Link to home
Start Free TrialLog in
Avatar of roschar
roschar

asked on

Event 1104, Group Policies Problem

every 5 minutes event 1104 shows up with: Windows cannot perform filter check for Group Policy object CN={9D1E9163-DE6F-42B3-A907-C192B1C4B9C7},CN=Policies,CN=System,DC=mycompany,DC=office. The associated filter cannot be found. This Group Policy Object will be skipped.
When i look with adsiedit.msc and go to domain, dc, cn=system, cn=policies, attribute editor, gPCFileSysPath, it looks like this: \\mycompany.office\SysVol\mycompany.office\Policies\{9D1E9163-DE6F-42B3-A907-C192B1C4B9C7}.

Could someone help me out? Thanx in advance

Avatar of maxis2cute
maxis2cute

You've got a DNS problem. On a client PC, enter this in a Windows Explorer window's address bar, and let us know if you see files and folders:

Ensure you're running a properley configured DNS server on the domain controller, then configure the client PCs to use that DNS server exclusively.

Problems exacly like this one can be prevented in the first place by designing the active directory name-space to be completely different to the corporate DNS internet name space.
Please post ipconfig/all of server and one workstation.
Olaf
Avatar of roschar

ASKER

SBS2003:
Windows IP Configuration

   Host Name . . . . . . . . . . . . : SBS2003
   Primary Dns Suffix  . . . . . . . : mycompany.office
   Node Type . . . . . . . . . . . . : Unknown
   IP Routing Enabled. . . . . . . . : Yes
   WINS Proxy Enabled. . . . . . . . : Yes
   DNS Suffix Search List. . . . . . : mycompany.office

Ethernet adapter Internet Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet #2
   Physical Address. . . . . . . . . : 00-10-18-2C-62-7E
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 192.168.1.2
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.1.250  (router)
   DNS Servers . . . . . . . . . . . : 192.168.16.2
   Primary WINS Server . . . . . . . : 192.168.16.2
   NetBIOS over Tcpip. . . . . . . . : Disabled

Ethernet adapter Server Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
   Physical Address. . . . . . . . . : 00-18-8B-E6-27-48
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 192.168.16.2
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . :
   DNS Servers . . . . . . . . . . . : 192.168.16.2
   Primary WINS Server . . . . . . . : 192.168.16.2

WINXP:

Windows IP-configuratie

        Host-naam  . . . . . . . . . . . .: ILEE02
        Primair DNS-achtervoegsel. . . . .: mycompany.office
        Knooppunttype . . . . . . . . . . : hybride
        IP-routering ingeschakeld. . . . .: nee
        WINS-proxy ingeschakeld . . . . . : nee
        DNS-achtervoegselzoeklijst. . . . : mycompany.office
                                           

Ethernet-adapter LAN-verbinding:

        Verbindingsspec. DNS-achtervoegsel: mycompany.office
        Beschrijving . . . . . . . . . . .:
          Intel(R) PRO/1000 PL Network Connection
        Fysiek adres. . . . . . . . . . . : 00-15-B7-3B-71-6B
        DHCP ingeshakeld. . . . . . . . . : ja
        Autom. configuratie ingeschakeld. : ja
        IP-adres. . . . . . . . . . . . . : 192.168.16.66
        Subnetmasker. . . . . . . . . . . : 255.255.255.0
        Standaardgateway. . . . . . . . . : 192.168.16.2
        DHCP-server . . . . . . . . . . . : 192.168.16.2
        DNS-servers . . . . . . . . . . . : 192.168.16.2
        Primaire WINS-server. . . . . . . : 192.168.16.2
        Lease verkregen . . . . . . . . . : maandag 3 maart 2008 8:54:24
        Lease verlopen . . . . . . . . .  : dinsdag 11 maart 2008 8:54:24
if you look at ethernet connection, the 192.168.1.2 network cannot communicate with the dns servers, they are on two separate networks.  try changing the subnet mask to 255.255.0.0 and see if this resolves the error.

