userenv errors 1006 and 1030
Hi,
I am having big problems. Our setup is sbs2003 prem netweork, with XP pro clients, and 2nd server (Server 2003) as remote term serv.
Users came to work this morning and can't log in to the domain from their workstations. We are getting UserEnv errors 1006 and 1030, which also apperas to be casuing MSExchangeAL error 8231 and MSExchangeSA 9153. When running gpupdate /force I get User env 1058 and 1030 errors.
Have attached netdiag and netshare results in txt doc.
help me Experts ... you're my only hope ...
James
netdiag-netshare.txt
I am having big problems. Our setup is sbs2003 prem netweork, with XP pro clients, and 2nd server (Server 2003) as remote term serv.
Users came to work this morning and can't log in to the domain from their workstations. We are getting UserEnv errors 1006 and 1030, which also apperas to be casuing MSExchangeAL error 8231 and MSExchangeSA 9153. When running gpupdate /force I get User env 1058 and 1030 errors.
Have attached netdiag and netshare results in txt doc.
help me Experts ... you're my only hope ...
James
netdiag-netshare.txt
Ubertam
What kind of antivirus product are you using on the server?
ASKER
I probably should give some further background to this ...
I have been getting NtFrs error 13568 for some time, and attempted to recify it LAST NIGHT using the suggestions below (hence the problems affecting users today):
###The File Replication Service has detected that the replica set "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)" is in JRNL_WRAP_ERROR.
Replica set name is : "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)"
Replica root path is : "c:\windows\sysvol\domain"
Replica root volume is : "\\.\C:"
A Replica set hits JRNL_WRAP_ERROR when the record that it is trying to read from the NTFS USN journal is not found. This can occur because of one of the following reasons.
<snip>
Setting the "Enable Journal Wrap Automatic Restore" registry parameter to 1 will cause the following recovery steps to be taken to automatically recover from this error state.
[1] At the first poll, which will occur in 5 minutes, this computer will be deleted from the replica set. If you do not want to wait 5 minutes, then run "net stop ntfrs" followed by "net start ntfrs" to restart the File Replication Service.
[2] At the poll following the deletion this computer will be re-added to the replica set. The re-addition will trigger a full tree sync for the replica set.
WARNING: During the recovery process data in the replica tree may be unavailable. You should reset the registry parameter described above to 0 to prevent automatic recovery from making the data unexpectedly unavailable if this error condition occurs again.
To change this registry parameter, run regedit.
Click on Start, Run and type regedit.
Expand HKEY_LOCAL_MACHINE.
Click down the key path:
"System\CurrentControlSet\
Double click on the value name
"Enable Journal Wrap Automatic Restore"
and update the value.
If the value name is not present you may add it with the New->DWORD Value function under the Edit Menu item. Type the value name exactly as shown above.
**** What I did was create the new DWORD value, and then set it to 1, ran "net stop ntfrs" then "net start ntfrs".
The NtFrs error was fixed ... but it created a situation that now is preventing users from logging in.
At my wits end, as I have not been able to find a definitive answer to fix the problem and I am due to leave this office VERY soon to head back to HQ. I was hoping to not have to make the 3 hr drive back here again tomorrow to recify this problem.
James
I have been getting NtFrs error 13568 for some time, and attempted to recify it LAST NIGHT using the suggestions below (hence the problems affecting users today):
###The File Replication Service has detected that the replica set "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)" is in JRNL_WRAP_ERROR.
Replica set name is : "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)"
Replica root path is : "c:\windows\sysvol\domain"
Replica root volume is : "\\.\C:"
A Replica set hits JRNL_WRAP_ERROR when the record that it is trying to read from the NTFS USN journal is not found. This can occur because of one of the following reasons.
<snip>
Setting the "Enable Journal Wrap Automatic Restore" registry parameter to 1 will cause the following recovery steps to be taken to automatically recover from this error state.
[1] At the first poll, which will occur in 5 minutes, this computer will be deleted from the replica set. If you do not want to wait 5 minutes, then run "net stop ntfrs" followed by "net start ntfrs" to restart the File Replication Service.
