Solved

Event ID 1058 and 1030

Posted on 2009-05-13
8
739 Views
Last Modified: 2012-06-21
in one of my windows 2003 memeber server, I keep receiving Event ID 1058 and 1030 source userenv, after I ran Gpupdate.

event ID 1030 says:
"Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this."

event ID 1058 says:
"Windows cannot access the file gpt.ini for GPO CN={B6F302E8-EA81-4A25-A31E-70084174E1B1},CN=Policies,CN=System,DC=mydomain,DC=com. The file must be present at the location <\\mydomain.com\SysVol\mydomain.com\Policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}\gpt.ini>. (The system cannot find the path specified. ). Group Policy processing aborted.

"




I found the following script and ran it, to fix it, but I still receive the same event logs:
@echo on
cd /d c:\temp
if not exist %windir%\system32\wbem goto TryInstall
cd /d %windir%\system32\wbem
net stop winmgmt
winmgmt /kill
if exist Rep_bak rd Rep_bak /s /q
rename Repository Rep_bak
for %%i in (*.dll) do RegSvr32 -s %%i
for %%i in (*.exe) do call :FixSrv %%i
for %%i in (*.mof, *.mfl) do Mofcomp %%i
net start winmgmt
goto End

:FixSrv
if /I (%1) == (wbemcntl.exe) goto SkipSrv
if /I (%1) == (wbemtest.exe) goto SkipSrv
if /I (%1) == (mofcomp.exe) goto SkipSrv
%1 /RegServer

:SkipSrv
goto End

:TryInstall
if not exist wmicore.exe goto End
wmicore /s
net start winmgmt
:End
0
Comment
Question by:jskfan
  • 4
  • 4
8 Comments
 
LVL 77

Expert Comment

by:arnold
ID: 24375346
What does this GPO do?  Is this a user, computer or a combination?  I.e. if this is a user based GPO, you should disable the computer configuration.
run gpotool does it show any errors?

0
 

Author Comment

by:jskfan
ID: 24375406
this GPO is applied at Computer configuration
where do I run this  gpotool ? at the domain controller or at the computer that is throwing the event log 1030 and 1058?
is this an internal command?
when I run it , it says:"'gpotool' is not recognized as an internal or external command,
operable program or batch file."
0
 
LVL 77

Expert Comment

by:arnold
ID: 24375704
gpotool is part of either the support pak or resource kit.
What GPOtool does is it compares the version of the policy on all the DCs as well as on the sysvol.

Check the GPO in GMPC, do the AD and sysvol versions match?
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 

Author Comment

by:jskfan
ID: 24375774
the event log is an Application event log
0
 
LVL 77

Expert Comment

by:arnold
ID: 24375938
The GPO is not being loaded because it does not apply (permissions) to this computer.
There is an error in the GPO which prevents it from replicating from the DC on which it was created/modified to the other DC.
Navigate to \\dc1\SysVol\mydomain.com\Policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}\
and then to \\dc2\SysVol\mydomain.com\Policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}\

Using GPOtool is a way to make sure that the GPO versions are identical and there are no errors.

I don't remember, but there is a way to access to GPO application error log on the system to see what the error is that prevents this GPO from applying.
0
 

Author Comment

by:jskfan
ID: 24375948

I ran the Gpotool on the domain controller and got this output:



