Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 284
  • Last Modified:

Windows 2000 server error 1000

Every 5 minutes, I get the following message:

Windows cannot query for the list of Group Policy objects . A message that describes the reason for this was previously logged by this policy engine.


I have tried the following (Article 279432- MS kb)
CAUSE
This issue can occur if the link from the Default Domain Controllers policy to the Domain Controllers organizational unit has been broken.


RESOLUTION
To resolve this issue, add a Group Policy object link for the Default Domain Controller policy to the Domain Controllers organizational unit:

Start the Active Directory Users and Computers snap-in.

Right-click the Domain Controllers organizational unit and click Properties.

Click the Group Policy tab, and then click Add.

Click the All tab, click Default Domain Controllers policy and then click OK.

Quit the Active Directory Users and Computers snap-in.


But that didn't change anything.

What else could cause that problem?

Tx for your help
0
svey
Asked:
svey
  • 8
  • 7
  • 3
  • +1
1 Solution
 
MSGeekCommented:
Did you reboot after making the changes?
0
 
sveyAuthor Commented:
MsGeek,

Yes, and I have tried removing, rebooting, reinstalling and rebooting while that server was still in a "lab" setting.

0
 
MSGeekCommented:
Thanks for the reply, no idea at this point... listening.
0
Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

 
FishMongerCommented:
If you give us the source and category of the error message in the event log, we might be able to find additional causes/solutions.
0
 
sveyAuthor Commented:
Source is USERENV
Category is none
Id is 1000

I hope this helps.

0
 
FishMongerCommented:
About one third down the page of this link is a reference to your error.  Hopefully it will help.

http://www.eventid.net/display.asp?eventid=1000&source=userenv
0
 
FishMongerCommented:
Correction, it's almost 2/3's down the page.  Also the error message that you posted refers to a previous error message that should shed some light on the cause of the problem.
0
 
sveyAuthor Commented:
That didn't work.  I have more info on that problem:

I get these error every 5 minutes:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 3/17/2003
Time: 10:28:33 AM
User: NT AUTHORITY\SYSTEM
Computer: AMPPDC
Description:
Windows cannot query for the list of Group Policy objects . A message that describes the reason for this was previously logged by this policy engine.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 3/17/2003
Time: 10:28:33 AM
User: NT AUTHORITY\SYSTEM
Computer: AMPPDC
Description:
Windows cannot establish a connection to amppdc.am-p.com with (1787).


This the logs for the User Enviroment :

USERENV(78.2f4) 10:28:33:367 ProcessGPOs:
USERENV(78.2f4) 10:28:33:367 ProcessGPOs:
USERENV(78.2f4) 10:28:33:367 ProcessGPOs: Starting computer Group Policy processing...
USERENV(78.2f4) 10:28:33:367 ProcessGPOs:
USERENV(78.2f4) 10:28:33:367 ProcessGPOs:
USERENV(78.2f4) 10:28:33:367 EnterCriticalPolicySection: Machine critical section has been claimed. Handle = 0x688
USERENV(78.2f4) 10:28:33:382 ProcessGPOs: Machine role is 3.
USERENV(78.2f4) 10:28:33:382 PingComputer: First time: 0
USERENV(78.2f4) 10:28:33:382 PingComputer: Fast link. Exiting.
USERENV(78.2f4) 10:28:33:382 ProcessGPOs: User name is: CN=AMPPDC,OU=Domain Controllers,DC=amppdc,DC=am-p,DC=com, Domain name is: AM-P.COM
USERENV(78.2f4) 10:28:33:382 ProcessGPOs: Domain controller is: \\amppdc.am-p.com Domain DN is amppdc.am-p.com
USERENV(78.2f4) 10:28:33:398 ProcessGPOs: Calling GetGPOInfo for normal policy mode
USERENV(78.2f4) 10:28:33:398 GetGPOInfo: ********************************
USERENV(78.2f4) 10:28:33:398 GetGPOInfo: Entering...
USERENV(78.2f4) 10:28:33:414 GetGPOInfo: Server connection established.
USERENV(78.2f4) 10:28:33:414 GetGPOInfo: ldap_bind_s failed with = <82>
USERENV(78.2f4) 10:28:33:414 GetGPOInfo: Leaving with 0
USERENV(78.2f4) 10:28:33:429 GetGPOInfo: ********************************
USERENV(78.2f4) 10:28:33:429 ProcessGPOs: GetGPOInfo failed.
USERENV(78.2f4) 10:28:33:429 LeaveCriticalPolicySection: Critical section 0x688 has been released.
USERENV(78.2f4) 10:28:33:429 ProcessGPOs: Computer Group Policy has been applied.
USERENV(78.2f4) 10:28:33:429 ProcessGPOs: Leaving with 0.
USERENV(78.2f4) 10:28:33:445 GPOThread: Next refresh will happen in 5 minutes

I'm not sure how to read the logs. Can anybody help?

