Sign in
 
HomeWindows Server 2012Windows Server 2008 R2Windows Server 2003LibraryForums
Note: Forums will be making significant UX changes to address key usability improvements surrounding search, discoverability and navigation. To learn more about these changes please visit the announcement which can be found HERE.
Windows Server TechCenter >
> 
> 
WMI GPO 2008R2 Server Error Event ID 1065

Answered WMI GPO 2008R2 Server Error Event ID 1065

  • Tuesday, September 07, 2010 6:38 PM
     
     
    Sign In to Vote
    0

    Im having an issue getting my 2008 servers and windows7 machines on Group Policies after domain migration from 2003 to 2008....  All windowsxp & 2003 server machines still run group policy without issues.  My issue and setup is described below:

    1) We have  two 2003 domain controllers 2003 Server (PDC/BDC).
    2) Built new 2008R2 Server to act as new GCS.  Transferred ALL FSMO roles successfully.
    3) An error on my part, I deleted 3 WMI filters on the PDC 2003 server.
    4) All Event logs indicate that the new 2008R2 server is "mostly" acting as a domain controller (FRS. DFS, DNS, ect). See dcdiag below.
    5) However when I run a gpupdate to enforce newly created group policies I get the following messages. **Note these errors come in 3's, all with the same identical group policy object.

    EVENT VIEWER ERRORS:  Event ID 1065
    Log Name:      System

    Source:        Microsoft-Windows-GroupPolicy

    Date:          9/7/2010 2:19:45 PM

    Event ID:      1065

    Task Category: None

    Level:         Error

    Keywords:      

    User:          SYSTEM

    Computer:      TFCGCOH01.corp.tfcci.local

    Description:

    The processing of Group Policy failed. Windows could not evaluate the Windows Management Instrumentation (WMI) filter for the Group Policy object cn={31B2F340-016D-11D2-945F-00C04FB984F9},cn=policies,cn=system,DC=corp,DC=tfcci,DC=local. This could be caused by RSOP being disabled  or Windows Management Instrumentation (WMI) service being disabled, stopped, or other WMI errors. Make sure the WMI service is started and the startup type is set to automatic. New Group Policy objects or settings will not process until this event has been resolved.

    Event Xml:

    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

      <System>

        <Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" />

        <EventID>1065</EventID>

        <Version>0</Version>

        <Level>2</Level>

        <Task>0</Task>

        <Opcode>1</Opcode>

        <Keywords>0x8000000000000000</Keywords>

        <TimeCreated SystemTime="2010-09-07T18:19:45.182571600Z" />

        <EventRecordID>25309</EventRecordID>

        <Correlation ActivityID="{73BCFC50-48B4-4221-8FE8-8A356F294C7D}" />

        <Execution ProcessID="848" ThreadID="1644" />

        <Channel>System</Channel>

        <Computer>TFCGCOH01.corp.tfcci.local</Computer>

        <Security UserID="S-1-5-18" />

      </System>

      <EventData>

        <Data Name="SupportInfo1">4</Data>

        <Data Name="SupportInfo2">631</Data>

        <Data Name="ProcessingMode">0</Data>

        <Data Name="ProcessingTimeInMilliseconds">764</Data>

        <Data Name="ErrorCode">2147749890</Data>

        <Data Name="ErrorDescription">

        </Data>

        <Data Name="DCName">\\TFCGCOH01.corp.tfcci.local</Data>

        <Data Name="GPOCNName">cn={31B2F340-016D-11D2-945F-00C04FB984F9},cn=policies,cn=system,DC=corp,DC=tfcci,DC=local</Data>

      </EventData>

    </Event>


    DC DIAG reports the following:

    C:\Users\tfcwinap>dcdiag

     

    Directory Server Diagnosis

     

    Performing initial setup:

       Trying to find home server...

       Home Server = TFCGCOH01

       * Identified AD Forest.

       Ldap search capabality attribute search failed on server TFCWINAP05, return

       value = 81

       Got error while checking if the DC is using FRS or DFSR. Error:

       Win32 Error 81The VerifyReferences, FrsEvent and DfsrEvent tests might fail

       because of this error.

       Ldap search capabality attribute search failed on server TFCGCCO01, return

       value = 81

       Got error while checking if the DC is using FRS or DFSR. Error:

       Win32 Error 81The VerifyReferences, FrsEvent and DfsrEvent tests might fail

       because of this error.

       Done gathering initial info.

