asked on

Windows cannot query for the list of Group Policy objects - event log every 5 minutes

On our IBM server running Windows Server 2003 SP1, looking through the event logs I have noticed lots of messages (listed below) which occur about every 5 minutes. I understand it's giving the impression that we do not have Group Policy working. However I do have GPOs working and they are taking affect. I believe this error goes back to when we had a mjaor crash and to contact M$ support. What I'd like to know is can I remove reference to this file/GPO so that I no longer get this error message? without causing problems with my current GPO.

Event logs below:-

Event Type:      Error
Event Source:      Userenv
Event Category:      None
Event ID:      1030
Date:            07/09/2006
Time:            12:20:54
User:            NT AUTHORITY\SYSTEM
Computer:      NTSERVER
Description:
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

ALSO GET THIS:-

Event Type:      Error
Event Source:      Userenv
Event Category:      None
Event ID:      1058
Date:            07/09/2006
Time:            12:20:54
User:            NT AUTHORITY\SYSTEM
Computer:      NTSERVER
Description:
Windows cannot access the file gpt.ini for GPO CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=***********,DC=********,DC=***,DC=uk. The file must be present at the location <\\ourdomain.com\sysvol\ourdomain.com\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\gpt.ini>. (The system cannot find the path specified. ). Group Policy processing aborted.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

jvuz

http://support.microsoft.com/kb/839499/

Jeffrey Kane - TechSoEasy

Actually, it's more like this one: http://ask.support.microsoft.com/kb/842804

Jeff
TechSoEasy

AztecUK

ASKER

I've just had a look in the sysvol folder and found 6 different folders with similar name like {58F3D60C-001D-4B49-91D4-BA8B03232141} etc.. the problem appears to be that the server belives {6AC1786C-016F-11D2-945F-00C04fB984F9} should be in this folder but isn't. Looking at the two KBs they do not appear to be exactly relevant to my issue.

Can I simply just remove the reference to this "folder" so that Server 2003 doesn't keep trying to look for it?

ASKER CERTIFIED SOLUTION

Jeffrey Kane - TechSoEasy

membership

Create a free account to see this answer

Signing up is free and takes 30 seconds. No credit card required.

See answer

AztecUK

ASKER

Thanks for info, I manually put folders back in and recreated GPT.INI files, well it got rid of that error, now I'm getting this one below:-

Any ideas if I can create a new GptTmpl.inf as the path isn't in the location Server 2003 is looking for?

Event Type:      Error
Event Source:      SceCli
Event Category:      None
Event ID:      1001
Date:            08/09/2006
Time:            17:24:38
User:            N/A
Computer:      NTSERVER
Description:
Security policy cannot be propagated. Cannot access the template. Error code = 3.
      \\domain\sysvol\domain\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

AztecUK

ASKER

Another thing I'd thought I would add here, the SysVol folder currently sits on the D:\ partition but Windows 2003 Server is installed on C:\, is this a bad setup?

Jeffrey Kane - TechSoEasy

Um, yes... how did that happen?

Jeff
TechSoEasy

AztecUK

ASKER

It was done when the previous chap worked here, Server 2003 was installed and D:\Sysvol was chosen! - I don't think this is the cause of the problem, it may stem back to a bad crash almost a year ago, where 2 DCs were setup and the hard drive failed on the 2nd DC. After this we had to put a call into M$ support. They got things working again but I think after a restore the SysVol folder did not come back as expected. Question is now can I sort this second error the SceCli one out now?

Jeffrey Kane - TechSoEasy

That error is directly related to the others... I'd suspect that your permissions aren't correct on the SYSVOL folder. Is D: a separate partition or separate drive? Is it formatted NTFS? It's also probably that SP1 didn't install correctly because of this. I'd suggest that you get it back to it's correct place.

http://www.mcse.ms/archive44-2005-6-1701701.html

Jeff
TechSoEasy

AztecUK

ASKER

Thanks for last info, going to have to move SysVol over sometime out of work hours. My first questions has been resolved. I still don't appear to have the GptTmpl.inf file, even when I move sysvol I still will not have this file! - so as this question has been more than answered I'll probably open a new question on resolving this deleted GptTmpl.inf issue.