Question

Windows cannot access the file gpt.ini for GPO

Asked by: spacoit

Windows cannot access the file gpt.ini for GPO cn={AF898B5E-58DB-4EA5-B788-3B41FFA1C429},cn=policies,cn=system,DC=server,DC=local. The file must be present at the location <\\DC Server\SysVol\DC Server\Policies\{AF898B5E-58DB-4EA5-B788-3B41FFA1C429}\gpt.ini>. (Access is denied. ). Group Policy processing aborted.

This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Asked On
2009-11-20 at 07:41:49ID24917977
Tags

gpt.ini for GPO

Topics

Windows 2000 Operating System

,

Active Directory

Participating Experts
4
Points
500
Comments
8

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. Windows cannot access the file gpt.ini for GPO CN={3…
    Recently promoted a windows 2003 server in our AD, transferred all roles, including GC, and then demoted the old 2000 server. After a reboot last week, I get this error in event viewer every 5 minutes. Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945...
  2. Windows cannot access the file gpt.ini for GPO
    Hi, I am recieving the following error on a Small Buisness Server 2003 Box Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=Amoonguna,DC=local. The file must be present at the location <\\Amoonguna.local\sys...
  3. Windows cannot access the file gpt.ini for GPO CN={3…
    On Saturday night I patched all of our servers with the most recent windows updates. One of our domain controllers has been reporting event ID 1030 and 1058 every 5 minutes or when I manually do a gpupdate /force ever since the updates. EVENT ID 1030 Windows cannot query fo...
  4. gpt.ini deleted (help)
    Windows cannot access the file gpt.ini for GPO CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=charettetransport,DC=com. The file must be present at the location <\\charettetransport.com\sysvol\charettetransport.com\Policies\{6AC1786C-016F-11D2-945F-00C0...
  5. Windows cannot access the file gpt.ini for GPO - CN id m…
    Here's the event I'm finding in the Application log of my Windows 2003 DC: Userenv event ID: 1058 Windows cannot access the file gpt.ini for GPO CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=OFFQ,DC=local. The file must be present at the location <\\OF...
  6. Windows cannot access the file gpt.ini for GPO cn=
    Hello Experts I'm getting the below error on my Windows SBS 2003 server with all latest updates and SP. I also get the exact same error on the XP Pro boxes connected to this server. Windows cannot access the file gpt.ini for GPO cn={70D2BF45-156B-4429-8333-91CCF0E53128},cn...

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: Jmoody10Posted on 2009-11-20 at 07:46:53ID: 25871389

Do you have this computer set to wait for network on startup?

This GP setting can be found in Computer Config\Admin Templates\System\Logon. It is named "Always wait for the network at computer startup and logon"

 

by: PeteJThomasPosted on 2009-11-20 at 07:58:37ID: 25871509

"Access Denied" is indicating that for some reason you don't have permissions to the folder specified (which is the standard folder location for policies, the {AF898B5E-58DB-4EA5-B788-3B41FFA1C429} part is unique to this particular policy).

If you're not the domain administrator for your network, then this could quite easily be intentional. If you are the administrator, can you please add a little more detail than just the error?

Where are you seeing this error? In the event logs of ALL clients, just a particular client etc? What kind of policy is it that is failing? User or Computer?

You can also run "gpresult" from a command prompt on any machine having the problem - This will show you clearly which particular policy is having the problem, and then hopefully you just need to check the security settings etc etc.

But I'll be able to advise you better once you've added a bit more meat to your question... :)

Pete

 

by: henjoh09Posted on 2009-11-20 at 08:26:48ID: 25871822

See this KB for troubleshooting 1030 and 1058 errors.
http://support.microsoft.com/kb/887303

 

by: AwinishPosted on 2009-11-20 at 11:30:47ID: 25873618

I think instead of GPresult, run RSOP.MSC & you will see the actuall which policy is applying.

Run gpupdate /force & check the event viewer.

http://support.microsoft.com/kb/842804

Also enable userenv logging.

http://support.microsoft.com/kb/221833

http://support.microsoft.com/kb/250842

You can try this also,export the settings of Problem GPo using GPMC tool to local drive & create the new policy & export the settings,why i'm asking you to do it,becasue due to corruption in adm files you get this error.

