none
group policy trying to find gpt.ini under old domain name RRS feed

  • Question

  • I am trying to find out if group policy update is actually failing or just failing because it is still looking for the old domain name. 

    Right now, the event log shows that is unable to find the gpt.ini file under \\xxxxxxx.com\sysvol\xxxxxxx.com\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\gpt.ini 

    This ID {6AC1786C-016F-11D2-945F-00C04fB984F9} is now pointing to local.xxxxxxxx.com instead of xxxxxxx.com but GP still looking up old domain name associated with that unique ID.

    There is only on domain controller in this forest. 

    I am concerned that it is saying Not available (SYSVOL) for domain controller. 

    

    Wednesday, July 17, 2013 3:16 AM

Answers

  • Did you rename the domain?

    If you look at the screenshot you pasted, the sysvol version is missing. It has to be match the AD version.

    You would also notice that Netlogon and Sysvol are not shared on the server.

    As this is the only domain controller, there is no question of replicating from a authoritative domain controller. Restoring from Backup is something what you should look at.

    Lastly, I would open elevated command prompt and run the following command to reset the default policies on the server and reboot.

    DCGPOFIX

    This will reset the Domain (31B...) and Domain Controller (6AC...) policies on the domain controller.

    Note: Any custom GPO settings defined in any of the above policies would be reset.


    Regards, Vik Singh "If this thread answered your question, please click on "Mark as Answer"

    • Proposed as answer by Vik Singh Wednesday, July 17, 2013 6:53 AM
    • Marked as answer by Osman Javed Thursday, July 18, 2013 6:58 AM
    Wednesday, July 17, 2013 6:15 AM

All replies

  • Directory Server Diagnosis
    
    
    Performing initial setup:
    
       Trying to find home server...
    
       Home Server = Win2012Srv
    
       * Identified AD Forest. 
       Done gathering initial info.
    
    
    Doing initial required tests
    
       
       Testing server: Default-First-Site-Name\WIN2012SRV
    
          Starting test: Connectivity
    
             ......................... WIN2012SRV passed test Connectivity
    
    
    
    Doing primary tests
    
       
       Testing server: Default-First-Site-Name\WIN2012SRV
    
          Starting test: Advertising
    
             ......................... WIN2012SRV passed test Advertising
    
          Starting test: FrsEvent
    
             ......................... WIN2012SRV passed test FrsEvent
    
          Starting test: DFSREvent
    
             There are warning or error events within the last 24 hours after the
    
             SYSVOL has been shared.  Failing SYSVOL replication problems may cause
    
             Group Policy problems. 
             ......................... WIN2012SRV passed test DFSREvent
    
          Starting test: SysVolCheck
    
             ......................... WIN2012SRV passed test SysVolCheck
    
          Starting test: KccEvent
    
             ......................... WIN2012SRV passed test KccEvent
    
          Starting test: KnowsOfRoleHolders
    
             ......................... WIN2012SRV passed test KnowsOfRoleHolders
    
          Starting test: MachineAccount
    
             ......................... WIN2012SRV passed test MachineAccount
    
          Starting test: NCSecDesc
    
             ......................... WIN2012SRV passed test NCSecDesc
    
          Starting test: NetLogons
    
             ......................... WIN2012SRV passed test NetLogons
    
          Starting test: ObjectsReplicated
    
             ......................... WIN2012SRV passed test ObjectsReplicated
    
          Starting test: Replications
    
             ......................... WIN2012SRV passed test Replications
    
          Starting test: RidManager
    
             ......................... WIN2012SRV passed test RidManager
    
          Starting test: Services
    
             ......................... WIN2012SRV passed test Services
    
          Starting test: SystemLog
    
             An error event occurred.  EventID: 0x00000422
    
                Time Generated: 07/17/2013   11:19:49
    
                Event String:
    
                The processing of Group Policy failed. Windows attempted to read the file \\Asiasons.com\sysvol\Asiasons.com\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: 
    
    
             An error event occurred.  EventID: 0x00000422
    
                Time Generated: 07/17/2013   11:29:18
    
                Event String:
    
                The processing of Group Policy failed. Windows attempted to read the file \\Asiasons.com\sysvol\Asiasons.com\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: 
    
    
             An error event occurred.  EventID: 0x00000422
    
                Time Generated: 07/17/2013   11:38:46
    
                Event String:
    
                The processing of Group Policy failed. Windows attempted to read the file \\Asiasons.com\sysvol\Asiasons.com\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: 
    
    
             An error event occurred.  EventID: 0x00000422
    
                Time Generated: 07/17/2013   11:48:14
    
                Event String:
    
                The processing of Group Policy failed. Windows attempted to read the file \\Asiasons.com\sysvol\Asiasons.com\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: 
    
    
             An error event occurred.  EventID: 0x00002716
    
                Time Generated: 07/17/2013   11:56:59
    
                Event String:
    
                DCOM got error "2147944122" from the computer TOHCHONG-PC when attempting to activate the server:
    
    
             An error event occurred.  EventID: 0x00000422
    
                Time Generated: 07/17/2013   11:57:42
    
                Event String:
    
                The processing of Group Policy failed. Windows attempted to read the file \\Asiasons.com\sysvol\Asiasons.com\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: 
    
    
             An error event occurred.  EventID: 0x00002716
    
                Time Generated: 07/17/2013   12:02:06
    
                Event String:
    
                DCOM got error "2147944122" from the computer SHERLEEN-PC when attempting to activate the server:
    
    
             An error event occurred.  EventID: 0x0000272C
    
                Time Generated: 07/17/2013   12:02:46
    
                Event String:
    
                DCOM was unable to communicate with the computer D9D9JX1S using any of the configured protocols; requested by PID     1bf0 (C:\Windows\system32\mmc.exe).
    
