sumeghvyas
asked on
USRENV Errors 1030 , 1058 , 1512 , 1054 on windows XP sp2 machine in an SBS 2003 R2 Network
We have one mobile user who is having severe network issues on their laptop. The computer is not able to access any network resources after 10 to 15 minutes following a Re-Start. The Application Log is riddled with the following errors. A re-boot will resolve the problem for a few minutes and then the problem starts again. The Computer is on XP Pro SP2. Our network is SBS 2003 R2 Premium.
Event Log Details Below: (Domain Name Changed to MYDOMAIN)
==========================
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 11/16/2007
Time: 8:31:16 AM
User: MYDOMAIN\rallen
Computer: ROBMOBILE
Description:
Windows cannot query for the list of Group Policy objects. A message that describes the reason for this was previously logged by the policy engine.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
==========================
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 11/16/2007
Time: 8:31:16 AM
User: MYDOMAIN\rallen
Computer: ROBMOBILE
Description:
Windows cannot access the file gpt.ini for GPO cn={3BE8D6B5-4110-4B6D-ABB
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
==========================
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1512
Date: 11/15/2007
Time: 10:49:02 AM
User: NT AUTHORITY\SYSTEM
Computer: ROBMOBILE
Description:
Windows cannot unload your registry file. The memory used by the registry has not been freed. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account. If this problem persists, contact your administrator.
DETAIL - Insufficient system resources exist to complete the requested service.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
==========================
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1054
Date: 11/15/2007
Time: 8:27:16 AM
User: NT AUTHORITY\SYSTEM
Computer: ROBMOBILE
Description:
Windows cannot obtain the domain controller name for your computer network. (A socket operation was attempted to an unreachable host. ). Group Policy processing aborted.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Log Details Below: (Domain Name Changed to MYDOMAIN)
==========================
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 11/16/2007
Time: 8:31:16 AM
User: MYDOMAIN\rallen
Computer: ROBMOBILE
Description:
Windows cannot query for the list of Group Policy objects. A message that describes the reason for this was previously logged by the policy engine.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
==========================
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 11/16/2007
Time: 8:31:16 AM
User: MYDOMAIN\rallen
Computer: ROBMOBILE
Description:
Windows cannot access the file gpt.ini for GPO cn={3BE8D6B5-4110-4B6D-ABB
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
==========================
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1512
Date: 11/15/2007
Time: 10:49:02 AM
User: NT AUTHORITY\SYSTEM
Computer: ROBMOBILE
Description:
Windows cannot unload your registry file. The memory used by the registry has not been freed. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account. If this problem persists, contact your administrator.
DETAIL - Insufficient system resources exist to complete the requested service.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
==========================
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1054
Date: 11/15/2007
Time: 8:27:16 AM
User: NT AUTHORITY\SYSTEM
Computer: ROBMOBILE
Description:
Windows cannot obtain the domain controller name for your computer network. (A socket operation was attempted to an unreachable host. ). Group Policy processing aborted.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
ASKER
Unable to find netdiag in support tools.... the only two tools under support tools are netcap and netdom.
Also, the DNS is pointing to internal server ip - verified.
Also, the DNS is pointing to internal server ip - verified.
Sorry, apparently not on all CD's. If on yours you need to install the Support Tools package. The package will be there but netdiag might not.
XPCD|Support\Tools\SupTool
If not there try:
http://www.microsoft.com/downloads/details.aspx?familyid=49ae8576-9bb9-4126-9761-ba8011fabf38&displaylang=en
A netdiag outline can be found at:
http://www.computerperformance.co.uk/w2k3/utilities/windows_netdiag.htm
There is a download there of netdiag, but it is the server version. Unfortunately there are about 1/2 dozen versions and it has to match your install, that is why i was suggesting getting it from the CD.
Sometimes you have to remove the computer from the domain and re-join it to resolve these issues, but don't resort to that yet. If you do, make sure you know the specifics of doing so in your SBS domain, it is different than 2003 std network.
