Group Policy Error Messages - 1030 & 1058

Hi All,

We are currently experiencing some problems at a clients site and could do with eliminating a GPO error that occurs in event log so that we can progress and find the cause of the problem.

Currently, all users are recieving these error messages when logging on and randomly throughout the day:

Event Type:      Error
Event Source:      Userenv
Event Category:      None
Event ID:      1058
Date:            05/05/2009
Time:            08:44:05
User:            *****\****
Computer:      ***-***
Description:
Windows cannot access the file gpt.ini for GPO cn={92EA504F-144E-4295-9477-B7BA1EBA4073},cn=policies,cn=system,DC=*****,DC=local. The file must be present at the location <\\*****.local\SysVol\*****.local\Policies\{92EA504F-144E-4295-9477-B7BA1EBA4073}\gpt.ini>. (The system cannot find the path specified. ). Group Policy processing aborted.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Followed by:

Event Type:      Error
Event Source:      Userenv
Event Category:      None
Event ID:      1030
Date:            05/05/2009
Time:            08:44:05
User:            *****\****
Computer:      ***-******
Description:
Windows cannot query for the list of Group Policy objects. A message that describes the reason for this was previously logged by the policy engine.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


We have performed gpupdate /force on all machines, winsock reset, and secedit repairs on the sysvol folders.

The secedit repairs stopped this message coming up on the servers but it still comes up on the clients machines.

The patch where the error says it cannot find the gpt.ini file doesn't even exist in the sysvol.

Has anybody had this problem before?

Thanks
Beavish1Asked:
Who is Participating?
 
Beavish1Connect With a Mentor Author Commented:
This was resolved by resetting the sysvol folder permissions
0
 
JBlondCommented:
0
 
Mike KlineCommented:
Try  the last step in that article on the client machine
dfsutil /purgemupcache
Thanks
Mike
0
Get 10% Off Your First Squarespace Website

Ready to showcase your work, publish content or promote your business online? With Squarespace’s award-winning templates and 24/7 customer service, getting started is simple. Head to Squarespace.com and use offer code ‘EXPERTS’ to get 10% off your first purchase.

 
Beavish1Author Commented:
Do I need to navigate to a specific dir to run dfsutil - it doesn't locate it itself.

Thanks
0
 
JBlondCommented:
0
 
Beavish1Author Commented:
I downloaded XP SP2 Support Tools and:

C:\Program Files\Support Tools>dfsutil /purgemupcache
Unrecognized option "purgemupcache"

Microsoft(R) Windows(TM) Dfs Utility Version 2.1
Copyright (C) Microsoft Corporation 1991-2000. All Rights Reserved.

Dfsutil is an administrative tool to check the functionality of DFS.

Usage: dfsutil [/OPTIONS]

    /? - Usage information
    /ADDSTDROOT:<DfsName> /SERVER:<ServerName> /SHARE:<ShareName>
    /ADDDOMROOT:<DfsName> /SERVER:<ServerName> /SHARE:<ShareName>
    /REMROOT:<DfsName> /SERVER:<ServerName> /SHARE:<ShareName>

    -----------The following are client-side only----------------
    /PKTFLUSH - Flush the local DFS cached information
    /SPCFLUSH - Flush the local DFS cached information
    /PKTINFO [/LEVEL:<Level>] - show DFS internal information.
    /SPCINFO - Show DFS internal information.
Done processing this command.


I guess the commands are pktflush and spcflush in the SP2 version or am I wrong?

Thanks
0
 
Beavish1Author Commented:
Hi Guys, well I have ran the dfsutil /pktflush and /spcflush but to no avail.

Although it stops the the 1030 and 1058 errors appearing, once the GPO is updated again they appear once again.

Are the machines still inheriting an old GPO? Is there a command to list what GPO's a machine has taken?

Thanks
0
 
JBlondCommented:
Do you checked all the other steps in the kb article?

Several months ago I solved it with step 7 (domain controllers were in a journal wrap state).
0
 
snusgubbenCommented:
If the path don't excist then you're probably in a journal wrap state. Check errors in the ntfrs event log or run a dcdiag/frsdiag

SG
0
 
Beavish1Author Commented:
I have checked for errors in the File Replication Service event logs and cannot find any that relate to event ID 13568.

I have performed a 'dcdiag' on all domain controllers (3) and 2 of them come back with the following failed:

Domain Controller 2:

      Starting test: systemlog
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 05/05/2009   15:52:13
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00004E8F
            Time Generated: 05/05/2009   16:27:21
            (Event String could not be retrieved)

Domain Controller 3:

      Starting test: systemlog
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 05/05/2009   15:45:26
            (Event String could not be retrieved)


Does this shed anymore light?


0
 
snusgubbenCommented:
Those are just events from the DC's event log..

Check the SYSVOL on all three DC's if you can locate the "\*****.local\SysVol\*****.local\Policies\{92EA504F-144E-4295-9477-B7BA1EBA4073}\gpt.ini" file (or the "SID" folder).

If you got the GPMC installed then there are some scripts in the "..\Progam files\gpmc\script" folder. Among those there is a script that gives you a report of all GPO's. Then you'll see what GPO missing (SID transfered to GPO real name). I don't remember if you could see the "SID name" directly from the GPMC...

Also check that all your clients use your internal DNS and do not point to any external DNS on their NIC (also secondary DNS should be internal).


SG

0
 
JoemonkeyCommented:
i agree with snusgubben's last comment.  Every time i have seen these errors DNS has been messed up.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.