Hi Roschar,

Your IPconfig is just fine. Maxi is wrong with his comment The Ethernet range should not be on the same network segment as the server. This would be rather unsafe and that's why you have the SBS Nat and firewall services to screen you from this.
Anyway networking configuration does not seem to be your issue.
Can you please download the SBS BPA and run it.
http://www.microsoft.com/downloads/details.aspx?FamilyID=3874527a-de19-49bb-800f-352f3b6f2922&displaylang=en
Fix all that needs fixing and try again.
If still no joy please post the results from DCDiag and ADDiag using the support tools.
Olaf
i just wanted to see if it worked on the same segment and would have changed it back.  But thats ok
Can you please explain further what you were trying to do? I am always interested in new ways.
Olaf
Avatar of roschar

ASKER

OK, did PBA and found nothing serious. But, when i was checking the event logs: ServerStatusReports don't show on screen and update services gives a catastrophic failure and a critical update KB940357 is not installing.
DCDIAG gives an error in the systemlog test.
ADDIAG gives an error on event 1004, all test are included. Event 1104 is still there every 5 minutes.....

==================================================================================================================================================================

server Status Report:
      URL:            http://localhost/monitoring/perf.aspx?reportMode=0
      Error Message:      Catastrophic failure
      Stack Trace:         at Microsoft.SBS.UpdateServices.ConfigurationHelper.AUPolicySetupClass.GetPolicyConfiguration(SBSPolicyType type, AUInstallationOption& pInstallationOption, Int32& piInstallationDay, Int32& piInstallationHour)
   at Microsoft.SBS.UpdateServices.DataProvider.GetUpdateSchedule(String GroupName)
   at Microsoft.SBS.UpdateServices.StatusPage.Utility.GetUpdateSettings()
   at usage.frmPerf.renderReportWorker()
   at usage.frmPerf.renderReport()

==================================================================================================================================================================

Server Error in '/UpdateServices' Application.
--------------------------------------------------------------------------------

Catastrophic failure
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.Runtime.InteropServices.COMException: Catastrophic failure

Source Error:


Line 194:            </div>
Line 195:            <%Response.Flush();
Line 196:              RenderPage();%>
Line 197:            <div id="divForm" style="display: none">
Line 198:            <form id="formMain" method="post" runat="server">
 

Source File: c:\inetpub\UpdateServices\Home.aspx    Line: 196

Stack Trace:


[COMException (0x8000ffff): Catastrophic failure]
   Microsoft.SBS.UpdateServices.ConfigurationHelper.AUPolicySetupClass.GetPolicyConfiguration(SBSPolicyType type, AUInstallationOption& pInstallationOption, Int32& piInstallationDay, Int32& piInstallationHour) +0
   Microsoft.SBS.UpdateServices.DataProvider.GetUpdateSchedule(String GroupName) +187
   Microsoft.SBS.UpdateServices.StatusPage.Utility.GetUpdateSettings(Boolean waitingForSyncStart) +356
   Microsoft.SBS.UpdateServices.StatusPage.formHome.RenderPage() +100
   ASP.Home_aspx.__Render__control1(HtmlTextWriter __output, Control parameterContainer) in c:\inetpub\UpdateServices\Home.aspx:196
   System.Web.UI.Control.RenderChildren(HtmlTextWriter writer) +27
   System.Web.UI.Control.Render(HtmlTextWriter writer) +7
   System.Web.UI.Control.RenderControl(HtmlTextWriter writer) +243
   System.Web.UI.Page.ProcessRequestMain() +1926
--------------------------------------------------------------------------------
Version Information: Microsoft .NET Framework Version:1.1.4322.2407; ASP.NET Version:1.1.4322.2407
\
==================================================================================================================================================================
DCDIAG TEST:
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\sbsbeheer>dcdiag

