Solved

Userenv errors and netlogon file replication issues.

Posted on 2008-11-03
21
820 Views
Last Modified: 2011-10-19
Lately we have seen servers rebooting what appears to be arbitrarily and cannot seem to put a finger on the issue. While looking through the logs of the servers, I have found numerous Userenv 1030 and 1058 errors.
These are Server 2k3 Enterprise Ed.
I looked for the gpt.ini file in the sysvol folder on my PDC and it is not there, nor is it on any other DC.
Actually the only thing in the Sysvol\{domain name} folder is a .DS file.
I looked at several sites with ways to fix this error but none are as specific as mine.
I ran DCDIAG, and the netlogon is the only thing that fails.
Would this be a reason that the servers are rebooting?
0
Comment
Question by:brianblang
  • 11
  • 10
21 Comments
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 22869937
Can you post the netdiag or dcdiag results? You can try to get rid of the 1030 and 1058 errors by using the dfsutli /purgemupcache. Do you have errors in the event log?
0
 

Author Comment

by:brianblang
ID: 22870292
Yes these errors are in the event log.

Here is netdiag:

C:\Program Files\Support Tools>dcdiag

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests

   Testing server: ########\########
      Starting test: Connectivity
         ......................... ######## passed test Connectivity

Doing primary tests

   Testing server: #########\########
      Starting test: Replications
         ......................... ######## passed test Replications
      Starting test: NCSecDesc
         ......................... ######## passed test NCSecDesc
      Starting test: NetLogons
         Unable to connect to the NETLOGON share! (\\########\netlogon)
         [########] An net use or LsaPolicy operation failed with error 1203, No network provider accepted the given net
work path..
         ......................... ######## failed test NetLogons
      Starting test: Advertising
         ......................... ######## passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... ######## passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... ######## passed test RidManager
      Starting test: MachineAccount
         ......................... ######## passed test MachineAccount
      Starting test: Services
         ......................... ######## passed test Services
      Starting test: ObjectsReplicated
         ......................... ######## passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... ######## passed test frssysvol
      Starting test: frsevent
         ......................... ######## passed test frsevent
      Starting test: kccevent
         ......................... ######## passed test kccevent
      Starting test: systemlog
         ......................... ######## passed test systemlog
      Starting test: VerifyReferences
         ......................... ######## passed test VerifyReferences

   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom

   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom

   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom

   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom

   Running partition tests on : meriwether
      Starting test: CrossRefValidation
         ......................... ######## passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... ######## passed test CheckSDRefDom

   Running enterprise tests on : "my domain name"
      Starting test: Intersite
         ......................... "my domain name" passed test Intersite
      Starting test: FsmoCheck
         ......................... "my domain name" passed test FsmoCheck
0
 

Author Comment

by:brianblang
ID: 22870340
Sorry the above was the DCDIAG...

Here is the NETDIAG:

C:\Program Files\Support Tools>netdiag

.......................................

    Computer Name: ########
    DNS Host Name: "MY DNS HOSTNAME"
    System info : Microsoft Windows Server 2003 (Build 3790)
    Processor : x86 Family 6 Model 15 Stepping 6, GenuineIntel
    List of installed hotfixes :
        KB921503
        KB924667-v2
        KB925398_WMP64
        KB925876
        KB925902
        KB926122
        KB927891
        KB929123
        KB930178
        KB931784
        KB932168
        KB933729
        KB933854
        KB935839
        KB935840
        KB936021
        KB936357
        KB936782
        KB938127-IE7
        KB938464
        KB941202
        KB941568
        KB941569
        KB941644
        KB941672
        KB941693
        KB942615-IE7
        KB942763
        KB942830
        KB942831
        KB943055
        KB943460
        KB943484
        KB943485
        KB944533-IE7
        KB944653
        KB945553
        KB946026
        KB947864-IE7
        KB948496
        KB948590
        KB948745
        KB948881
        KB949014
        KB950759-IE7
        KB950760
        KB950762
        KB950974
        KB951066
        KB951072-v2
        KB951698
        KB951746
        KB951748
        KB952954
        KB953838-IE7
        KB953839
        KB954211
        KB956390-IE7
        KB956391
        KB956803
        KB956841
        KB957095
        KB958644
        Q147222


Netcard queries test . . . . . . . : Passed
    [WARNING] The net card 'Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Clien
) #2' may not be working.



