Resolution
NetIQ Group Policy Administrator 4.6
symptom
The Show Domains option in GP Explorer node returns the error 'Unable to Enumerate the Forest's Domains' when attempting to enumerate the domains in a given forest.
cause
The issue can be caused by a firewall blocking communication of the console back to the PDC Emulator.
fix
This issue is addressed in NetIQ Group Policy Administrator version 4.6 Hotfix 46740.
Hotfix 46740 corrects the issue where The Show Domains option in GP Explorer returns the error Unable to Enumerate the Forest's Domains when attempting to enumerate the domains in a given forest. This hotfix allows you to identify a specific Domain Controller to use for enumerating the domains.
To install this hotfix, perform the following steps on each GPA console computer:
- Run GPA46000_Hotfix46740.exe.
- In the Windows Registry, add a new string value called PreferredDC to the registry key for each forest. This key is called
HKEY_CURRENT_USER\Software\FullArmor\FAZAM 2000\GP Explorer\Forests\NameOfForestwhere NameOfForest is the name of your specific forest. For example,forest1.corp.dev. - Set the value of the string PreferredDC to the name of the domain controller you want to use for enumerating the domains. This does not need to be a fully qualified DNS name.
This hotfix modifies faGPExpl.dll in the installation folders. By default, this folder is \Program Files\NetIQ\Group Policy Administrator 4.6\Bin.
For more information, contact Technical Support at www.netiq.com/support.
note
WARNING - Implementation of this hotfix requires making edits to your Windows Registry. Be careful when editing your Windows Registry. If there is an error in your Registry, your computer may become nonfunctional. If an error occurs, you can restore the Registry to its state when you last successfully started your computer. For more information, see the Help for the Windows Registry Editor.