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\SBS2003
      Starting test: Connectivity
         ......................... SBS2003 passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\SBS2003
      Starting test: Replications
         ......................... SBS2003 passed test Replications
      Starting test: NCSecDesc
         ......................... SBS2003 passed test NCSecDesc
      Starting test: NetLogons
         ......................... SBS2003 passed test NetLogons
      Starting test: Advertising
         ......................... SBS2003 passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... SBS2003 passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... SBS2003 passed test RidManager
      Starting test: MachineAccount
         ......................... SBS2003 passed test MachineAccount
      Starting test: Services
            IsmServ Service is stopped on [SBS2003]
         ......................... SBS2003 failed test Services
      Starting test: ObjectsReplicated
         ......................... SBS2003 passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... SBS2003 passed test frssysvol
      Starting test: frsevent
         ......................... SBS2003 passed test frsevent
      Starting test: kccevent
         ......................... SBS2003 passed test kccevent
      Starting test: systemlog
         An Error Event occured.  EventID: 0xC0002715
            Time Generated: 03/09/2008   21:14:48
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000014
            Time Generated: 03/09/2008   21:30:58
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000014
            Time Generated: 03/09/2008   21:41:44
            (Event String could not be retrieved)
         ......................... SBS2003 failed test systemlog
      Starting test: VerifyReferences
         ......................... SBS2003 passed test VerifyReferences

   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom

   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom

   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom

   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom

   Running partition tests on : mycompany
      Starting test: CrossRefValidation
         ......................... mycompany passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... mycompany passed test CheckSDRefDom

   Running enterprise tests on : mycompany.office
      Starting test: Intersite
         ......................... mycompany.office passed test Intersite
      Starting test: FsmoCheck
         ......................... mycompany.office passed test FsmoCheck

C:\Documents and Settings\sbsbeheer>
==================================================================================================================================================================

DCDIAG:

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\sbsbeheer>addiag

Microsoft (R) Software Installation Diagnostics. Version 1.00
Copyright (C) Microsoft Corp 1998-1999. All rights reserved.

Collecting info...

Initializing Remote DS Data...
Initializing Local AppMgmt Registry Data...
Initializing Local AppMgmt File Data...
Initializing Local Windows Installer Data...
Initializing Local Shell Data...
Initializing Local Event Data...

========================= General Info =========================

User -- NameSamCompatible: mycompany\sbsbeheer
User -- NameFullyQualifiedDN: CN=sbsbeheer,CN=Users,DC=mycompany,DC=office
User -- Logon Server: \\SBS2003
User -- SID: S-1-5-21-793378080-404787957-1739397283-1137
User -- Profile Type: LOCAL
User -- Locale: 1043
Processor Architecture: x86
System Locale: 1033

========================= TS Info =========================

Running Remote Admin TS

========================= Managed Apps (Local List) =========================


========================= Managed Applications (Server) ========================
=

User dump for mycompany.OFFICE
No GPOs were found.

========================= Windows Installer Apps =========================

Found 31 MSI application(s)

MSXML 4.0 SP2 (KB936181)
Microsoft XML Parser
Acronis Disk Director Server
Acronis True Image Server
MSXML 4.0 SP2 (KB927978)
MSXML 6.0 Parser (KB933579)
Microsoft Office Outlook 2003
Windows Support Tools
========================= Local AD History =========================


========================= Application log events =========================

EventID:  1004
Type: WARN
Date: 11:09:40.0000 - 02/23/2008
User: mycompany\sbsbeheer
Computer: SBS2003
Source: MsiInstaller
Description: Detection of product '{90E00409-6000-11D3-8CFE-0150048383C9}', feat
ure 'OfficeUserData', component '{4A31E933-6F67-11D2-AAA2-00A0C90F57B0}' failed.
  The resource 'HKEY_CURRENT_USER\Software\ODBC\ODBC.INI\MS Access Database\' do
es not exist.
Data:

==================================================================================================================================================================
I hope this gives some more information......