Per interface results:

    Adapter : Local Area Connection

        Netcard queries test . . . : Passed

        Host Name. . . . . . . . . : ########
        IP Address . . . . . . . . : 1.1.1.1
        Subnet Mask. . . . . . . . : 1.1.1.1
        Default Gateway. . . . . . : 1.1.1.1
        Primary WINS Server. . . . : 1.1.1.1
        Dns Servers. . . . . . . . : 1.1.1.1
                                     1.1.1.1


        AutoConfiguration results. . . . . . : Passed

        Default gateway test . . . : Passed

        NetBT name test. . . . . . : Passed
        [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messeng
r Service', <20> 'WINS' names is missing.

        WINS service test. . . . . : Passed

    Adapter : Local Area Connection 2

        Netcard queries test . . . : Failed
        NetCard Status:          DISCONNECTED
            Some tests will be skipped on this interface.

        Host Name. . . . . . . . . : ########
        Autoconfiguration IP Address : 169.254.43.45
        Subnet Mask. . . . . . . . :
        Default Gateway. . . . . . :
        Primary WINS Server. . . . : 1.1.1.1
        Dns Servers. . . . . . . . : 1.1.1.1




Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
    List of NetBt transports currently configured:
        NetBT_Tcpip_{63F93924-3955-403C-90B9-92134F3A7A9D}
        NetBT_Tcpip_{DCE882EC-8BCE-439D-B059-3E46896A9692}
    2 NetBt transports currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
    [WARNING] You don't have a single interface with the <00> 'WorkStation Serv
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
    PASS - All the DNS entries for DC are registered on DNS server 'my ip'
nd other DCs also have some of the names registered.
    PASS - All the DNS entries for DC are registered on DNS server 'my ip' a
d other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
    List of NetBt transports currently bound to the Redir
        NetBT_Tcpip_{63F93924-3955-403C-90B9-92134F3A7A9D}
        NetBT_Tcpip_{DCE882EC-8BCE-439D-B059-3E46896A9692}
    The redir is bound to 2 NetBt transports.

    List of NetBt transports currently bound to the browser
        NetBT_Tcpip_{63F93924-3955-403C-90B9-92134F3A7A9D}
        NetBT_Tcpip_{DCE882EC-8BCE-439D-B059-3E46896A9692}
    The browser is bound to 2 NetBt transports.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
    No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

    Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 22870399
Do you only have internal DNS servers listed in your TCP\IP properties? Look in the actual Event Viewer and give the whole error including the Event ID.
0
 

Author Comment

by:brianblang
ID: 22870556
See the attached files.
Yes only internal DNS listed.
event-id-1030.bmp
event-id-1058.bmp
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 22870694
So, you aren't getting anything in the FRS, DNS, or Directory Service logs? Have you done the dfsutl /purgemupcache?
0
 

Author Comment

by:brianblang
ID: 22873365
I will double check the other logs but no, I have not run that command as of yet. Would this have anything to do with a reboot of the server?
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 22876214
The 1030 & 1058 errors are usually fixed with this command. The issue might be the logging of these event is shuting down the system. Let's try that command first to see if it gets rids of those errors.
0
 

Author Comment

by:brianblang
ID: 22976013
darius,

I double checked the DNS FRS and DS logs and those are clean.

I ran this command and no luck. I perform a gpupdate command to test and receive the error still. Keep in mind this is happening on ALL servers in the network.

The biggest thing that stands out in my mind is this error:
Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},
CN=Policies,CN=System,DC=*********,DC=****,DC=****,DC=****. The file must be present at the
location <\\{Root}\sysvol\{domain name}\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>.
(The system cannot find the path specified. ). Group Policy processing aborted.

I cannot browse this file do to it not even being there. When trying to browse i get this far on the primary domain controller: \\{Root}\sysvol
There is a .DS file that is residing here but nothing else.

I found this article: http://support.microsoft.com/kb/315457
Not sure is this is what will need to take place.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 22976049
0
 

Author Comment

by:brianblang
ID: 22976194
I saw that thread the other week. All servers are only on one NIC, the rest are disabled or not configured.

Its not permissions issue since the gpt.ini is not even there. Like I said, if I try to browse to this file on one of my three DC i see only a .DS file. nothing else. it goes no further that the second level of Sysvol.

Shadowcopy is not enabled to recover sysvol.  Now, we do not have any custom GPO on the network, could we try installing the GP editor and make a change and see if it rewrites the sysvol tree?
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 22976209
Do you have a backup of the system state?
0
 

Author Comment

by:brianblang
ID: 22976360
It doesnt look like we have one that goes back far enough.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 22976393
Do a netdiag and post
0
 

Author Comment

by:brianblang
ID: 22976564
C:\Documents and Settings\########>netdiag

.......................................

