the network.
Cause
A issue has been identified on Microsoft Windows 2003 servers when updating policies on a network using the GPO Import Tool. Policies are updated whenever you apply a Service Release, install a Software Update which requires changes to group policies, or you install any of the following products (this should not be taken as an exhaustive list):
Microsoft Windows XP Service Pack 2
RM Type Manager
RM Local Support Tools
RM Auditor
The issue is due to an incompatibility with the default Microsoft Windows 2003 SMB signing settings, contained in the Microsoft Default Domain Controllers Policy, and the RM Domain Controllers policy. Occasionally, the difference in these settings causes all shared folders on the local Domain Controller to become inaccessible, the only resolution being a reboot of the server.
Because policies are saved to the SYSVOL share on the Forest Root server (or the PDC emulator), if the share becomes inaccessible during a policy update, the update can fail and thus cause problems with policy settings on your network. These problems can include removal of all group policy settings across the domain.
Requirements
This Software Update should be installed on all Community Connect 3 Service Release 4 (SR4) or above servers.
HFXCC3117 should be applied to all Community Connect 3 domain controllers beginning with the Forest Root.
This Software Update should be installed on both Community Connect 3 Windows 2000 and 2003 domain controllers.
Servers will NOT need to be restarted after applying this Software Update.
Download Instructions
Click the HFXCC3117.exe file link to download the Software Update.
Choose to Save the file, browse to the temporary location you wish to save it to (e.g. D:\temp) and click Save.
When it has downloaded, follow the installation instructions below to install the Software Update.
Download
Filename
File Size
Download
HFXCC3117.exe
1.38 Mb
Installation Instructions
How to install the Software Update
Note: If you previously started to install the Software Update but cancelled the operation, follow the installation instructions in the 'Installing after cancelling a previous install' section below:
Download HFXCC3117.
Log on to your first (Forest Root) Community Connect 3 domain controller as Administrator (not SystemAdmin) and copy the Software Update to a temporary location (e.g. D:\temp).
Run the Software Update by double-clicking the self-extracting executable file (HFXCC3117.exe). The Software Update will extract files automatically and run the RM Installation Assistant to install the Software Update.
When prompted, click Continue.
The installation will proceed automatically. When prompted that the RM Installation Assistant has finished, click Finish.
Repeat steps 2 to 5 for each additional Community Connect 3 domain controller in every site.
Installing after cancelling a previous install
Browse to D:\RMNetwork\RMManage\RM Hotfixes\HFXCC3117_extracted and double-click the file RM Installation Assistant.exe. (If this folder or its contents does not exist, re-run the HFXCC3117.exe file).
The RM Installation Assistant will initialise; click Continue to proceed with the installation.
The installation should proceed automatically; click Finish when prompted.
Follow the procedures in 'How to install the Software Update' from step 5 above.
Important - Interaction with RM Service Releases
The components of HFXCC3117 are included in RM Service Release 6 for Community Connect 3.
The Software Update can be installed on to networks running Community Connect 3 with Service Release 4 or above.
Download File Contents
HFXCC3117 will install a new version (v3.33) of the GPO Import Tool on all domain controllers.
If this article has not helped provide a solution then it is also possible to
log a call...