Um this a first install of W7 in a single server 2003 domain that has been adprepped for update to 2008(but the server has not yet been updated to 2008) I am logged, in so whats that about not finding my name ?? Also my home directory in the domain does not get mapped at logon, as it does in XP and Vista thanks Log Name: System Source: Microsoft-Windows-GroupPolicy Date: 02/10/2009 20:28:57 Event ID: 1053 Task Category: None Level: Error Keywords: User: DATA-ACTION\dave Computer: daves-W7-PC.data-action.co.uk Description: The processing of Group Policy failed. Windows could not resolve the user name. This could be caused by one of more of the following: a) Name Resolution failure on the current domain controller. b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller). Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" /> <EventID>1053</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>1</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2009-10-02T19:28:57.709449600Z" /> <EventRecordID>1608</EventRecordID> <Correlation ActivityID="{7F997520-4613-4F78-9E07-92E04D7131A9}" /> <Execution ProcessID="952" ThreadID="1800" /> <Channel>System</Channel> <Computer>daves-W7-PC.data-action.co.uk</Computer> <Security UserID="S-1-5-21-1598230382-1553194678-2249531084-1115" /> </System> <EventData> <Data Name="SupportInfo1">1</Data> <Data Name="SupportInfo2">1632</Data> <Data Name="ProcessingMode">1</Data> <Data Name="ProcessingTimeInMilliseconds">1669</Data> <Data Name="ErrorCode">2148074320</Data> <Data Name="ErrorDescription">The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. </Data> </EventData> </Event>

Which GPO is not applied? What are the problematic GP options? Please run the following command in “cmd” window that has high privilege. gpresult /z > %userprofile%\desktop\gpresult.txt Then open gpresult.txt on Desktop, try to find clues.Arthur Xie - MSFT

INFO: The user does not have RSOP data. Thats all thats ever in there. After boot, after a "gpupdate /force". Nada, nowt, nothing I think that I/this machine are in some strange half logged in state. If i try to log on as some fictitious user , then i cannot, the logon process will fail On the other hand because of this failure I cannot do anything ie "net view \\DC" == access denied "dir \\DC\share == attempt to compromise security thanks dave

The following articles should be helpful. Access RSoP data for an existing computer and user (logging mode) Troubleshooting RSoPArthur Xie - MSFT