asked on

Userenv errors and netlogon file replication issues.

Lately we have seen servers rebooting what appears to be arbitrarily and cannot seem to put a finger on the issue. While looking through the logs of the servers, I have found numerous Userenv 1030 and 1058 errors.
These are Server 2k3 Enterprise Ed.
I looked for the gpt.ini file in the sysvol folder on my PDC and it is not there, nor is it on any other DC.
Actually the only thing in the Sysvol\{domain name} folder is a .DS file.
I looked at several sites with ways to fix this error but none are as specific as mine.
I ran DCDIAG, and the netlogon is the only thing that fails.
Would this be a reason that the servers are rebooting?

Darius Ghassem

Can you post the netdiag or dcdiag results? You can try to get rid of the 1030 and 1058 errors by using the dfsutli /purgemupcache. Do you have errors in the event log?

brianblang

ASKER

Yes these errors are in the event log.

Here is netdiag:

C:\Program Files\Support Tools>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: ########\########
Starting test: Connectivity
......................... ######## passed test Connectivity

Doing primary tests

Testing server: #########\########
Starting test: Replications
......................... ######## passed test Replications
Starting test: NCSecDesc
......................... ######## passed test NCSecDesc
Starting test: NetLogons
Unable to connect to the NETLOGON share! (\\########\netlogon)
[########] An net use or LsaPolicy operation failed with error 1203, No network provider accepted the given net
work path..
......................... ######## failed test NetLogons
Starting test: Advertising
......................... ######## passed test Advertising
Starting test: KnowsOfRoleHolders
......................... ######## passed test KnowsOfRoleHolders
Starting test: RidManager
......................... ######## passed test RidManager
Starting test: MachineAccount
......................... ######## passed test MachineAccount
Starting test: Services
......................... ######## passed test Services
Starting test: ObjectsReplicated
......................... ######## passed test ObjectsReplicated
Starting test: frssysvol
......................... ######## passed test frssysvol
Starting test: frsevent
......................... ######## passed test frsevent
Starting test: kccevent
......................... ######## passed test kccevent
Starting test: systemlog
......................... ######## passed test systemlog
Starting test: VerifyReferences
......................... ######## passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : meriwether
Starting test: CrossRefValidation
......................... ######## passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ######## passed test CheckSDRefDom

Running enterprise tests on : "my domain name"
Starting test: Intersite
......................... "my domain name" passed test Intersite
Starting test: FsmoCheck
......................... "my domain name" passed test FsmoCheck

brianblang

ASKER

Sorry the above was the DCDIAG...

Here is the NETDIAG:

C:\Program Files\Support Tools>netdiag

.......................................

Computer Name: ########
DNS Host Name: "MY DNS HOSTNAME"
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 6 Model 15 Stepping 6, GenuineIntel
List of installed hotfixes :
KB921503
KB924667-v2
KB925398_WMP64
KB925876
KB925902
KB926122
KB927891
KB929123
KB930178
KB931784
KB932168
KB933729
KB933854
KB935839
KB935840
KB936021
KB936357
KB936782
KB938127-IE7
KB938464
KB941202
KB941568
KB941569
KB941644
KB941672
KB941693
KB942615-IE7
KB942763
KB942830
KB942831
KB943055
KB943460
KB943484
KB943485
KB944533-IE7
KB944653
KB945553
KB946026
KB947864-IE7
KB948496
KB948590
KB948745
KB948881
KB949014
KB950759-IE7
KB950760
KB950762
KB950974
KB951066
KB951072-v2
KB951698
KB951746
KB951748
KB952954
KB953838-IE7
KB953839
KB954211
KB956390-IE7
KB956391
KB956803
KB956841
KB957095
KB958644
Q147222

Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Clien
) #2' may not be working.

Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : ########
IP Address . . . . . . . . : 1.1.1.1
Subnet Mask. . . . . . . . : 1.1.1.1
Default Gateway. . . . . . : 1.1.1.1
Primary WINS Server. . . . : 1.1.1.1
Dns Servers. . . . . . . . : 1.1.1.1
1.1.1.1

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messeng
r Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Passed

Adapter : Local Area Connection 2

Netcard queries test . . . : Failed
NetCard Status: DISCONNECTED
Some tests will be skipped on this interface.

Host Name. . . . . . . . . : ########
Autoconfiguration IP Address : 169.254.43.45
Subnet Mask. . . . . . . . :
Default Gateway. . . . . . :
Primary WINS Server. . . . : 1.1.1.1
Dns Servers. . . . . . . . : 1.1.1.1

Global results:

Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{63F93924-3955-403C-90B9-92134F3A7A9D}
NetBT_Tcpip_{DCE882EC-8BCE-439D-B059-3E46896A9692}
2 NetBt transports currently configured.

Autonet address test . . . . . . . : Passed

IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Passed

NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Serv
ce', <03> 'Messenger Service', <20> 'WINS' names defined.

Winsock test . . . . . . . . . . . : Passed

DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server 'my ip'
nd other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server 'my ip' a
d other DCs also have some of the names registered.

Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{63F93924-3955-403C-90B9-92134F3A7A9D}
NetBT_Tcpip_{DCE882EC-8BCE-439D-B059-3E46896A9692}
The redir is bound to 2 NetBt transports.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{63F93924-3955-403C-90B9-92134F3A7A9D}
NetBT_Tcpip_{DCE882EC-8BCE-439D-B059-3E46896A9692}
The browser is bound to 2 NetBt transports.

DC discovery test. . . . . . . . . : Passed

DC list test . . . . . . . . . . . : Passed

Trust relationship test. . . . . . : Skipped

Kerberos test. . . . . . . . . . . : Passed

LDAP test. . . . . . . . . . . . . : Passed

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
No active remote access connections.

Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information

The command completed successfully

Darius Ghassem

Do you only have internal DNS servers listed in your TCP\IP properties? Look in the actual Event Viewer and give the whole error including the Event ID.

brianblang

ASKER

See the attached files.
Yes only internal DNS listed.
event-id-1030.bmp
event-id-1058.bmp

Darius Ghassem

So, you aren't getting anything in the FRS, DNS, or Directory Service logs? Have you done the dfsutl /purgemupcache?

brianblang

ASKER

I will double check the other logs but no, I have not run that command as of yet. Would this have anything to do with a reboot of the server?

Darius Ghassem

The 1030 & 1058 errors are usually fixed with this command. The issue might be the logging of these event is shuting down the system. Let's try that command first to see if it gets rids of those errors.

brianblang

ASKER

darius,

I double checked the DNS FRS and DS logs and those are clean.

I ran this command and no luck. I perform a gpupdate command to test and receive the error still. Keep in mind this is happening on ALL servers in the network.

The biggest thing that stands out in my mind is this error:
Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},
CN=Policies,CN=System,DC=*********,DC=****,DC=****,DC=****. The file must be present at the
location <\\{Root}\sysvol\{domain name}\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>.
(The system cannot find the path specified. ). Group Policy processing aborted.

I cannot browse this file do to it not even being there. When trying to browse i get this far on the primary domain controller: \\{Root}\sysvol
There is a .DS file that is residing here but nothing else.

I found this article: http://support.microsoft.com/kb/315457
Not sure is this is what will need to take place.

Darius Ghassem

That is the burflag method. Lets not do that yet.

https://www.experts-exchange.com/questions/21587377/Windows-cannot-access-the-file-gpt-ini-for-GPO.html

brianblang

ASKER

I saw that thread the other week. All servers are only on one NIC, the rest are disabled or not configured.

Its not permissions issue since the gpt.ini is not even there. Like I said, if I try to browse to this file on one of my three DC i see only a .DS file. nothing else. it goes no further that the second level of Sysvol.