XPCD|Support\Tools\SupTool
If not there try:
http://www.microsoft.com/downloads/details.aspx?familyid=49ae8576-9bb9-4126-9761-ba8011fabf38&displaylang=en
A netdiag outline can be found at:
http://www.computerperformance.co.uk/w2k3/utilities/windows_netdiag.htm
There is a download there of netdiag, but it is the server version. Unfortunately there are about 1/2 dozen versions and it has to match your install, that is why i was suggesting getting it from the CD.
Sometimes you have to remove the computer from the domain and re-join it to resolve these issues, but don't resort to that yet. If you do, make sure you know the specifics of doing so in your SBS domain, it is different than 2003 std network.
Sorry, just checked a CD. If it is there, as mentioned not on all CD's especially newer ones, go to XPCD|Support\Tools\Support
ASKER
Txs RobWill... I got the netdiag tool from the link your provided (http://www.microsoft.com/downloads/details.aspx?familyid=49ae8576-9bb9-4126-9761-ba8011fabf38&displaylang=en)
Ran the tool and result posted below. Only test that failed is KERBEROS Test (Don't know enough about this to determine if this is a problem. Also, I just finished updating the NIC Drivers for both NICs. Since reboot, the laptop has remained on the network for the last 45 minutes... (i am hoping this will fix the issue) but would you be able to look at the netdiag results below and advise if something is amis?
(sorry - it is a bit long!!)
..........................
Computer Name: ROBMOBILE
DNS Host Name: robmobile.mydomain.local
System info : Windows 2000 Professional (Build 2600)
Processor : x86 Family 6 Model 13 Stepping 8, GenuineIntel
List of installed hotfixes :
KB873339
KB885250
KB885835
KB885836
KB885887
KB886185
KB887472
KB887742
KB888113
KB888302
KB890046
KB890859
KB891781
KB893756
KB893803v2
KB894391
KB896358
KB896422
KB896423
KB896424
KB896428
KB898461
KB899587
KB899589
KB899591
KB900485
KB900725
KB901017
KB901214
KB902400
KB904706
KB904942
KB905414
KB905749
KB908519
KB908521
KB908531
KB910437
KB911280
KB911562
KB911564
KB911565
KB911567
KB911927
KB912812
KB912919
KB913446
KB913580
KB914388
KB914389
KB914440
KB915865
KB916281
KB916595
KB916846
KB917159
KB917344
KB917422
KB917537
KB917734_WMP10
KB917953
KB918118
KB918439
KB918899
KB919007
KB920213
KB920214
KB920342
KB920670
KB920683
KB920685
KB920872
KB921398
KB921503
KB921883
KB922582
KB922616
KB922760
KB922819
KB923191
KB923414
KB923689
KB923694
KB923980
KB924191
KB924270
KB924496
KB924667
KB925398_WMP64
KB925454
KB925486
KB925720
KB925876
KB925902
KB926255
KB926436
KB927779
KB927802
KB927891
KB928090-IE7
KB928255
KB928388
KB928843
KB929123
KB929338
KB929969
KB930178
KB930916
KB931261
KB931768-IE7
KB931784
KB931836
KB932168
KB933566-IE7
KB933729
KB935839
KB935840
KB936021
KB936357
KB936782_WMP10
KB938127-IE7
KB938828
KB938829
KB939373
KB939653-IE7
KB941202
KB943460
Q147222
Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'Broadcom 440x 10/100 Integrated Controller' may not
be working.
[WARNING] The net card 'Broadcom 440x 10/100 Integrated Controller - Packet
Scheduler Miniport' may not be working.
[WARNING] The net card '1394 Net Adapter' may not be working because it has
not received any packets.
Per interface results:
Adapter : Wireless Network Connection
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : robmobile.mydomain.local
IP Address . . . . . . . . : 192.168.123.71
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.123.1
Primary WINS Server. . . . : 192.168.123.1
Dns Servers. . . . . . . . : 192.168.123.1
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.
