We help IT Professionals succeed at work.

Check out our new AWS podcast with Certified Expert, Phil Phillips! Listen to "How to Execute a Seamless AWS Migration" on EE or on your favorite podcast platform. Listen Now

x

Everything in SYSVOL directory was deleted

sux2b
sux2b asked
on
Medium Priority
1,036 Views
Last Modified: 2010-04-19
I have been getting the following messages.
Event Type:      Error
Event Source:      Userenv
Event Category:      None
Event ID:      1030
Date:            4/5/2004
Time:            10:43:23 PM
User:            CDTOWING\rpotter
Computer:      SERVER
Description:
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type:      Error
Event Source:      Userenv
Event Category:      None
Event ID:      1058
Date:            4/5/2004
Time:            10:43:23 PM
User:            CDTOWING\rpotter
Computer:      SERVER
Description:
Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=CDTowing,DC=local. The file must be present at the location <\\CDTowing.local\sysvol\CDTowing.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. (The system cannot find the path specified. ). Group Policy processing aborted.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Upon looking into this error i noticed that the sysvol folder is empty. Is there any way to recreate these directorys and files. The system seems to be functional with a few little problems here and there. The is a small business server 2003 providing file and print services, SQL Server, DNS, DHCP, and WINS.

Thanks in advance for your assistance.
Comment
Watch Question

Commented:
Are you sure that they aren't just hidden?

The SYSVOL is a critical folder for Windows DC's and i would have though you'd got a stack load more errors if it had been deleted.

If you do backups, SYSVOL is part of the system state and if you back that up nightly then you could restore that.

Please double check the the SYSVOL sub-folders and file are gone, as making any changes can have a massive effect on your server ad network!

Author

Commented:
After looking at the folder a little closer it is indeed empty.
c:\windows\sysvol\sysvol

But if I look a directory higher i see a folder that is named domain and it contains the guid that the event viewer is complaining about.
c:\windows\sysvol\domain

I looked at another 2003 domain server ad it had no such directory. So I am thinking that maybe someone moved this directory and renamed it some how. (Personally I think that's a stretch but....) So do you think I can make a copy of it and rename it to the domain name and put it into the correct path?

Commented:
As SYSVOL is a critical folder and as I understand you only have one domain controller (if you have two then you can simple force replication and copy the data back)

have a look at this and see if it helps:
http://support.microsoft.com/default.aspx?scid=kb;en-us;327781&sd=tech

Author

Commented:
You are correct i only have the one domain controller. I will have a look at the ink in the morning. Eyes are shot for now. I will update after i review the link.

Thanks again
Ron
CERTIFIED EXPERT
Top Expert 2005

Commented:
If you have more than one DC, find the DC that has the most current SYSVOL data.  Compare the information in Domain (specifically the Policies) to the ones listed in Active Directory Users and Computers (enable Advanced Settings) in System\Policies.  The GUIDs should match.  Any additional GUID entries in SYSVOL that are NOT shown in AD can be deleted.

Follow this article carefully:

http://support.microsoft.com/default.aspx?scid=kb;en-us;316790&Product=win2000

Basically, you stop FRS service on ALL DCs, pick the DC that has the best SYSVOL and D4 it.  The others get D2'd.  Start up FRS on the D4'd controller and WAIT for SYSVOL to start advertising (check the event logs).  Once this happens, you can start FRS on the other DCs.

Advise.
CERTIFIED EXPERT
Top Expert 2005

Commented:
I must have been tired also - I posted based on more than one DC which you clearly said you had only one....  I need a vacation!

Try this then:

http://support.microsoft.com/default.aspx?kbid=315457

Commented:
Netman66 -

I can highly recommend a break in New Zealand. Two weeks wandering around the South Island did wonders from me, I still feel relaxed weeks on!
 
:-)
CERTIFIED EXPERT
Top Expert 2005

Commented:
Is that an invitation?

Commented:
If EE points were only air miles, I'd happily fund the flight ... ;-)

Sadly, it was only a holiday location.
I'm living across the Tasmin Sea from NZ and I don't think the other half would be happy to turn the flat in to a holiday home for EE members.

When I win one of the lotteries perhaps!
CERTIFIED EXPERT
Top Expert 2005

Commented:
You're on.

If you ever want to come to Canada - let me know - the door is open.

Commented:
Thank you for your most kind offer!

Now to see if I can engineer a "working" site visit, fully paid for by the office for a couple of weeks ...

I'll stand you a couple of cold ones, should every get down to this warm part of the world.



CERTIFIED EXPERT
Top Expert 2005

Commented:
I'll hold you to it!

Keep me in mind if ever you find yourself in New Brunswick, Canada.

Author

Commented:
Netman66,

It looks like the artical was written for 2000.....Will the same procedure sitll work for sbs 2003?

Thanks again for your assistance.
CERTIFIED EXPERT
Top Expert 2005
Commented:
Unlock this solution with a free trial preview.
(No credit card required)
Get Preview
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a free trial preview!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.