some users unable to access public network share (security/group policy problem?)

A few random users have been losing connection to their network share.. and I can't figure out why. =/

We have a Windows 2003 server that has a public folder for the organizations in our company:
Folder structurs looks similar to below.. each department has it's own folder and subfolders underneath it. This is accessible to everyone in the company.. but only people in a certain dept can access their dept folder.

\\server\public\
-dept1
  -a
  -b
-dept2
  -a
  -b

When a user logs on, we have a bat file set in group policy to automatically map the path to a network drive W. This had been working for everyone until recently where so far 5 people are getting this problem (and it seems to grow 1 user every week) . =/
Here's the event log that the computers get when a user logs on..

Symantec Endpoint Protection services startup was successful.

Warning:
The COM+ Event System failed to create an instance of the subscriber partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:{6295DF2D-35EE-11D1-8707-00C04FD93327}.  CoGetObject returned HRESULT 8000401A.

An error occurred while signing a message using the inserted smart card: Provider could not perform the action since the context was acquired as silent.
(Smart Card Logon)

Failed to perform redirection of folder Desktop. The new directories for the redirected folder could not be created. The folder is configured to be redirected to <\\server\users\%USERNAME%\Desktop>, the final expanded path was <\\server\users\bob.smith\Desktop>. The following error occurred:
This security ID may not be assigned as the owner of this object.

The Group Policy client-side extension Folder Redirection failed to execute. Please look for any errors reported earlier by that extension.

Function: OpenKey - SOFTWARE\Microsoft\Cryptography\{7801EBD0-CF4B-11D0-851F-0060979387EA} returned Win32 Error: 0 Description: The operation completed successfully.

Could not execute the following script logoffupdateDesc.bat. The system cannot find the file specified.  
(this is a script that runs via GP to update the computer description field in AD which from this error, of course - fails to run)

The following handles in user profile hive domain\bob.smith have been remapped because they were preventing the profile from unloading successfully:
  svchost.exe (1272)
  HKCU\Software\Microsoft\Windows NT\CurrentVersion\Network\Location Awareness (0x2b0)
  rtvscan.exe (1632)
  HKCU\Software\Symantec\Symantec Endpoint Protection\AV\Custom Tasks\6adf66de-de87-4077-ab3b-de463e11287b (0xbec)


Windows cannot access the file gpt.ini for GPO CN={1408E1AA-895C-40B2-A129-BD417F3B3067},CN=Policies,CN=System,DC=company,DC=com. The file must be present at the location <\\company.com\SysVol\company.com\Policies\{1408E1AA-895C-40B2-A129-BD417F3B3067}\gpt.ini>. (The network path was not found. ). Group Policy processing aborted.

Windows cannot query for the list of Group Policy objects. A message that describes the reason for this was previously logged by the policy engine.

Could not execute the following script logon.bat. The system cannot find the file specified.

Could not execute the following script loginupdateDesc.bat. The system cannot find the file specified.

Function: OpenKey - SOFTWARE\Microsoft\Cryptography\{7801EBD0-CF4B-11D0-851F-0060979387EA} returned Win32 Error: 0 Description: The operation completed successfully.
(Desktop Validator error)

----------------------------

I googled and did find a CMD that did seem to work.. but upon logging off and logging back on, the security policies revert back to the way it was and we get the error again.

Secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose

Is anyone familiar with this problem? Would this relate to Symantec 11 antivirus? I believe it also happend on other users machines that didnt have 11 installed..
Start Free Trial