WINS service test. . . . . : Passed
Adapter : Local Area Connection
Netcard queries test . . . : Failed
NetCard Status: DISCONNECTED
Some tests will be skipped on this interface.
Host Name. . . . . . . . . : robmobile
IP Address . . . . . . . . : 0.0.0.0
Subnet Mask. . . . . . . . : 0.0.0.0
Default Gateway. . . . . . :
Dns Servers. . . . . . . . :
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{A6E50F1D-B4F1
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{A6E50F1D-B4F1
The redir is bound to 1 NetBt transport.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{A6E50F1D-B4F1
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Passed
Secure channel for domain 'mydomain' is to '\\myserver.mydomain.local
Kerberos test. . . . . . . . . . . : Failed
[FATAL] Kerberos does not have a ticket for host/robmobile.mydomain.lo
al.
LDAP test. . . . . . . . . . . . . : Passed
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Passed
Service status is: Started
Service startup is: Automatic
IPSec service is available, but no policy is assigned or active
Note: run "ipseccmd /?" for more detailed information
Ran the tool and result posted below. Only test that failed is KERBEROS Test (Don't know enough about this to determine if this is a problem. Also, I just finished updating the NIC Drivers for both NICs. Since reboot, the laptop has remained on the network for the last 45 minutes... (i am hoping this will fix the issue) but would you be able to look at the netdiag results below and advise if something is amis?
(sorry - it is a bit long!!)
..........................
Computer Name: ROBMOBILE
DNS Host Name: robmobile.mydomain.local
System info : Windows 2000 Professional (Build 2600)
Processor : x86 Family 6 Model 13 Stepping 8, GenuineIntel
List of installed hotfixes :
KB873339
KB885250
KB885835
KB885836
KB885887
KB886185
KB887472
KB887742
KB888113
KB888302
KB890046
KB890859
KB891781
KB893756
KB893803v2
KB894391
KB896358
KB896422
KB896423
KB896424
KB896428
KB898461
KB899587
KB899589
KB899591
KB900485
KB900725
KB901017
KB901214
KB902400
KB904706
KB904942
KB905414
KB905749
KB908519
KB908521
KB908531
KB910437
KB911280
KB911562
KB911564
KB911565
KB911567
KB911927
KB912812
KB912919
KB913446
KB913580
KB914388
KB914389
KB914440
KB915865
KB916281
KB916595
KB916846
KB917159
KB917344
KB917422
KB917537
KB917734_WMP10
KB917953
KB918118
KB918439
KB918899
KB919007
KB920213
KB920214
KB920342
KB920670
KB920683
KB920685
KB920872
KB921398
KB921503
KB921883
KB922582
KB922616
KB922760
KB922819
KB923191
KB923414
KB923689
KB923694
KB923980
KB924191
KB924270
KB924496
KB924667
KB925398_WMP64
KB925454
KB925486
KB925720
KB925876
KB925902
KB926255
KB926436
KB927779
KB927802
KB927891
KB928090-IE7
KB928255
KB928388
KB928843
KB929123
KB929338
KB929969
KB930178
KB930916
KB931261
KB931768-IE7
KB931784
KB931836
KB932168
KB933566-IE7
KB933729
KB935839
KB935840
KB936021
KB936357
KB936782_WMP10
KB938127-IE7
KB938828
KB938829
KB939373
KB939653-IE7
KB941202
KB943460
Q147222
Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'Broadcom 440x 10/100 Integrated Controller' may not
be working.
[WARNING] The net card 'Broadcom 440x 10/100 Integrated Controller - Packet
Scheduler Miniport' may not be working.
[WARNING] The net card '1394 Net Adapter' may not be working because it has
not received any packets.
Per interface results:
Adapter : Wireless Network Connection
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : robmobile.mydomain.local
IP Address . . . . . . . . : 192.168.123.71
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.123.1
Primary WINS Server. . . . : 192.168.123.1
Dns Servers. . . . . . . . : 192.168.123.1
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.
WINS service test. . . . . : Passed
Adapter : Local Area Connection
Netcard queries test . . . : Failed
NetCard Status: DISCONNECTED
Some tests will be skipped on this interface.
