none
How to solve event 1058 and 1030 on Windows Server 2003 SP2 member server in a domain? RRS feed

  • Question

  • How to troubleshoot event 1058 and 1030 on Windows Server 2003 SP2 member server in a domain?

    Here is the 1058 message:

    Windows cannot access the file gpt.ini for GPO cn={C54D3D2F-BB99-405F-BA3F-E71E6D771758},cn=policies,cn=system,DC=domain name,DC=com. The file must be present at the location <\\domainname.com\sysvol\<var>domainname</var>.com\Policies\{C54D3D2F-BB99-405F-BA3F-E71E6D771758}\gpt.ini>. (The system cannot find the path specified. ). Group Policy processing aborted.

    If possible, I want to check/fix this issue using the Administration tools installed on a Windows 7 machine:

    • Active Directory Domains and Trusts
    • Active Directory Sites and Services
    • Active Directory Users and Computers
    • ADSI Edit

     

     

    Wednesday, May 25, 2011 8:45 PM

Answers

All replies

  • Hello,

    if all updates are installed let's start with excluding DNS which often result in access problems, please post an unedited ipconfig /all from all DC/DNS servers and a problem client.

    Additional make sure that all DCs have the sysvol/netlogon share with the same content, so check replication between them:

    repadmin /showrepl dc* /verbose /all /intersite >c:\repl.txt  ["dc* is a place holder for the starting name of the DCs if they all begin the same (if more then one DC exists)]


    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    Wednesday, May 25, 2011 9:03 PM
  • Hello,

    for DNS:

    • Make sure that each DC/DNS server points to itself as primary DNS server and to other internal DNS servers as secondary ones
    • Make sure that each DC without DNS points to internal DNS servers as DNS servers
    • Make sure that public DNS servers are set as forwarders

    Once done, run ipconfig /registerdns and restart netlogon on all DCs.

    Make sure that required ports for replication are opened: http://technet.microsoft.com/en-us/library/bb727063.aspx

    For SYSVOL replication problems, you can refer to this article to solve them: http://support.microsoft.com/kb/290762

     


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration

    Wednesday, May 25, 2011 9:12 PM
  • Connect to the domain controller which authenticated the computer in question (checking the value of LOGONSERVER environment variable should suffice if you have a single domain forest) and verify whether the computer account has permissions to the location specified in the error message (i.e. sysvol\<var>domainname</var>.com\Policies\{C54D3D2F-BB99-405F-BA3F-E71E6D771758}).

    If this is a permissioning issue, then launch Group Policy Management Console, identify GPO with the GUID matching the folder name, make an innocuous change to it and revert it.

    hth
    Marcin

    Wednesday, May 25, 2011 10:23 PM
  • The above error indicates system can't access {C54D3D2F-BB99-405F-BA3F-E71E6D771758} GPO, either permission or GPO has been corrupted/deleted.

    Run gpotool.exe to check the GPO health & also verify from dc's, whether this GPO exists in sysvol folder & security permissions are intact like other GPO.

    Take a look at below article.

    Event ID 1058 — Group Policy Preprocessing (Networking)

    http://social.technet.microsoft.com/wiki/contents/articles/event-id-1058-group-policy-preprocessing-networking.aspx

    http://support.microsoft.com/default.aspx?scid=kb;EN-US;887303

     

    Regards


    Awinish Vishwakarma| CHECK MY BLOG

    Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.

    Thursday, May 26, 2011 4:41 AM
    Moderator