When you attempt to work with GPOs on your multihomed Windows 2000 domain controller, your application
log contains:
UserEnv 1000 The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (3).
SceCli 1001 Security policy cannot be propagated. Cannot access the template. Error code = 3.
\\<domain name>\sysvol\<domain name>\Policies\\{31B2F340-016D-11D2-945F-00C04FB984F9\}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.
UserEnv 1000 Windows cannot access the registry information at
\\<domain name>\sysvol\<domain name>\Policies\\{31B2F340-016D-11D2-945F-00C04FB984F9\}\Machine\registry.pol with (51).When you try
to use the
Domain Security Policy or the
Default Domain Controller Security Policy, you receive
Failed to Open Group Policy Object. You may not have appropriate rights.
Details: The network path not found.
When you use the Active Directory Users and Groups snap-in to access GPOs, or when you use the Group Policy Editor, your receive a Domain Controller for Domain <domain name> not found error.
When you try to access the sysvol share, \\<domain name>\sysvol, you receive a Remote Computer is not available error.
These problem will occur if File and Printer sharing have been unbound from the primary network adapter.
To fix the problem, move the adapter that has File and Printer Sharing bound to it to the top of the Connections list:
1. Start / Settings / Control Panel.
2. Double-click Network and Dial-up Connections.
3. Press Advanced Settings on the Advanced menu.
4. Select the Adapters and Bindings tab.
5. In the Connections area, select the network adapter with File and Printer Sharing bound to it.
6. Use the arrow buttons on the right hand side to move the adapter to the top of the list.
7. Press OK.
