none
Windows 2003 Server USERENV 1058 & Group Policy Errors RRS feed

  • Question

  • Hi Community,

    I have a question regarding some errors that have started to appear on our Windows 2003 Domain Controllers. We have 3 domain controllers on one site and we are receiving the following message.

    Windows cannot access the file gpt.ini for GPO cn={16FE98BA-ED1C-47CA-B819-3E175E02435D},cn=policies,cn=system,DC=**,DC=**. The file must be present at the location <\\**.**\SysVol\**.**\Policies\{16FE98BA-ED1C-47CA-B819-3E175E02435D}\gpt.ini>. (The system cannot find the path specified. ). Group Policy processing aborted.

    I have read through KB887303 docuement and the setup of the dc seems fine. I have checked the DNS config, run dcdiag and netdiag and all are fine. I have also run the dcdiag DNS tests and again all come back as passed. I can also browse the \\domain-name\sysvol folders successfully but I cannot find the gop is referencing to 16FE98BA - the folder does not exist.

     

    Has anyone seen this before or know how toresolve this issue?

     

    Thank you in advance 


    • Edited by Chrisb101 Tuesday, June 21, 2011 11:06 AM Remove DC info
    Tuesday, June 21, 2011 11:03 AM

Answers

  • Hello,

    make sure no firewall is blocking connections. Please upload the following files:

    ipconfig /all >c:\ipconfig.txt [from each DC/DNS Server]
    dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt
    repadmin /showrepl dc* /verbose /all /intersite >c:\repl.txt  ["dc* is a place holder for the starting name of the DCs if they all begin the same (if more then one DC exists)]
    dnslint /ad /s "DCipaddress" (http://support.microsoft.com/kb/321045)


    As the output will become large, DON'T post them into the thread, please use Windows Sky Drive (skydrive.live.com) [with open access!] and add the link from it here. Also the /e in dcdiag scans the complete forest, so better run it on COB.


    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    • Marked as answer by Chrisb101 Wednesday, June 22, 2011 2:52 PM
    Tuesday, June 21, 2011 11:22 AM
  • Hello,

    please post the output of the commands that Meinolf suggested.

    Also, have a look to this Microsoft article: http://support.microsoft.com/kb/290762

     


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator

    Tuesday, June 21, 2011 12:09 PM

All replies

  • Hello,

    make sure no firewall is blocking connections. Please upload the following files:

    ipconfig /all >c:\ipconfig.txt [from each DC/DNS Server]
    dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt
    repadmin /showrepl dc* /verbose /all /intersite >c:\repl.txt  ["dc* is a place holder for the starting name of the DCs if they all begin the same (if more then one DC exists)]
    dnslint /ad /s "DCipaddress" (http://support.microsoft.com/kb/321045)


    As the output will become large, DON'T post them into the thread, please use Windows Sky Drive (skydrive.live.com) [with open access!] and add the link from it here. Also the /e in dcdiag scans the complete forest, so better run it on COB.


    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    • Marked as answer by Chrisb101 Wednesday, June 22, 2011 2:52 PM
    Tuesday, June 21, 2011 11:22 AM
  • Hello,

    please post the output of the commands that Meinolf suggested.

    Also, have a look to this Microsoft article: http://support.microsoft.com/kb/290762

     


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator

    Tuesday, June 21, 2011 12:09 PM
  • Hi Guys,

    I looked at the group policies yesterday and found a GP with the unique ID with the same name reference in the error message as posted above. I also looked in the SYSVOL folder and could not see the unique name but I could see the unique names for all other group policies.

    So I backed up the GP and then deleted it as it had nothing major in it anyway. I haven't had any error messages since on any of the Domain Controllers so its looks like it may have resolved the issue.

    Any idea why a group policy would exist but has no folder in the SYSVOL share? Could it have become corrupt?

    Thanks for your help

    I also have some questions about the FSMO roles on this server but I'll post a new thread for that.

    Chris

    Wednesday, June 22, 2011 9:10 AM
  • Hello,

    if a GPO is listed that is not included in the sysvol then something is not running ok. So please upload the requested files, that we get an overview.


    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    Wednesday, June 22, 2011 12:44 PM
  • Is there anyway to uploads these files without public access. I'm a little nervous about uploading this info as it can be seen by so many people.
    Friday, July 8, 2011 11:45 AM