     

    Doing initial required tests

     

       Testing server: Columbus\TFCGCOH01

          Starting test: Connectivity

             ......................... TFCGCOH01 passed test Connectivity

     

    Doing primary tests

     

       Testing server: Columbus\TFCGCOH01

          Starting test: Advertising

             ......................... TFCGCOH01 passed test Advertising

          Starting test: FrsEvent

             ......................... TFCGCOH01 passed test FrsEvent

          Starting test: DFSREvent

             ......................... TFCGCOH01 passed test DFSREvent

          Starting test: SysVolCheck

             ......................... TFCGCOH01 passed test SysVolCheck

          Starting test: KccEvent

             A warning event occurred.  EventID: 0x80000785

                Time Generated: 09/07/2010   14:11:45

                Event String:

                The attempt to establish a replication link for the following writab

    le directory partition failed.

             A warning event occurred.  EventID: 0x80000785

                Time Generated: 09/07/2010   14:11:45

                Event String:

                The attempt to establish a replication link for the following writab

    le directory partition failed.

             ......................... TFCGCOH01 passed test KccEvent

          Starting test: KnowsOfRoleHolders

             ......................... TFCGCOH01 passed test KnowsOfRoleHolders

          Starting test: MachineAccount

             ......................... TFCGCOH01 passed test MachineAccount

          Starting test: NCSecDesc

             ......................... TFCGCOH01 passed test NCSecDesc

          Starting test: NetLogons

             ......................... TFCGCOH01 passed test NetLogons

          Starting test: ObjectsReplicated

             ......................... TFCGCOH01 passed test ObjectsReplicated

          Starting test: Replications

             ......................... TFCGCOH01 passed test Replications

          Starting test: RidManager

             ......................... TFCGCOH01 passed test RidManager

          Starting test: Services

             ......................... TFCGCOH01 passed test Services

          Starting test: SystemLog

             An error event occurred.  EventID: 0x00000429

                Time Generated: 09/07/2010   13:24:26

                Event String:

                           The processing of Group Policy failed. Windows could not evaluate th

    e Windows Management Instrumentation (WMI) filter for the Group Policy object cn

    ={31B2F340-016D-11D2-945F-00C04FB984F9},cn=policies,cn=system,DC=corp,DC=tfcci,D

    C=local. This could be caused by RSOP being disabled  or Windows Management Inst

    rumentation (WMI) service being disabled, stopped, or other WMI errors. Make sur

    e the WMI service is started and the startup type is set to automatic. New Group

     Policy objects or settings will not process until this event has been resolved.

     

       

                The processing of Group Policy failed. Windows could not evaluate th

    e Windows Management Instrumentation (WMI) filter for the Group Policy object cn

    ={31B2F340-016D-11D2-945F-00C04FB984F9},cn=policies,cn=system,DC=corp,DC=tfcci,D

    C=local. This could be caused by RSOP being disabled  or Windows Management Inst

    rumentation (WMI) service being disabled, stopped, or other WMI errors. Make sur

    e the WMI service is started and the startup type is set to automatic. New Group

     Policy objects or settings will not process until this event has been resolved.

     

                An error event occurred.  EventID: 0x00000429

                Time Generated: 09/07/2010   14:19:45

                Event String:

                The processing of Group Policy failed. Windows could not evaluate th

    e Windows Management Instrumentation (WMI) filter for the Group Policy object cn

    ={31B2F340-016D-11D2-945F-00C04FB984F9},cn=policies,cn=system,DC=corp,DC=tfcci,D

    C=local. This could be caused by RSOP being disabled  or Windows Management Inst

    rumentation (WMI) service being disabled, stopped, or other WMI errors. Make sur

    e the WMI service is started and the startup type is set to automatic. New Group

     Policy objects or settings will not process until this event has been resolved.

     

             ......................... TFCGCOH01 failed test SystemLog

          Starting test: VerifyReferences

             ......................... TFCGCOH01 passed test VerifyReferences

     

     

       Running partition tests on : ForestDnsZones

          Starting test: CheckSDRefDom

             ......................... ForestDnsZones passed test CheckSDRefDom

          Starting test: CrossRefValidation

             ......................... ForestDnsZones passed test

             CrossRefValidation

     

       Running partition tests on : DomainDnsZones

          Starting test: CheckSDRefDom

             ......................... DomainDnsZones passed test CheckSDRefDom

          Starting test: CrossRefValidation

             ......................... DomainDnsZones passed test

             CrossRefValidation

     