    Computer Name: #################
    DNS Host Name: #################
    System info : Microsoft Windows Server 2003 (Build 3790)
    Processor : x86 Family 6 Model 15 Stepping 6, GenuineIntel
    List of installed hotfixes :
        KB921503
        KB924667-v2
        KB925398_WMP64
        KB925876
        KB925902
        KB926122
        KB927891
        KB929123
        KB930178
        KB931784
        KB932168
        KB933729
        KB933854
        KB935839
        KB935840
        KB936021
        KB936357
        KB936782
        KB938127-IE7
        KB938464
        KB941202
        KB941568
        KB941569
        KB941644
        KB941672
        KB941693
        KB942615-IE7
        KB942763
        KB942830
        KB942831
        KB943055
        KB943460
        KB943484
        KB943485
        KB944533-IE7
        KB944653
        KB945553
        KB946026
        KB947864-IE7
        KB948496
        KB948590
        KB948745
        KB948881
        KB949014
        KB950759-IE7
        KB950760
        KB950762
        KB950974
        KB951066
        KB951072-v2
        KB951698
        KB951746
        KB951748
        KB952954
        KB953838-IE7
        KB953839
        KB954211
        KB955069
        KB956390-IE7
        KB956391
        KB956803
        KB956841
        KB957095
        KB957097
        KB958644
        Q147222


Netcard queries test . . . . . . . : Passed
    [WARNING] The net card 'Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client
) #2' may not be working.



Per interface results:

    Adapter : Local Area Connection

        Netcard queries test . . . : Passed

        Host Name. . . . . . . . . : ########
        IP Address . . . . . . . . : ########
        Subnet Mask. . . . . . . . : ########
        Default Gateway. . . . . . : ########
        Primary WINS Server. . . . : ########
        Dns Servers. . . . . . . . : ########
                                     ########


        AutoConfiguration results. . . . . . : Passed

        Default gateway test . . . : Passed

        NetBT name test. . . . . . : Passed
        [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.

        WINS service test. . . . . : Passed

    Adapter : Local Area Connection 2

        Netcard queries test . . . : Failed
        NetCard Status:          DISCONNECTED
            Some tests will be skipped on this interface.

        Host Name. . . . . . . . . : ########
        Autoconfiguration IP Address : 169.254.43.45
        Subnet Mask. . . . . . . . : 255.255.0.0
        Default Gateway. . . . . . :
        Primary WINS Server. . . . : 1########
        Dns Servers. . . . . . . . : 1########




Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
    List of NetBt transports currently configured:
        NetBT_Tcpip_{63F93924-3955-403C-90B9-92134F3A7A9D}
        NetBT_Tcpip_{DCE882EC-8BCE-439D-B059-3E46896A9692}
    2 NetBt transports currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
    [WARNING] You don't have a single interface with the <00> 'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
    PASS - All the DNS entries for DC are registered on DNS server '########' a
nd other DCs also have some of the names registered.
    PASS - All the DNS entries for DC are registered on DNS server '########' an
d other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
    List of NetBt transports currently bound to the Redir
        NetBT_Tcpip_{63F93924-3955-403C-90B9-92134F3A7A9D}
        NetBT_Tcpip_{DCE882EC-8BCE-439D-B059-3E46896A9692}
    The redir is bound to 2 NetBt transports.

    List of NetBt transports currently bound to the browser
        NetBT_Tcpip_{63F93924-3955-403C-90B9-92134F3A7A9D}
        NetBT_Tcpip_{DCE882EC-8BCE-439D-B059-3E46896A9692}
    The browser is bound to 2 NetBt transports.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
    No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

    Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully

C:\Documents and Settings\########>
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 22976784
The second NIC is still enabled. You need to disabled then do a netdiag /fix.
0
 

Author Comment

by:brianblang
ID: 22976973
OK. Did that. Do you want to see the output?
0
 

Author Comment

by:brianblang
ID: 22977815
After more investigating, I am finding that there are actually 5 DC in the network not 3. 4 of these are Server 2003 and on Server 2000.

The sysvol folder actually looks mostly intact, except for the policies folder under the sysvol\{domain name} folder.

0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 22994054
So, you don't see the policy folders under the sysvol?
0
 

Author Comment

by:brianblang
ID: 22996499
thats correct the policies folder is not there on any of the DC's
0
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 500 total points
ID: 22996581
0

Join & Write a Comment

Some time ago I faced the need to use a uniform folder structure that spanned across numerous sites of an enterprise to be used as a common repository for the Software packages of the Configuration Manager 2007 infrastructure. Because the procedu…
Resolve DNS query failed errors for Exchange
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now