Solved

userenv errors 1006 and 1030

Posted on 2009-04-07
14
1,518 Views
Last Modified: 2013-12-01
Hi,

I am having big problems. Our setup is sbs2003 prem netweork, with XP pro clients, and 2nd server (Server 2003) as remote term serv.

Users came to work this morning and can't log in to the domain from their workstations. We are getting UserEnv errors 1006 and 1030,  which also apperas to be casuing MSExchangeAL error 8231 and MSExchangeSA 9153. When running gpupdate /force I get User env 1058 and 1030 errors.

Have attached netdiag and netshare results in txt doc.

help me Experts ... you're my only hope ...

James
netdiag-netshare.txt
0
Comment
Question by:betterlifedirections
14 Comments
 
LVL 5

Expert Comment

by:Ubertam
ID: 24093222
What kind of antivirus product are you using on the server?
0
 

Author Comment

by:betterlifedirections
ID: 24093240
I probably should give some further background to this ...

I have been getting NtFrs error 13568 for some time, and attempted to recify it LAST NIGHT using the suggestions below (hence the problems affecting users today):

###The File Replication Service has detected that the replica set "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)" is in JRNL_WRAP_ERROR.
 
 Replica set name is    : "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)"
 Replica root path is   : "c:\windows\sysvol\domain"
 Replica root volume is : "\\.\C:"
 A Replica set hits JRNL_WRAP_ERROR when the record that it is trying to read from the NTFS USN journal is not found.  This can occur because of one of the following reasons.
 
 <snip>

Setting the "Enable Journal Wrap Automatic Restore" registry parameter to 1 will cause the following recovery steps to be taken to automatically recover from this error state.
 [1] At the first poll, which will occur in 5 minutes, this computer will be deleted from the replica set. If you do not want to wait 5 minutes, then run "net stop ntfrs" followed by "net start ntfrs" to restart the File Replication Service.
 [2] At the poll following the deletion this computer will be re-added to the replica set. The re-addition will trigger a full tree sync for the replica set.
 
WARNING: During the recovery process data in the replica tree may be unavailable. You should reset the registry parameter described above to 0 to prevent automatic recovery from making the data unexpectedly unavailable if this error condition occurs again.
 
To change this registry parameter, run regedit.
 
Click on Start, Run and type regedit.
 
Expand HKEY_LOCAL_MACHINE.
Click down the key path:
   "System\CurrentControlSet\Services\NtFrs\Parameters"
Double click on the value name
   "Enable Journal Wrap Automatic Restore"
and update the value.
 
If the value name is not present you may add it with the New->DWORD Value function under the Edit Menu item. Type the value name exactly as shown above.

**** What I did was create the new DWORD value, and then set it to 1, ran "net stop ntfrs" then "net start ntfrs".

The NtFrs error was fixed ... but it created a situation that now is preventing users from logging in.

At my wits end, as I have not been able to find a definitive answer to fix the problem and I am due to leave this office VERY soon to head back to HQ. I was hoping to not have to make the 3 hr drive back here again tomorrow to recify this problem.

James
0
 

Author Comment

by:betterlifedirections
ID: 24093243
AV is trend micro "worry Free"
0
 

Author Comment

by:betterlifedirections
ID: 24093404
UPDATE - still requiring help please

I ran CIECW - users can log in to domain, and can open outlook and send/receive emails and access calendars.

PROBLEM UPDATE - SBS2003 reporting MSExchangeAL 8231 error, and users can't access any mapped drives, or browse to SBS box via network places.

0
 

Author Comment

by:betterlifedirections
ID: 24093413
and STILL getting userenv 1030 and 1006 errors :(

0
 
LVL 2

Assisted Solution

by:2629326
2629326 earned 250 total points
ID: 24093564
Dude...
This may occur on DC with two NICs, where one NIC has port filtering enabled and is blocking port 389. This can occur even if the port blocking NIC is lower in the binding order than a non port blocking NIC. May have to try reconfiguring your NIC's and re-register DNS. Check firewall and ports. Even check GC replication while at it.
Good luck.
0
 

Author Comment

by:betterlifedirections
ID: 24093614
yes .. saw that post elsewhere.

I don't have tcp/ip filtering enabled on any NIC.

0
Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

 
LVL 38

Assisted Solution

by:Philip Elder
Philip Elder earned 250 total points
ID: 24093656
0
 

Author Comment

by:betterlifedirections
ID: 24093776
Thanks Philip,

I followed the links and ran the non-authoritative restore at http://support.microsoft.com/kb/290762/en-us

the outcome has resulted in netlogon error 5706:

The Netlogon service could not create server share C:\WINDOWS\SYSVOL\sysvol\Aggregatecorporation.local\SCRIPTS.  The following error occurred:
The system cannot find the file specified.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

The 8231 errors have stopped, but now I am getting the paired userenv arrors 1058 and 1030

can you please recommend a next step?

thanks in anticipation of your help

James
0
 

Author Comment

by:betterlifedirections
ID: 24093894
Since restarting I get the following errors:
#System Errors:
Service Control Manager 7041, 7000, 7001, 7024
Netlogon 5706

#Application Errors:
Userenv 1058
and on startup - Microsoft Firewall 14001, 14060 plus MS ISA Server Web Proxy 14127.

The server no longer has connection to the internet.

I can supply the actual error message if this will help

James
0
 

Author Comment

by:betterlifedirections
ID: 24093897
will a restore from backup help?

James
0
 
LVL 38

Expert Comment

by:Philip Elder
ID: 24094070
Check your IP setup on the NIC(s) to make sure they are correct. If 2 NICs, then check the NIC service order under Advanced to verify that LAN is before WAN.

Philip
0
 

Author Comment

by:betterlifedirections
ID: 24094130
As far as I can see the IP setup on the NICs have not changed. I use 2. In connection manager>LAN or High-Speed Internet heading INTERNAL is listed b4 EXTERNAL. Is that what you are asking?

Not sure which Advanced setting you are referring to here? Can you please clarify?

James
0
 

Accepted Solution

by:
betterlifedirections earned 0 total points
ID: 24094432
Problem soved for the moment ... restored back to Tuesday night's backup .. and that has got me out of the hole I dug last night. Issue now is to address the collection of new error messages:

#Application
Perflib 1008
ISA Server COntrol 21252

#System
Service Control Manager 7001, 7031, 7034 and 7024

#Directory Service
NTDS Service 1229 and 1126

#DNS Server
DNS 4007 and 4001

And a warning on NtFrs 13566 re SYSVOL sharing.

So it appears that my backup did not entirely eliminate my problems. Where to start with this mess is my next question ?!

James
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

I use more than 1 computer in my office for various reasons. Multiple keyboards and mice take up more than just extra space, they make working a little more complicated. Using one mouse and keyboard for all of my computers makes life easier. This co…
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
This video discusses moving either the default database or any database to a new volume.
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now