       Running partition tests on : Schema

          Starting test: CheckSDRefDom

             ......................... Schema passed test CheckSDRefDom

          Starting test: CrossRefValidation

             ......................... Schema passed test CrossRefValidation

     

       Running partition tests on : Configuration

          Starting test: CheckSDRefDom

             ......................... Configuration passed test CheckSDRefDom

          Starting test: CrossRefValidation

             ......................... Configuration passed test CrossRefValidation

     

       Running partition tests on : corp

          Starting test: CheckSDRefDom

             ......................... corp passed test CheckSDRefDom

          Starting test: CrossRefValidation

             ......................... corp passed test CrossRefValidation

     

       Running enterprise tests on : corp.tfcci.local

          Starting test: LocatorCheck

             ......................... corp.tfcci.local passed test LocatorCheck

          Starting test: Intersite

             ......................... corp.tfcci.local passed test Intersite
    QUESTIONS:

    1)  How can I fix this?  
     

All Replies

  • Tuesday, September 07, 2010 6:41 PM
     
     
    Sign In to Vote
    0
    FYI  I have no other Errors of any kind on any of my domain controllers or Global catolog servers.  All I get is this 1065 Error source Group Policy and none of my 2008 or win7 machines get GPO's.
     
  • Tuesday, September 07, 2010 7:34 PM
     
     
    Sign In to Vote
    0

    Hi,

    How did you delete the WMI filters? did you use GPMC?

    what happens if you recreate the WMI filter in GPMC with a differnent name and link the new WMI filter to the respecitve GPO(s). Would this be possible in your situation?

    Regards,

    Gunter

     
  • Tuesday, September 07, 2010 7:48 PM
     
     
    Sign In to Vote
    0

    This could be caused by RSOP being disabled  or Windows Management Instrumentation (WMI) service being disabled stopped or other WMI errors.


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

     

     
  • Wednesday, September 08, 2010 7:53 AM
    Moderator
     
     
    Sign In to Vote
    0

    Hi,

    As the Event suggested, did you check the "Windows Management Instrumentation" service on the problematic systems?

    If the service is running, open GPMC on DC, select the GPO {31B2F340-016D-11D2-945F-00C04FB984F9}, you can find this GPO by running "gpotool /verbose >>gpo.txt", if it’s not installed, try to download:

    http://www.microsoft.com/downloads/en/details.aspx?familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en

    You can paste the gpo.txt here for research.

    Open GPMC, select the GPO, make sure WMI filtering in the right-panel is empty. If it’s not empty, click and select <none>. Try to run gprupdate again. What’s the result?

    If the issue still occur, please help to collect MPS report for research:

    MPS Report:

    1) Download proper MPS Report tool from the website below.

    Microsoft Product Support Reports
    http://www.microsoft.com/downloads/details.aspx?FamilyID=CEBF3C7C-7CA5-408F-88B7-F9C79B7306C0&displaylang=en

    2) Double-click to run it, if requirement is not met, please follow the wizard to download and install them. After that, click Next, when the "Select the diagnostics you want to run" page appears, select "General", "Server Components", click Next.

    After collecting all log files, choose "Save the results", choose a folder to save <Computername>MPSReports.cab file. upload the file to Windows Live SkyDrive (http://www.skydrive.live.com/). If you would like other community member to analyze the report, you can paste the link here, if not, you can send the link to tfwst@microsoft.com.

    Thanks.

    This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
     
  • Wednesday, September 08, 2010 1:14 PM
     
     
    Sign In to Vote
    0
    I have verified that both WMI & RSOP services are running without issue.... I have also ran the wbemtest.exe tool with the  following the following entry's:
    1. Click Connect. In the namespace box type root\cimv2. Click Connect.
    2. Click Query. Type Select * from WIN32_OperatingSystem in the Enter Query box.
    3. Click Apply. A successful query returns one entry.

    I received the following error:  Number: 0x80041017  Facility:  WMI   Description: Invalid query.

    The WMI shows none on all GPO's....  I will get the log posted from the MPS tool in about 15 minutes.

     
  • Wednesday, September 08, 2010 1:26 PM
     
     
    Sign In to Vote
    0
    I deleted the one WMI filter with GPMC....  IT was a test filter and now all of my GPO's show none for filter as it should.   thanks
    • Marked As Answer by Mervyn ZhangModerator Thursday, September 09, 2010 2:01 AM
    • Unmarked As Answer by web1846 Thursday, September 09, 2010 12:31 PM
    •  
     
  • Thursday, September 09, 2010 2:02 AM
    Moderator
     
     
    Sign In to Vote
    0

     

    Glad to hear the problem was resolved. If you have more questions in the future, you’re welcomed to this forum.

