Link to home
Create AccountLog in
Avatar of William Smyth
William SmythFlag for United Kingdom of Great Britain and Northern Ireland

asked on

Windows cannot access \\mydomain.co.uk\sysvol

Hi all,

Windows 2000 server SP4 - dc
Servers - Windows 2003 64Bit R2 x 2. Both are dcs.

Events being logged on the windows 2003 Servers and the workstations.

Id: 1030
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.

Id: 1058
Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=mydomain,DC=co,DC=uk.. The file must be present at the location <\\mydomain.co.uk\sysvol\mydomain.co.uk\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. (Configuration information could not be read from the domain controller, either because the
machine is unavailable, or access has been denied. ). Group Policy processing aborted.


On Windows Server 2003
If you type "\\mydomain.co.uk\sysvol\mydomain.co.uk\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\" into an explorer address window, you get a "Windows cannot find ..." error.
However, if you type the name of the server, you are taken to the correct folder where the gpt.ini resides (as you would expect).
In this example: "\\myserver\sysvol\mydomain.co.uk\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\"

I went to command prompt and pinged "mydomain.co.uk" and found a reply from "192.168.1.150"
I then pinged "myserver" and found a reply from "192.168.1.150" .
These IPs are in DNS correctly
NSLOOKUP correctly returns myserver.domain.co.uk

If I type in "\\192.168.1.150\sysvol\mydomain.co.uk\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\" into an explorer address bar, no error occurs (which makes sense).  
DNS event log is clear
FRS event log is clear. The sysvol directory is being correctly replicated as I have tested it by creating a file on a single server and waiting for replication.
In sites & services I can manually force a replication without error.

On Windows 2000 Server
If you type "\\mydomain.co.uk\sysvol\mydomain.co.uk\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\" into an explorer address window, you are taken to the correct folder where the gpt.ini resides
Again if you use \\myserver\.. . it works fine

What is equally strange on the 2000 server is \\mydomain.co.uk gives error \\mydomain.co.uk is not accessible. The network name cannot be found
\\mydomain.co.uk\sysvol and other subdirectories are found and are accessible.

As we need to retire and replace the Windows 2000 server I would be grateful for any help!

We have also tried Microsoft KBs relating to SMB signing.

Thanks in advance




Avatar of PlaceboC6
PlaceboC6
Flag of United States of America image

Try running these commands on the system throwing the 1030 and 1058 errors.  May need 2003 support tools installed for dfsutil.

dfsutil /purgemupcache
gpupdate /force
Avatar of William Smyth

ASKER

DFSUTIL has no effect.
Sorry I should hav eposted this info
We have worked our way thru KB's
887303
839499
259398
290647
All with lettle or no effect. A couple of the traversng rights were incorrect but restting them has had no effect.
This problem has been resolved with a call to Microsoft. They rebuilt syvol bridge point and DNS.
Please mark as resolved by self.

Thanks
Abandoned????? Please read my own comment from above
"This problem has been resolved with a call to Microsoft. They rebuilt syvol bridge point and DNS.
Please mark as resolved by self."
This hardly classifies as abandoned!
ASKER CERTIFIED SOLUTION
Avatar of Computer101
Computer101
Flag of United States of America image

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account