Validating DCs...
Available DCs:
DC12.mydomain.com
DC11.mydomain.com
DC18.mydomain.com
DC19.mydomain.com
DC10.mydomain.com
DC9.mydomain.com
Searching for policies...
Found 7 policies
============================================================
Policy {0C84EA5A-C6A2-4DC6-9232-26D92A447003}
Friendly name: DC-IPSec
Policy OK
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Friendly name: Default Domain Policy
Error: Version mismatch on DC11.mydomain.com, DS=65547, sysvol=65548
Error: Version mismatch on DC10.mydomain.com, DS=65547, sysvol=65548
Error: Version mismatch on DC9.mydomain.com, DS=65547, sysvol=65548
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/30/2009 4:37:07 PM
DS version:     1(user) 11(machine)
Sysvol version: 1(user) 11(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/30/2009 4:37:21 PM
DS version:     1(user) 11(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 5/13/2009 3:09:44 PM
DS version:     1(user) 12(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 5/13/2009 3:09:59 PM
DS version:     1(user) 12(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/30/2009 4:43:21 PM
DS version:     1(user) 11(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/30/2009 4:43:06 PM
DS version:     1(user) 11(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {4B63F2EA-87AA-455B-BE0E-DE49F72D1FF5}
Error: Version mismatch on DC12.mydomain.com, DS=25, sysvol=12
Friendly name: WSUS-Servers
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 1:54:38 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 1:54:11 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 2:19:49 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 2:20:02 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 2:04:52 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 2:05:07 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {5110F9E0-A9F6-4E9B-AB4F-3456E6A750EE}
Error: Version mismatch on DC12.mydomain.com, DS=393216, sysvol=327680
Friendly name: test
Error: Version mismatch on DC11.mydomain.com, DS=393216, sysvol=327680
Error: Version mismatch on DC18.mydomain.com, DS=393216, sysvol=327680
Error: Version mismatch on DC19.mydomain.com, DS=393216, sysvol=327680
Error: Version mismatch on DC10.mydomain.com, DS=393216, sysvol=327680
Error: Version mismatch on DC9.mydomain.com, DS=393216, sysvol=327680
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 8:54:37 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 8:40:53 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 9:19:49 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 8:51:05 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 9:04:52 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 9:05:07 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Friendly name: Default Domain Controllers Policy
Error: Version mismatch on DC11.mydomain.com, DS=1, sysvol=2
Error: Version mismatch on DC10.mydomain.com, DS=1, sysvol=2
Error: Version mismatch on DC9.mydomain.com, DS=1, sysvol=2
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/9/2009 3:18:49 AM
DS version:     0(user) 1(machine)
Sysvol version: 0(user) 1(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/9/2009 3:34:51 AM
DS version:     0(user) 1(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 5/13/2009 3:09:45 PM
DS version:     0(user) 2(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 5/13/2009 3:09:59 PM
DS version:     0(user) 2(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/15/2009 7:14:07 PM
DS version:     0(user) 1(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/15/2009 9:38:20 PM
DS version:     0(user) 1(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}
Error: Cannot access \\DC12.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Friendly name: WSUS-Clients
Error: Cannot access \\DC18.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Error: Cannot access \\DC19.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Error: Cannot access \\DC10.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Error: Cannot access \\DC9.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 2:54:38 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 1:54:53 PM
DS version:     0(user) 0(machine)
Sysvol version: 0(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 3:20:18 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 3:20:03 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 3:04:52 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 3:05:09 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {B6F302E8-EA81-4A25-A31E-70084174E1B1}
Error: Cannot access \\DC12.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Friendly name: WSUS-Clients
Error: Cannot access \\DC18.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Error: Cannot access \\DC19.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Error: Cannot access \\DC10.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Error: Cannot access \\DC9.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 2:54:38 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 2:38:13 PM
DS version:     0(user) 3(machine)
Sysvol version: 0(user) 3(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 3:20:18 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 3:20:03 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 3:04:52 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 3:05:09 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
============================================================

Errors found
0
 
LVL 77

Accepted Solution

by:
arnold earned 500 total points
ID: 24376248
You have an error in the default domain policies Computer configuration.  One option is to access the GPO on teh DCs where the user/machine for AD and sysvol match ie.. dc18,dc19. update something trivial that you then can remove.  This will trigger the replication of the changes. see if that corrects the issue.
If it does not, you have to go through the computer configuration to determine where the error could be.  I.e. user rights assignment that uses an invalid/nonexistant group could be a cause for errors.
It is often recommended not to alter the default domain policy nor default domain controller policy but to add rules through additional custom GPOs.
There is a way to reset the default domain and controller policy to its pristine condition dcgpofix
http://windowsitpro.com/article/articleid/41878/how-can-i-restore-the-contents-of-the-default-domain-and-default-domain-controller-dc-group-policy-objects-gpos.html

You might want to create a new GPO into which you can transfer the settings that are normally not part of the Default Domain policy.
Within GPMC and getting policy deltails you might be able to see what the issue could be that's preventing the replication of the policy.
The other thing to check is whether there is something on the DC's that prevents replication of the policy. i.e. ntfrs service is malfuncitoning. The journa system is out of whack.  Check the event logs on dc10,11,12
0
 

Author Comment

by:jskfan
ID: 24377463
I have an IPSec policy that has affected a lot of things in the domain.
I Unassigned it, and run the gpupdate /force for a few times and that event ID is not showing up at all

Now it shows: Security policy in the Group policy objects has been applied successfully.
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Computer locks up daily 10 81
Restoring files with VSS not possible Path too long 2 94
Replace Ubuntu Desktop with Ubuntu Server 7 108
wireless name in LAN adapter 14 48
Many people tend to confuse the function of a virus with the one of adware, this misunderstanding of the basic of what each software is and how it operates causes users and organizations to take the wrong security measures that would protect them ag…
#Citrix #POC #XenDesktop #vCenter #VMware #ESX
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question