| Author | Messages | |
Alix
Posts:10
 | | 05/10/2012 4:20 PM |
| Hi Everyone,
Some of our (not all, just a very few of them) computers have event 1058 :
cannot access the file gpt.ini for GPO.
Our domain is still based on serv2003 : domain.com
The clients are pc_xy.subdomain.domain.com and windows 7
The clients and the domain controllers are not in the same ip network.
The clients seem to have no other problem than this one.
The DNS is all right. The clients having problems are not in a particular
ip network and all the clients are installed from the same image (+sysprep)
The little trick : there is a web server http://domain.com which is not a
domain controller (and which is as old as the web itself)
So, I really understand that the clients have problem finding the GPO...
and I really don't know how (miracle ? / registry / but the first time ?)
the other clients are able finding it !
I have checked :
the TCP/IP NetBIOS Helper, Netlogon, and the Remote Procedure Call (RPC)
services are started and set to Automatic.
http://support.microsoft.com/default.aspx?scid=kb;EN-US;887303
(
Userenv errors occur and events are logged after you apply Group Policy to
computers that are running Windows Server 2003, Windows XP, or Windows 2000
)
Any idea vould help !
(very sorry for the first email)
Thanks
Alix
| | | |
| skradel
Posts:355
| | 05/10/2012 4:28 PM |
| Perhaps there are mismatched security descriptors between the GPO
object in AD and the files in SYSVOL? The GPO management console
should warn you of this if that's the case.
You might consider running Sysinternals Process Monitor while doing
"gpupdate /force" to capture runtime details about the error, and/or
adjust client side logging levels:
http://technet.microsoft.com/en-us/library/cc775423(v=ws.10).aspx
Just to be safe, this would be a good time to exercise "nltest" and "dcdiag".
--Steve
On Thu, May 10, 2012 at 11:18 AM, Alix Henrotte <alix.henrotte@xxxxxxxxxxxxxxxx> wrote:
> Hi Everyone,
>
> Some of our (not all, just a very few of them) computers have event 1058 :
> cannot access the file gpt.ini for GPO.
> Our domain is still based on serv2003 : domain.com
> The clients are pc_xy.subdomain.domain.com and windows 7
> The clients and the domain controllers are not in the same ip network.
> The clients seem to have no other problem than this one.
>
> The DNS is all right. The clients having problems are not in a particular ip
> network and all the clients are installed from the same image (+sysprep)
> The little trick : there is a web server http://domain.com which is not a
> domain controller (and which is as old as the web itself)
>
> So, I really understand that the clients have problem finding the GPO... and
> I really don't know how (miracle ? / registry / but the first time ?) the
> other clients are able finding it !
> I have checked :
> the TCP/IP NetBIOS Helper, Netlogon, and the Remote Procedure Call (RPC)
> services are started and set to Automatic.
>
> http://support.microsoft.com/default.aspx?scid=kb;EN-US;887303
>
> (
>
> Userenv errors occur and events are logged after you apply Group Policy to
> computers that are running Windows Server 2003, Windows XP, or Windows 2000
>
> )
>
>
>
> Any idea vould help !
>
> (very sorry for the first email)
>
>
>
> Thanks
>
>
>
> Alix
List info: http://www.activedir.org/List.aspx
| | | |
| bijubabuk
Posts:153
| | 05/10/2012 4:41 PM |
| Running gpotool /checkacl in a 2003 DC will help check the GPO's health
Rgds
My working hours are from 11:00 to 19:30 IST (00:30 to 09:00 CST)
-----Original Message-----
From: activedir-owner@xxxxxxxxxxxxxxxx [mailto:activedir-owner@xxxxxxxxxxxxxxxx] On Behalf Of skradel@xxxxxxxxxxxxxxxx
Sent: Thursday, May 10, 2012 8:57 PM
To: activedir@xxxxxxxxxxxxxxxx
Subject: Re: [ActiveDir] event 1058 + \\mydomain\sysvol - le bon ! - the good one
Perhaps there are mismatched security descriptors between the GPO object in AD and the files in SYSVOL? The GPO management console should warn you of this if that's the case.
You might consider running Sysinternals Process Monitor while doing "gpupdate /force" to capture runtime details about the error, and/or adjust client side logging levels:
http://technet.microsoft.com/en-us/library/cc775423(v=ws.10).aspx
Just to be safe, this would be a good time to exercise "nltest" and "dcdiag".
--Steve
On Thu, May 10, 2012 at 11:18 AM, Alix Henrotte <alix.henrotte@xxxxxxxxxxxxxxxx> wrote:
> Hi Everyone,
>
> Some of our (not all, just a very few of them) computers have event 1058 :
> cannot access the file gpt.ini for GPO.
> Our domain is still based on serv2003 : domain.com The clients are
> pc_xy.subdomain.domain.com and windows 7 The clients and the domain
> controllers are not in the same ip network.
> The clients seem to have no other problem than this one.
>
> The DNS is all right. The clients having problems are not in a
> particular ip network and all the clients are installed from the same
> image (+sysprep) The little trick : there is a web server
> http://domain.com which is not a domain controller (and which is as
> old as the web itself)
>
> So, I really understand that the clients have problem finding the
> GPO... and I really don't know how (miracle ? / registry / but the
> first time ?) the other clients are able finding it !
> I have checked :
> the TCP/IP NetBIOS Helper, Netlogon, and the Remote Procedure Call
> (RPC) services are started and set to Automatic.
>
> http://support.microsoft.com/default.aspx?scid=kb;EN-US;887303
>
> (
>
> Userenv errors occur and events are logged after you apply Group
> Policy to computers that are running Windows Server 2003, Windows XP,
> or Windows 2000
>
> )
>
>
>
> Any idea vould help !
>
> (very sorry for the first email)
>
>
>
> Thanks
>
>
>
> Alix
List info: http://www.activedir.org/List.aspx
List info: http://www.activedir.org/List.aspx
| | | |
|
|