Solved

Userenv 1053 and Group Policies

Posted on 2008-10-30
2
768 Views
Last Modified: 2008-10-31
Ok here goes..

We recently started to use WSUS to save on bandwidth and control updates to PC's. We followed the MS guide on setting this up (inlcuding the GPO's) and have had no problems except for one laptop...

The laptop has applied the default domain policy, and it has some obvious changes on it. Upon gpresult, it is clear that the WSUS policy has not been applied. Further more when gpupdate is tried it the application logs show userenv 1053 - "Windows cannot determine the user or computer name. Group Policy processing aborted".

Using group policy results on GPMC under component status there is this error:
Group Policy Infrastructure failed due to the error listed below.

The specified user does not exist.

Note: Due to the GP Core failure, none of the other Group Policy components processed their policy. Consequently, status information for the other components is not available.

I have tried moving the laptop into another OU and renaming it. This both worked to extent, as you could see the pc name and OU under gpresult where as you could not before. However no WSUS policy...

I don't think this is a DNS issue as the laptop can go to and use https://servername/WSUSupdate and ipconfig /all shows all the correct settings.

Finally I ran the ClientDiag tool:
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

WSUS Client Diagnostics Tool

Checking Machine State
        Checking for admin rights to run tool . . . . . . . . . PASS
        Automatic Updates Service is running. . . . . . . . . . PASS
        Background Intelligent Transfer Service is running. . . PASS
        Wuaueng.dll version 7.0.6000.381. . . . . . . . . . . . PASS
                This version is WSUS 2.0

Checking AU Settings
        AU Option is 2 : Notify Prior to Download . . . . . . . PASS
                Option is from Control Panel

Checking Proxy Configuration
        Checking for winhttp local machine Proxy settings . . . PASS
                Winhttp local machine access type
                        <Direct Connection>
                Winhttp local machine Proxy. . . . . . . . . .  NONE
                Winhttp local machine ProxyBypass. . . . . . .  NONE
        Checking User IE Proxy settings . . . . . . . . . . . . PASS
                User IE Proxy. . . . . . . . . . . . . . . . .  NONE
                User IE ProxyByPass. . . . . . . . . . . . . .  NONE
                User IE AutoConfig URL Proxy . . . . . . . . .  NONE
                User IE AutoDetect
                AutoDetect not in use

Checking Connection to WSUS/SUS Server
AU does not have Policy Set
AU does not have Policy Set
        UseWuServer is disabled . . . . . . . . . . . . . . . . FAIL

Press Enter to Complete

Any ideas?
0
Comment
Question by:girbot
  • 2
2 Comments
 

Author Comment

by:girbot
ID: 22840449
To clarify something I mentioned above..

Group Policy results does not show the laptop attached to the new OU, and the error appears under Computer > Component Status > Group Policy Infrastructure
0
 

Accepted Solution

by:
girbot earned 0 total points
ID: 22850917
I have since managed to correct this issue by doing the below:

"Remove the Laptop from the domain, both from the laptop itself and the active directory
"Logged in locally to the laptop
"Re-added the laptop back to the domain.

No more userenv issues, and the group policy updates when required.
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

This article describes how to set permissions to allow a limited-permissions user to start and stop a particular System Service.   It is always best to give users only the permissions that they need to perform their job, so tweaking particular permi…
I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now