none
Event ID: 1058 and 1030 RRS feed

  • Question

  • Hi,

    I have a client case where our client has Windows Server 2003 AD environment. On one member server (not DC, this has Terminal Server role) I receive following error messages in Event Viewer Application log every time I run "gpupdate /force":

    Event ID 1030

    and Event ID 1058

    I have hidden client domain name as per security reasons. Let's call domain as "domain.net". Let's say this problematic client server name is for example "SRV01" and Domain Controller name is "DC01".

    Here is how I have trobleshooted this issue:

    1. Tried to ping domain.net - reply from on of the DC's (DC01) 192.168.100.100 (for example)
    2. Open \\domain.net\SysVol\domain.net\Policies\ share with Windows Explorer from SRV01 - working ok
    3. Open \\domain.net\SysVol\domain.net\Policies\{DA12E8D1-8712-40C6-BC86-91084100ED4A}\ share with Windows Explorer from SRV01 - not working (error message: Windows cannot find '\\domain.net\SysVol\domain.net\Policies\{DA12E8D1-8712-40C6-BC86-91084100ED4A}\'. Check the spelling and try again, or try searching for the item by clicking the Start button and then clicking Search.)
    4. Open \\DC01\SysVol\domain.net\Policies\{DA12E8D1-8712-40C6-BC86-91084100ED4A}\ - working ok!
    5. Clear client MUP cache (on SRV01) with command: "dfsutil /PurgeMupCache" - no help

    Can you figure out based on this information what is the problem here? It seems weird to me that when using the domain name this folder does not open but when using the DC name instead of domain name, it does open. I have managed to repeat this problem (step 3.) on other servers as well but on some servers this works just fine. Any ideas what is causing this problem?

    Thanks in advance for your answers and help!

    Best regards,

    Toni


    www.triuvare.fi

    Tuesday, November 6, 2012 4:36 PM

Answers

  • At the very least - although the replication failure is typically a result of some underlying issue. In any case, you should start troubleshooting the health of DC2 (assuming of course that you are not seeing the same symptoms on other DCs)

    hth
    Marcin

    • Proposed as answer by 朱鸿文 Wednesday, November 7, 2012 5:49 AM
    • Marked as answer by Toni Rantanen Wednesday, November 7, 2012 6:51 PM
    Tuesday, November 6, 2012 5:19 PM

All replies

  • How many domain controllers are there? Keep in mind that domain.net might resolve to different IP addresses due to round robin mechanism...

    What's the output of

    nslookup domain.net
    dfsutil /pktinfo

    from the client computer?

    hth
    Marcin

    Tuesday, November 6, 2012 4:49 PM
  • Hi Marcin,

    Thanks for your quick reply!

    Please find result of those commands on below (I have changed server names and IP addresses for security reasons):

    ---------------------


    C:\>nslookup domain.net
    Server:  dc01.domain.net
    Address:  192.168.100.100

    Name:    domain.net
    Addresses:  192.168.100.105, 192.168.100.100, ... (list continues with other DC's IP addresses)


    C:\>dfsutil /pktinfo

    DFS Utility Version 5.2 (built on 5.2.3790.3959)
    Copyright (c) Microsoft Corporation.  All rights reserved.

    --mup.sys--
    2 entries...
    Entry: \domain.net\SysVol
    ShortEntry: \domain.net\SysVol
    Expires in 660 seconds
    UseCount: 0 Type:0x1 ( DFS )
       0:[\DC02.domain.net\SysVol] State:0x131 ( ACTIVE TARGETSET )
       1:[\DC01.domain.net\SysVol] State:0x21 ( )
       2:[\DC03.domain.net\SysVol] State:0x21 ( )
       3:[\DC04.domain.net\SysVol] State:0x121 ( TARGETSET )
       4:[\DC05.domain.net\SysVol] State:0x21 ( )
    (list continues with other DC's similar informatio)

    Entry: \domain.net\NETLOGON
    ShortEntry: \domain.net\NETLOGON
    Expires in 0 seconds
    UseCount: 0 Type:0x1 ( DFS )
       0:[\DC01.domain.net\NETLOGON] State:0x131 ( ACTIVE TARGETSET )
       1:[\DC03.domain.net\NETLOGON] State:0x21 ( )
       2:[\DC02.domain.net\NETLOGON] State:0x21 ( )
       3:[\DC05.domain.net\NETLOGON] State:0x121 ( TARGETSET )
       4:[\DC04.domain.net\NETLOGON] State:0x21 ( )
    (list continues with other DC's similar informatio)

    DfsUtil command completed successfully.

    C:\>

    ---------------------

    Best regards,

    Toni


    www.triuvare.fi

    Tuesday, November 6, 2012 4:59 PM
  • looks like you might want to check DC2

    hth
    Marcin

    Tuesday, November 6, 2012 5:04 PM
  • Hi Marcin,

    The folder ({DA12E8D1-8712-40C6-BC86-91084100ED4A} under \\DC02\SysVol\domain.net\Policies\) was missing from DC02.

    So I think I have replication issue on DC02 then?

    Best regards,

    Toni


    www.triuvare.fi

    Tuesday, November 6, 2012 5:13 PM
  • At the very least - although the replication failure is typically a result of some underlying issue. In any case, you should start troubleshooting the health of DC2 (assuming of course that you are not seeing the same symptoms on other DCs)

    hth
    Marcin

    • Proposed as answer by 朱鸿文 Wednesday, November 7, 2012 5:49 AM
    • Marked as answer by Toni Rantanen Wednesday, November 7, 2012 6:51 PM
    Tuesday, November 6, 2012 5:19 PM
  • Hi Marcin,

    One more question... how does the client decide to use a specific DC as ACTIVE TARGETSET (in this case DC02)? Is this randomly chosen or can I somehow affect it?

    Best regards,

    Toni


    www.triuvare.fi

    Wednesday, November 7, 2012 6:53 PM