Host Name. . . . . . . . . : robmobile
IP Address . . . . . . . . : 0.0.0.0
Subnet Mask. . . . . . . . : 0.0.0.0
Default Gateway. . . . . . :
Dns Servers. . . . . . . . :
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{A6E50F1D-B4F1
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{A6E50F1D-B4F1
The redir is bound to 1 NetBt transport.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{A6E50F1D-B4F1
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Passed
Secure channel for domain 'mydomain' is to '\\myserver.mydomain.local
Kerberos test. . . . . . . . . . . : Failed
[FATAL] Kerberos does not have a ticket for host/robmobile.mydomain.lo
al.
LDAP test. . . . . . . . . . . . . : Passed
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Passed
Service status is: Started
Service startup is: Automatic
IPSec service is available, but no policy is assigned or active
Note: run "ipseccmd /?" for more detailed information
That error is fairly common as I recall and I do not believe an issue. I have heard of folks using the following to resolve, but I doubt it is necessary:
http://support.microsoft.com/default.aspx?scid=kb;en-us;244474&sd=tech
However, I see you are connecting wirelessly ??
Try connecting with a wire and see if you have any problems. Wireless connections, with a very few exceptions, are established after logon. Therefore the network/domain controller is not available at logon and can cause authentication and group policy related errors.
http://support.microsoft.com/default.aspx?scid=kb;en-us;244474&sd=tech
However, I see you are connecting wirelessly ??
Try connecting with a wire and see if you have any problems. Wireless connections, with a very few exceptions, are established after logon. Therefore the network/domain controller is not available at logon and can cause authentication and group policy related errors.
ASKER
Txs... It is currently wireless because it is sitting in my office. Typically, the user has it physically connected to the LAN and was still recieving those errors.
Mmmmm..
A few Microsoft articles relating to these issue, though you have probably seen them. Though as mentioned it's usually a DNS issue either due to incorrect configuration or the DC not being available due to a network related issue:
http://support.microsoft.com/?id=842804
http://support.microsoft.com/default.aspx?scid=kb;en-us;314494
http://support.microsoft.com/default.aspx?scid=kb;en-us;839499
On occasion you can run into an issue where the network connection is not completely established before logon commences. Group policy can sometimes help with this:
Computer Configuration | Administrative Templates | System | Logon | Always wait for the network at computer start up and logon
Was the computer originally joint to the domain using the SBS wizard; http://servername/connectcomputer ? If not you can get some odd problems, but doubtful this one.
A few Microsoft articles relating to these issue, though you have probably seen them. Though as mentioned it's usually a DNS issue either due to incorrect configuration or the DC not being available due to a network related issue:
http://support.microsoft.com/?id=842804
http://support.microsoft.com/default.aspx?scid=kb;en-us;314494
http://support.microsoft.com/default.aspx?scid=kb;en-us;839499
On occasion you can run into an issue where the network connection is not completely established before logon commences. Group policy can sometimes help with this:
Computer Configuration | Administrative Templates | System | Logon | Always wait for the network at computer start up and logon
Was the computer originally joint to the domain using the SBS wizard; http://servername/connectcomputer ? If not you can get some odd problems, but doubtful this one.
ASKER
Txs... I suspect you may be on the right track with Wait for Network at Start Up and Logon... could be the issue. I will try that. Also, as i said earlier - updating the NIC Drivers seems to have helped - So far the machine has been up for over 2 hours after reboot and haven't seen the errors. keeing my fingers crossed.
Thank you for all you help. I am going to wait for a few more hours to see if the problem is resolved.
Thank you for all you help. I am going to wait for a few more hours to see if the problem is resolved.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
This could be a MTU issue. Check the NICS on the computers in qiestion and you switches on your network for MTU size. Make absolutly sure that the MTU is set to 1500. With a smaller MTU, you will see authentication issues.
First thought I would have is what does the laptop have assigned for DNS servers? Should be only your internal DNS server., not the ISP's.