[2] At the poll following the deletion this computer will be re-added to the replica set. The re-addition will trigger a full tree sync for the replica set.
WARNING: During the recovery process data in the replica tree may be unavailable. You should reset the registry parameter described above to 0 to prevent automatic recovery from making the data unexpectedly unavailable if this error condition occurs again.
To change this registry parameter, run regedit.
Click on Start, Run and type regedit.
Expand HKEY_LOCAL_MACHINE.
Click down the key path:
"System\CurrentControlSet\
Double click on the value name
"Enable Journal Wrap Automatic Restore"
and update the value.
If the value name is not present you may add it with the New->DWORD Value function under the Edit Menu item. Type the value name exactly as shown above.
**** What I did was create the new DWORD value, and then set it to 1, ran "net stop ntfrs" then "net start ntfrs".
The NtFrs error was fixed ... but it created a situation that now is preventing users from logging in.
At my wits end, as I have not been able to find a definitive answer to fix the problem and I am due to leave this office VERY soon to head back to HQ. I was hoping to not have to make the 3 hr drive back here again tomorrow to recify this problem.
James
ASKER
AV is trend micro "worry Free"
ASKER
UPDATE - still requiring help please
I ran CIECW - users can log in to domain, and can open outlook and send/receive emails and access calendars.
PROBLEM UPDATE - SBS2003 reporting MSExchangeAL 8231 error, and users can't access any mapped drives, or browse to SBS box via network places.
I ran CIECW - users can log in to domain, and can open outlook and send/receive emails and access calendars.
PROBLEM UPDATE - SBS2003 reporting MSExchangeAL 8231 error, and users can't access any mapped drives, or browse to SBS box via network places.
ASKER
and STILL getting userenv 1030 and 1006 errors :(
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
yes .. saw that post elsewhere.
I don't have tcp/ip filtering enabled on any NIC.
I don't have tcp/ip filtering enabled on any NIC.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks Philip,
I followed the links and ran the non-authoritative restore at http://support.microsoft.com/kb/290762/en-us
the outcome has resulted in netlogon error 5706:
The Netlogon service could not create server share C:\WINDOWS\SYSVOL\sysvol\A
The system cannot find the file specified.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
The 8231 errors have stopped, but now I am getting the paired userenv arrors 1058 and 1030
can you please recommend a next step?
thanks in anticipation of your help
James
I followed the links and ran the non-authoritative restore at http://support.microsoft.com/kb/290762/en-us
the outcome has resulted in netlogon error 5706:
The Netlogon service could not create server share C:\WINDOWS\SYSVOL\sysvol\A
The system cannot find the file specified.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
The 8231 errors have stopped, but now I am getting the paired userenv arrors 1058 and 1030
can you please recommend a next step?
thanks in anticipation of your help
James
ASKER
Since restarting I get the following errors:
#System Errors:
Service Control Manager 7041, 7000, 7001, 7024
Netlogon 5706
#Application Errors:
Userenv 1058
and on startup - Microsoft Firewall 14001, 14060 plus MS ISA Server Web Proxy 14127.
The server no longer has connection to the internet.
I can supply the actual error message if this will help
James
#System Errors:
Service Control Manager 7041, 7000, 7001, 7024
Netlogon 5706
#Application Errors:
Userenv 1058
and on startup - Microsoft Firewall 14001, 14060 plus MS ISA Server Web Proxy 14127.
The server no longer has connection to the internet.
I can supply the actual error message if this will help
James
ASKER
will a restore from backup help?
James
James
Check your IP setup on the NIC(s) to make sure they are correct. If 2 NICs, then check the NIC service order under Advanced to verify that LAN is before WAN.
Philip
Philip
ASKER
As far as I can see the IP setup on the NICs have not changed. I use 2. In connection manager>LAN or High-Speed Internet heading INTERNAL is listed b4 EXTERNAL. Is that what you are asking?
Not sure which Advanced setting you are referring to here? Can you please clarify?
James
Not sure which Advanced setting you are referring to here? Can you please clarify?
James
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.