Shadowcopy is not enabled to recover sysvol. Now, we do not have any custom GPO on the network, could we try installing the GP editor and make a change and see if it rewrites the sysvol tree?

Darius Ghassem

Do you have a backup of the system state?

brianblang

ASKER

It doesnt look like we have one that goes back far enough.

Darius Ghassem

Do a netdiag and post

brianblang

ASKER

C:\Documents and Settings\########>netdiag

.......................................

Computer Name: #################
DNS Host Name: #################
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 6 Model 15 Stepping 6, GenuineIntel
List of installed hotfixes :
KB921503
KB924667-v2
KB925398_WMP64
KB925876
KB925902
KB926122
KB927891
KB929123
KB930178
KB931784
KB932168
KB933729
KB933854
KB935839
KB935840
KB936021
KB936357
KB936782
KB938127-IE7
KB938464
KB941202
KB941568
KB941569
KB941644
KB941672
KB941693
KB942615-IE7
KB942763
KB942830
KB942831
KB943055
KB943460
KB943484
KB943485
KB944533-IE7
KB944653
KB945553
KB946026
KB947864-IE7
KB948496
KB948590
KB948745
KB948881
KB949014
KB950759-IE7
KB950760
KB950762
KB950974
KB951066
KB951072-v2
KB951698
KB951746
KB951748
KB952954
KB953838-IE7
KB953839
KB954211
KB955069
KB956390-IE7
KB956391
KB956803
KB956841
KB957095
KB957097
KB958644
Q147222

Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client
) #2' may not be working.

Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : ########
IP Address . . . . . . . . : ########
Subnet Mask. . . . . . . . : ########
Default Gateway. . . . . . : ########
Primary WINS Server. . . . : ########
Dns Servers. . . . . . . . : ########
########

AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Passed

Adapter : Local Area Connection 2

Netcard queries test . . . : Failed
NetCard Status: DISCONNECTED
Some tests will be skipped on this interface.

Host Name. . . . . . . . . : ########
Autoconfiguration IP Address : 169.254.43.45
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . :
Primary WINS Server. . . . : 1########
Dns Servers. . . . . . . . : 1########

Global results:

Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{63F93924-3955-403C-90B9-92134F3A7A9D}
NetBT_Tcpip_{DCE882EC-8BCE-439D-B059-3E46896A9692}
2 NetBt transports currently configured.

Autonet address test . . . . . . . : Passed

IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Passed

NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.

Winsock test . . . . . . . . . . . : Passed

DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '########' a
nd other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server '########' an
d other DCs also have some of the names registered.

Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{63F93924-3955-403C-90B9-92134F3A7A9D}
NetBT_Tcpip_{DCE882EC-8BCE-439D-B059-3E46896A9692}
The redir is bound to 2 NetBt transports.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{63F93924-3955-403C-90B9-92134F3A7A9D}
NetBT_Tcpip_{DCE882EC-8BCE-439D-B059-3E46896A9692}
The browser is bound to 2 NetBt transports.

DC discovery test. . . . . . . . . : Passed

DC list test . . . . . . . . . . . : Passed

Trust relationship test. . . . . . : Skipped

Kerberos test. . . . . . . . . . . : Passed

LDAP test. . . . . . . . . . . . . : Passed

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
No active remote access connections.

Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information

The command completed successfully

C:\Documents and Settings\########>

Darius Ghassem

The second NIC is still enabled. You need to disabled then do a netdiag /fix.

brianblang

ASKER

OK. Did that. Do you want to see the output?

brianblang

ASKER

After more investigating, I am finding that there are actually 5 DC in the network not 3. 4 of these are Server 2003 and on Server 2000.

The sysvol folder actually looks mostly intact, except for the policies folder under the sysvol\{domain name} folder.

Darius Ghassem

So, you don't see the policy folders under the sysvol?

brianblang

ASKER

thats correct the policies folder is not there on any of the DC's

ASKER CERTIFIED SOLUTION

Darius Ghassem

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial