Userenv events 1030 and 1058 every 5 minutes

Posted on 2007-10-09
Last Modified: 2008-08-07
Hi, here's a short summary:

One Win2003 native mode domain across 3 sites.
Site A has 2 DCs; site B and C each have one.  All can talk to each other, and AD replication seems fine.

On only one DC in Site A, I'm getting Userenv Events 1030 & 1058 every five minutes.  This error also shows up sporadically on my XP Pro workstation.  From the eventlog error description:

Windows cannot access the file gpt.ini for GPO cn={E7972096-0051-41DD-A59A-160031309720},cn=policies,cn=system,DC=[DOMAIN_OMITTED],DC=com. The file must be present at the location <\\[DOMAIN_OMITTED]\SysVol\[DOMAIN_OMITTED]\Policies\{E7972096-0051-41DD-A59A-160031309720}\gpt.ini>. (The system cannot find the path specified. ). Group Policy processing aborted.

Tried dfsutil /purgemupcache, to no avail.

Strange thing is, when I run gpotool on each domain controller, I see the following for all GPOs:

    Policy {0451F6B2-AFB3-4B26-A779-93E71FB8D120}
    Error: Cannot access \\PCDC1.[DOMAIN_OMITTED]\sysvol\[DOMAIN_OMITTED]\policies\{0451F6B2-AFB3-4B26-A779-93E71FB8D120}, error 2
    Friendly name: Windows Update
    Friendly name: Windows Update
    Created: 9/14/2005 3:54:43 PM
    Changed: 7/19/2007 10:39:34 PM
    DS version:     0(user) 39(machine)
    Sysvol version: not found
    Flags: 0 (user side enabled; machine side enabled)
    User extensions: not found
    Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
    Functionality version: 2
(repeat for each DC)

I also see the following line in my userenv.log:
USERENV(2a0.16a8) 15:11:38:140 ProcessGPOs: Processing failed with error 3.

I am about to go insane troubleshooting this, as the causes and resolutions Google's found for me list everything under the sun, and nobody's instance of this problem seem to resemble mine.

Question by:g33x0r
    LVL 70

    Accepted Solution

    The fact that sysvol version cannot be found suggests it down to a problem with sysvol replication. Check the sysvol folders on both machines and look to obvious differences to confirm
    LVL 21

    Expert Comment

    Maybe there you will find something usefoul...

    Good luck

    LVL 9

    Expert Comment

    Group policies are not applied the way you expect; "Event ID 1058" and "Event ID
    1030" errors in the application log;en-us;314494

    Group Policy processing does not work and events 1030 and 1058 are logged in
    the application log of a domain controller

    Group Policy processing fails with Events 1058 and 1030 in Windows Server

    You receive event ID 1097 and event ID 1030 error events when you restart a
    Windows Server 2003-based domain controller

    Group Policy Error Message When Appropriate Sysvol Contents Are Missing>

    Author Comment


    Indeed, the DC that was throwing the error did not have the policy objects that were present in each other DC's SYSVOL folders.  I copied them over manually, and checked their permissions.

    The only "problem" now is that when I run Group Policy Management tool, it complains (for each GPO) that:

    "The permissions for this GPO in the SYSVOL folder are inconsistent with those in Active Directory.  It is recommended that these permissions be consistent.  To change the SYSVOL permissions to those in Active Directory, click OK."

    So I click OK, and see that Group Policy is processing normally again.

    Thanks for the help!
    LVL 1

    Expert Comment

    Exactly the same issue. Solution was- TCP/IP NetBIOS Helper service was not running. This service has to be set to automatic and running. Kind Regards. Eugene Roukchan. Maclean Computing.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Mapping Drives using Group policy preferences Are you still using old scripts to map your network drives if so this article will show you how to get away for old scripts and move toward Group Policy Preference for mapping them. First things f…
    On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    7 Experts available now in Live!

    Get 1:1 Help Now