    Thanks.

    This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
     
  • Thursday, September 09, 2010 12:30 PM
     
     
    Sign In to Vote
    0
    Sorry this Problem was not resolved.....  I was responding to a prevouse post.   someone had asked how I deleted the filter and I responded to that.  I have sent they requested log files to that email account please post your thoughts.
     
  • Friday, September 10, 2010 2:30 AM
    Moderator
     
     
    Sign In to Vote
    0

    Hi,

    Please send the SkyDrive link to tfwst@microsoft.com, sharing documents with this email is not working.

    Thanks.

    This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
     
  • Monday, September 13, 2010 3:02 AM
    Moderator
     
     
    Sign In to Vote
    0

    Hi,

    It seems the link is broken. Could you please check the link? And upload "gpotool /verbose >>gpo.txt" file too.

    Thanks

    This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
     
  • Monday, September 13, 2010 1:56 PM
     
     
    Sign In to Vote
    0

    The Link is posted below:

     

    http://cid-90b2baa3b62490f0.office.live.com/self.aspx/MPS%20Report1?permissionsChanged=1&groupUpsell=0

     

     
  • Tuesday, September 14, 2010 2:17 AM
    Moderator
     
     
    Sign In to Vote
    0


    Thank you for update. From the MPS Report, Group Policy related services are working OK. Let’s focus on the GPO itself now. Please help to collect the following reports for research.

    On DC, open GPMC, right-click Group Policy Result, choose Group Policy Result Wizard, follow the wizard to collect a report of the Windows Server 2008 R2 system. When it finish, right-click in the right-panel, choose Save Report. If you would like other community member to analyze the report, upload the file to Windows Live SkyDrive (http://www.skydrive.live.com/), and paste the link here, if not, you can send the file to tfwst@microsoft.com (with this thread title or link in the email).

    Open CMD, run " gpotool /verbose >>c:\gpo.txt". Find c:\gpo.txt file to upload to SkyDrive.

    Thanks.

    This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
     
  • Wednesday, September 15, 2010 4:58 PM
     
     
    Sign In to Vote
    0
    Sent as requested. thanks
     
  • Thursday, September 16, 2010 6:37 AM
    Moderator
     
     
    Sign In to Vote
    0


    Sorry, but I still cannot access your documents. Please don’t share documents with tfwst@microsoft.com, send the link directly to this address.

    Thanks.

    This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
     
  • Thursday, September 16, 2010 8:40 PM
     
     
    Sign In to Vote
    0

    https://cid-90b2baa3b62490f0.office.live.com/self.aspx/.Documents/tfcwinap%20on%20TFCGCOH01.htm

     

     
  • Monday, September 20, 2010 4:32 AM
    Moderator
     
     Answered
    Sign In to Vote
    0

    Hi,

    Based on the report, GPO {31B2F340-016D-11D2-945F-00C04FB984F9} is disabled and it may be deleted from GPMC.

    Please try to delete \\DomainName\SYSVOL\DomainName\{31B2F340-016D-11D2-945F-00C04FB984F9} folder to test. You may backup this folder before deleting it.

    Thanks

    This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
     
  • Monday, September 20, 2010 2:12 PM
     
     
    Sign In to Vote
    0
    Looks like by removing that GPO which is my (defualt domian policy) resolved the issue but I still dont understand what in that policy was affecting 2008/win7 machines.... As I stated all 2003/xp machine worked without issue.  I couldnt or didnt find anything in that GPO that wouldnt work on a 2008/7 machine.  Can I just create a new defualt domain policy GPO that will work for all or I'm I missing something?    thanks for your help. If you dont having any imput or suggestions this issue can be marked resolved.
     
  • Tuesday, September 21, 2010 2:28 AM
    Moderator
     
     Answered
    Sign In to Vote
    0

    Hi,

    Glad to hear that it’s working now. The Default Domain Policy GPO may be corrupt. To repair Default Domain Policy, we can run DCGPOFIX. Please refer to the following article:

    DCGPOFIX - to be used - only in the last resort.
    http://blogs.technet.com/b/janelewis/archive/2006/09/22/458132.aspx

    Thanks.

    This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Marked As Answer by web1846 Wednesday, September 22, 2010 1:41 AM
    •