Tx
0
 
MSGeekCommented:
Sounds like there is a bigger problem here, can you run DCDiag on the serer and let us know the results:
http://www.microsoft.com/windows2000/techinfo/reskit/tools/new/dcdiag-o.asp
0
 
sveyAuthor Commented:
Msgeek,

Does dcdiag creates a log file?  If so where is it?
0
 
sveyAuthor Commented:
Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests
   
   Testing server: Default-First-Site-Name\AMPPDC
      Starting test: Connectivity
         ......................... AMPPDC passed test Connectivity

Doing primary tests
   
   Testing server: Default-First-Site-Name\AMPPDC
      Starting test: Replications
         ......................... AMPPDC passed test Replications
      Starting test: NCSecDesc
         ......................... AMPPDC passed test NCSecDesc
      Starting test: NetLogons
         ......................... AMPPDC passed test NetLogons
      Starting test: Advertising
         ......................... AMPPDC passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... AMPPDC passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... AMPPDC passed test RidManager
      Starting test: MachineAccount
         ......................... AMPPDC passed test MachineAccount
      Starting test: Services
            SMTPSVC Service is stopped on [AMPPDC]
         ......................... AMPPDC failed test Services
      Starting test: ObjectsReplicated
         ......................... AMPPDC passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... AMPPDC passed test frssysvol
      Starting test: kccevent
         ......................... AMPPDC passed test kccevent
      Starting test: systemlog
         ......................... AMPPDC passed test systemlog
   
   Running enterprise tests on : amppdc.am-p.com
      Starting test: Intersite
         ......................... amppdc.am-p.com passed test Intersite
      Starting test: FsmoCheck
         ......................... amppdc.am-p.com passed test FsmoCheck
0
 
MSGeekCommented:
DcDiag looks good.

The following proposes to delete the links and recreate them one by one, it makes sense: http://www.eventid.net/show.asp?DocId=15  It wouldn't hurt to review it.
0
 
sveyAuthor Commented:
I followed the instructions and have remove the gpo last night.  I have rebooted the server but I'm still getting the same error message every 5 minutes
0
 
sveyAuthor Commented:
I also ran netdiag /q and got the following but I don't know if these problem could be related to my problem.




    Computer Name: AMPPDC
    DNS Host Name: amppdc.am-p.com
    System info : Windows 2000 Server (Build 2195)
    Processor : x86 Family 15 Model 2 Stepping 4, GenuineIntel
    List of installed hotfixes :
        Q147222
        q323172
        Q323255
        Q324096
        Q324380
        Q326830
        Q326886
        Q327696
        Q328310
        Q329115
        Q329170
        Q329834
        Q810030
        Q810649
        Q810833
        Q811630


Global results:
    [WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.


DNS test . . . . . . . . . . . . . : Failed
              [FATAL]: The DNS registration for 'amppdc.am-p.com' is incorrect on all DNS servers.
    [WARNING] The DNS entries for this DC are not registered correctly on DNS server '207.236.151.164'. Please wait for 30 minutes for DNS server replication.
    [FATAL] No DNS servers have the DNS records for this DC registered.

IP Security test . . . . . . . . . : Passed


The command completed successfully
0
 
MSGeekCommented:
I'm going to have to stew on this one for a little while.
0
 
MSGeekCommented:
0
 
sveyAuthor Commented:
A consultant was hired to resolve the problem. Thank you to all whom have tried to help.  Please cancel the question and refund points
0
 
SpideyModCommented:
Experts, a request for a refund has been made.  You have 72 hours to object.

SpideyMod
Community Support Moderator @Experts Exchange
0
 
MSGeekCommented:
No objection here Spidey.
0
 
SpideyModCommented:
PAQ'd and all 350 points refunded.
All responses from FishMonger have been tried and didn't solve the problem so I feel it safe to PAQ now.

SpideyMod
Community Support Moderator @Experts Exchange
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 8
  • 7
  • 3
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now