             An error event occurred.  EventID: 0x00000422
    
                Time Generated: 07/17/2013   12:07:10
    
                Event String:
    
                The processing of Group Policy failed. Windows attempted to read the file \\Asiasons.com\sysvol\Asiasons.com\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: 
    
    
             ......................... WIN2012SRV failed test SystemLog
    
          Starting test: VerifyReferences
    
             ......................... WIN2012SRV passed test VerifyReferences
    
       
       
       Running partition tests on : ForestDnsZones
    
          Starting test: CheckSDRefDom
    
             ......................... ForestDnsZones passed test CheckSDRefDom
    
          Starting test: CrossRefValidation
    
             ......................... ForestDnsZones passed test
    
             CrossRefValidation
    
       
       Running partition tests on : DomainDnsZones
    
          Starting test: CheckSDRefDom
    
             ......................... DomainDnsZones passed test CheckSDRefDom
    
          Starting test: CrossRefValidation
    
             ......................... DomainDnsZones passed test
    
             CrossRefValidation
    
       
       Running partition tests on : Schema
    
          Starting test: CheckSDRefDom
    
             ......................... Schema passed test CheckSDRefDom
    
          Starting test: CrossRefValidation
    
             ......................... Schema passed test CrossRefValidation
    
       
       Running partition tests on : Configuration
    
          Starting test: CheckSDRefDom
    
             ......................... Configuration passed test CheckSDRefDom
    
          Starting test: CrossRefValidation
    
             ......................... Configuration passed test CrossRefValidation
    
       
       Running partition tests on : local
    
          Starting test: CheckSDRefDom
    
             ......................... local passed test CheckSDRefDom
    
          Starting test: CrossRefValidation
    
             ......................... local passed test CrossRefValidation
    
       
       Running enterprise tests on : local.asiasons.com
    
          Starting test: LocatorCheck
    
             ......................... local.asiasons.com passed test LocatorCheck
    
          Starting test: Intersite
    
             ......................... local.asiasons.com passed test Intersite
    
    Result for dcdiag /fix
    Wednesday, July 17, 2013 4:22 AM
  • Did you rename the domain?

    If you look at the screenshot you pasted, the sysvol version is missing. It has to be match the AD version.

    You would also notice that Netlogon and Sysvol are not shared on the server.

    As this is the only domain controller, there is no question of replicating from a authoritative domain controller. Restoring from Backup is something what you should look at.

    Lastly, I would open elevated command prompt and run the following command to reset the default policies on the server and reboot.

    DCGPOFIX

    This will reset the Domain (31B...) and Domain Controller (6AC...) policies on the domain controller.

    Note: Any custom GPO settings defined in any of the above policies would be reset.


    Regards, Vik Singh "If this thread answered your question, please click on "Mark as Answer"

    • Proposed as answer by Vik Singh Wednesday, July 17, 2013 6:53 AM
    • Marked as answer by Osman Javed Thursday, July 18, 2013 6:58 AM
    Wednesday, July 17, 2013 6:15 AM
  • Hi, yes indeed I renamed the domain a while ago. 

    We don't have a backup for this sever. It's role is AD and file sever for 10 workstations.

    Wednesday, July 17, 2013 6:22 AM
  • The domain is not functional anyway at the moment.

    I would run the DCGPOFIX and reboot and see if that solves the problem. You can run "net share" on the command prompt to verify if that worked (quick one). Also check the AD,Sysvol version in GPO management.

    Lastly, you would have to rebuild the domain.


    Regards, Vik Singh "If this thread answered your question, please click on "Mark as Answer"

    Wednesday, July 17, 2013 6:25 AM
  • Did you rename the domain?

    If you look at the screenshot you pasted, the sysvol version is missing. It has to be match the AD version.

    You would also notice that Netlogon and Sysvol are not shared on the server.

    As this is the only domain controller, there is no question of replicating from a authoritative domain controller. Restoring from Backup is something what you should look at.

    Lastly, I would open elevated command prompt and run the following command to reset the default policies on the server and reboot.

    DCGPOFIX

    This will reset the Domain (31B...) and Domain Controller (6AC...) policies on the domain controller.

    Note: Any custom GPO settings defined in any of the above policies would be reset.


    Regards, Vik Singh "If this thread answered your question, please click on "Mark as Answer"

    Hi Vik,

    After doing DCGPOFIX, i was able to see the sysvol (not available) went away and it now looks like this

    Wednesday, July 17, 2013 6:28 AM
  • Yep, that looks ok now. Make sure you can see the Netlogon and Sysvol shares.


    Regards, Vik Singh "If this thread answered your question, please click on "Mark as Answer"

    Wednesday, July 17, 2013 6:31 AM
  • I haven't rebooted the server yet. Do I have to do that? Users are logged on at the moment and accessing mapped drives. 
    Wednesday, July 17, 2013 6:36 AM
  • No, you should be ok after running that command.

    Take a backup when possible to avoid such situations.

    HTH..


    Regards, Vik Singh "If this thread answered your question, please click on "Mark as Answer"

    • Proposed as answer by Vik Singh Wednesday, July 17, 2013 6:53 AM
    Wednesday, July 17, 2013 6:37 AM
  • How do I take a backup of the tree?
    Wednesday, July 17, 2013 7:32 AM
  • Take the System State Backup.

    Windows 2003 - http://technet.microsoft.com/en-us/library/cc781353(v=ws.10).aspx

    Windows 2008 - http://technet.microsoft.com/en-us/library/cc770266(v=ws.10).aspx

    Hope that Helps!!


    Regards, Vik Singh "If this thread answered your question, please click on "Mark as Answer"

    Wednesday, July 17, 2013 7:34 AM