SOLUTION
Avatar of Olaf De Ceuster
Olaf De Ceuster
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of roschar

ASKER

Sorted a few things out:

Version Sharepoint 5.0.2.6738
Version Information: Microsoft .NET Framework Version:1.1.4322.2407; ASP.NET Version:1.1.4322.2407

however, i get this screen at update services in server management

Server Error in '/UpdateServices' Application.
--------------------------------------------------------------------------------

Catastrophic failure
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.Runtime.InteropServices.COMException: Catastrophic failure

Source Error:
Line 194:            </div>
Line 195:            <%Response.Flush();
Line 196:              RenderPage();%>
Line 197:            <div id="divForm" style="display: none">
Line 198:            <form id="formMain" method="post" runat="server">
 
Source File: c:\inetpub\UpdateServices\Home.aspx    Line: 196
Stack Trace:
[COMException (0x8000ffff): Catastrophic failure]
   Microsoft.SBS.UpdateServices.ConfigurationHelper.AUPolicySetupClass.GetPolicyConfiguration(SBSPolicyType type, AUInstallationOption& pInstallationOption, Int32& piInstallationDay, Int32& piInstallationHour) +0
   Microsoft.SBS.UpdateServices.DataProvider.GetUpdateSchedule(String GroupName) +186
   Microsoft.SBS.UpdateServices.StatusPage.Utility.GetUpdateSettings(Boolean waitingForSyncStart) +356
   Microsoft.SBS.UpdateServices.StatusPage.formHome.RenderPage() +100
   ASP.Home_aspx.__Render__control1(HtmlTextWriter __output, Control parameterContainer) in c:\inetpub\UpdateServices\Home.aspx:196
   System.Web.UI.Control.RenderChildren(HtmlTextWriter writer) +27
   System.Web.UI.Control.Render(HtmlTextWriter writer) +7
   System.Web.UI.Control.RenderControl(HtmlTextWriter writer) +243
   System.Web.UI.Page.ProcessRequestMain() +1926
========================================================================

i don't see the monitoring service to uninstall in add or remove programs?

Sacha
 
Avatar of roschar

ASKER

could someone help me out with this?
I am having the exact same symptoms on my SBS 2003 R2 server.  These started with a random domain name in the adsi on several containers.  I used the adsiedit.msc tool and corrected the addressing all the containers and my group policies started working right away.  But then this problem came up.  The update services has also been giving me the "Catasctrophic Failure" message from day one.

This is a Dell Poweredge that came with SBS preinstalled.  That is how this whole thing started I think.  DNS is setup correctly.  This is a very simple network.  One subnet, SBS only using one NIC, the second NIC is disabled.  DNS is not reporting any real problems.

I will continue to troubleshoot and post my findings here if they work.

Chris
Please download the SBS Best Practises analyser, with latest update run it and see what comes up.
http://www.microsoft.com/downloads/details.aspx?familyid=3874527A-DE19-49BB-800F-352F3B6F2922&displaylang=en
Re WSUS: Please install the SP1 version but don't run the setup wizard when finished.
Re: Monitoring: In add/remove programs you should have: Small Busness Server .Change /Remove> run the wizard and under components reinstall monitoring.
Olaf
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of roschar

ASKER

Ok. Solved WSUS and Reporting problems with WSUS 3.0. Solved gPCFileSysPath and the gPCWQLFilter, in two cases there was a wrong domain name.  Event 1104 is still there on the same two policies but now with the correct domainname. Could there be a problem with WMI Filters?
Avatar of roschar

ASKER

Problems with event 1104 solved. The WMI filters for GPO firewall and GPO internet connection are now linked. In both cases there was <none> filter.
If you experience any problems with event 1030, 1058 and 1104 follow Microsoft article id 888943 and look also in
the gPCWQLFilter when you are editing the gPCFileSysPath. After that look if the WMI filters Firewall and Internet Connection are linked. That solved every error.