Hello, I have seen this is a fairly common subject however I have no found a solution that has worked for us. Our Windows 7 PCs connect to a 2003 Domain. During the OSD stage the PC is put into an OU with miminal GPOs to ensure our Applocker and Firewall rules do not affect the installation. It is possible for a user (only Administrators) to log on to the machine ok whilst in our Build OU. The end of the OSD sequence moves the PC to the correct OU which has a number of GPOs applied to it. Our GPOs utilise the Government Assurance Pack set of GPOs which include SSLF settings so it is quite secure. We have no rules for the Public firewall. If I logon using a local administrator account I disable the Firewall Service and do a Ipconfig /Renew and an IP address is found and the machine is put into the Domain Firewall Profile. I believe I need to add some rules to the Public Firewall profile but unsure what Programs/Ports will help. The Core Networking DHCP rule does not seem to help. For a workaround we have added a DHCP Conn Broadcast Flag reg key but would like to try and avoid Registry Entries as disabling the Firewall appears to fix Any suggestions greatly appreciatedLee Bowman MCITP MCTS

Hi Lee, Thanks for posting in TechNet forum. Based on your description, the Firewall settings could be the cause for this issue. To find the cause, I recommend you use the Network Moitor to capture the network trace and analyze the issue. Fistly, please delete the DisableLoopbackCheck key from registry. Then,follow these steps: 1. Download the Network Monitor 3.4:http://www.microsoft.com/downloads/en/details.aspx?FamilyID=983b941d-06cb-4658-b7f6-3088333d062f&displaylang=en 2. Log onto the machine, right-click the Netmon icon and select Run as Administrator to launch the NetMon. 3. In the Microsoft Network Monitor 3.4 window, click Create a new capture tab... 4. In the new tab, select all the Network Adapters in the Select Networks window. 5. After that, press F10 to start NetMon. 6. Try to re-produce the issue on the computer. 7. Go back to the NetMon window and press F11 to stop the NetMon. 8. Press Ctrl+S to save the Netmon file and upload them to the SkyDrive in a public folder. In addition, please understand that analyze/troubleshoot this kind of issue may be time-consuming. If it's urgent, I'd like to recommend you contact Microsoft Customer Support Service for instant assistance. To obtain the phone numbers for specific technology request, please take a look at the website listed below: http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS Thanks for your cooperation! Best Regards, Miya TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hello After investigating the Network Traffic and Ports etc we completed the following and so far have had success Our GPOs removed ALL settings for the Public Profile, we had only set for the Domain profile. For the Core Network section DHCP-In, DHCP-Out and DNS Out we also added to the Public Profile as I had read that the machine may sometimes starts in an Unknown Network state (Public Profile) and require to contact DHCP or DNS to alert it of the Domain Profile. Any confirmation to this statement would be appreciatedLee Bowman MCITP MCTS

Hi Lee, Glad to hear th issue is resolved. Does the issue persist after you run the command gpupdate /force on the client? I recommend you check the Group Ploicy Settings on the clients. Find if the GPOs are correctly applied or there could be some conflicts. Run the cmd as administrator, input gpresult /h gpreport.html You can also upload the report to us via SkyDrive, let us analyze the report together. Regards, Miya TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.