 

by: PeteJThomasPosted on 2009-11-20 at 11:42:19ID: 25873733

Either or, though I think RSOP is a little overkill to just identify which policy is being denied - gpresult will show this pretty clearly.

Access Denied is a nice easy one to solve normally, you just need to know which policy it is, and whether it's the computer part of user part that is having problems. (and whether or not this problem is affecting a single client or a whole bunch of them!).

Pete

 

by: spacoitPosted on 2009-12-02 at 13:15:50ID: 25956684

Pete,
I am getting the error message on our main DC.  It is happening many times a day.

The result from gpresult is attached.  I do not see that anything is being denied in the gpresult.  There are several policies being filtered.

The only machine getting this error is the main DC.

 



C:\Documents and Settings\MyAdmin>gpresult 
Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001 
Created On 12/2/2009 at 3:54:46 PM 
 
RSOP data for MyDomain\ MyAdmin on ADMDC01 : Logging Mode
------------------------------------------------------ 
OS Type:                     Microsoft(R) Windows(R) Server 2003, Enterprise Edi
tion
OS Configuration:            Primary Domain Controller
OS Version:                  5.2.3790
Terminal Server Mode:        Remote Administration
Site Name:                   Default-First-Site-Name
Roaming Profile:
Local Profile:               C:\Documents and Settings\ MyAdmin
Connected over a slow link?: No 
 
COMPUTER SETTINGS
------------------
    CN=ADMDC01,OU=Domain Controllers,DC=MyDomain,DC=local
    Last time Group Policy was applied: 12/2/2009 at 3:51:55 PM
    Group Policy was applied from:      admdc01. MyDomain.local
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        MyDomain
    Domain Type:                        WindowsNT 4 
    Applied Group Policy Objects
    -----------------------------
        Recover Emails in Outlook DumpsterAlwaysOn
        Password Audit policy
        Default Domain Controllers Policy 
    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty) 
    The computer is a part of the following security groups
    -------------------------------------------------------
        BUILTIN\Administrators
        Everyone
        BUILTIN\Pre-Windows 2000 Compatible Access
        BUILTIN\Users
        Windows Authorization Access Group
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        This Organization
        ADMDC01$
        Domain Controllers
        NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
        RAS and IAS Servers 
 
USER SETTINGS
--------------
    CN=Name\, My M,OU=Users,OU=InformationTechnologies,DC=MyDomain,DC=local
    Last time Group Policy was applied: 12/2/2009 at 3:54:26 PM
    Group Policy was applied from:      admdc01. MyDomain.local
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        MyDomain
    Domain Type:                        Windows 2000 
    Applied Group Policy Objects
    -----------------------------
        Default Domain Policy
        Cymphonix User Agent Policy
        Local Group Policy 
    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Recover Emails in Outlook DumpsterAlwaysOn
            Filtering:  Not Applied (Empty) 
        Power Management CFG Auth User Full Permission
            Filtering:  Not Applied (Empty) 
        WSUS
            Filtering:  Not Applied (Empty) 
        SysAid
            Filtering:  Not Applied (Empty) 
        Password Audit policy
            Filtering:  Not Applied (Empty) 
        Windows Firewall Disable Policy
            Filtering:  Not Applied (Empty) 
    The user is a part of the following security groups
    ---------------------------------------------------
        Domain Users
        Everyone
        BUILTIN\Users
        BUILTIN\Pre-Windows 2000 Compatible Access
        BUILTIN\Administrators
        Remote Desktop Users
        REMOTE INTERACTIVE LOGON
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        This Organization
        LOCAL
        Domain Admins
        RMS
        JMS
        IT
        VPNUsers
         
C:\Documents and Settings\ MyAdmin >
                                              
1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:

Select allOpen in new window

 

by: PeteJThomasPosted on 2009-12-02 at 15:35:54ID: 25957756

Ok, that does all look fine - now you really need to identify which policy that UID relates to... So go into GPMC, open up the GPO container, and edit each policy one after the other - When the edit window opens, just right-click the top of the tree, and select Props - I believe this shows you the UID of that policy - Go through them all until you match {AF898B5E-58DB-4EA5-B788-3B41FFA1C429} to one of them, so you know which policy it is.

Let me know what you find? Once we know the specific policy it'll be much easier to sort it out... :)

Pete

Pete

 

by: spacoitPosted on 2009-12-29 at 06:32:33ID: 31656673

None

20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...