Solved

Event ID 1058 and 1030

Posted on 2009-05-13
8
740 Views
Last Modified: 2012-06-21
in one of my windows 2003 memeber server, I keep receiving Event ID 1058 and 1030 source userenv, after I ran Gpupdate.

event ID 1030 says:
"Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this."

event ID 1058 says:
"Windows cannot access the file gpt.ini for GPO CN={B6F302E8-EA81-4A25-A31E-70084174E1B1},CN=Policies,CN=System,DC=mydomain,DC=com. The file must be present at the location <\\mydomain.com\SysVol\mydomain.com\Policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}\gpt.ini>. (The system cannot find the path specified. ). Group Policy processing aborted.

"




I found the following script and ran it, to fix it, but I still receive the same event logs:
@echo on
cd /d c:\temp
if not exist %windir%\system32\wbem goto TryInstall
cd /d %windir%\system32\wbem
net stop winmgmt
winmgmt /kill
if exist Rep_bak rd Rep_bak /s /q
rename Repository Rep_bak
for %%i in (*.dll) do RegSvr32 -s %%i
for %%i in (*.exe) do call :FixSrv %%i
for %%i in (*.mof, *.mfl) do Mofcomp %%i
net start winmgmt
goto End

:FixSrv
if /I (%1) == (wbemcntl.exe) goto SkipSrv
if /I (%1) == (wbemtest.exe) goto SkipSrv
if /I (%1) == (mofcomp.exe) goto SkipSrv
%1 /RegServer

:SkipSrv
goto End

:TryInstall
if not exist wmicore.exe goto End
wmicore /s
net start winmgmt
:End
0
Comment
Question by:jskfan
  • 4
  • 4
8 Comments
 
LVL 78

Expert Comment

by:arnold
ID: 24375346
What does this GPO do?  Is this a user, computer or a combination?  I.e. if this is a user based GPO, you should disable the computer configuration.
run gpotool does it show any errors?

0
 

Author Comment

by:jskfan
ID: 24375406
this GPO is applied at Computer configuration
where do I run this  gpotool ? at the domain controller or at the computer that is throwing the event log 1030 and 1058?
is this an internal command?
when I run it , it says:"'gpotool' is not recognized as an internal or external command,
operable program or batch file."
0
 
LVL 78

Expert Comment

by:arnold
ID: 24375704
gpotool is part of either the support pak or resource kit.
What GPOtool does is it compares the version of the policy on all the DCs as well as on the sysvol.

Check the GPO in GMPC, do the AD and sysvol versions match?
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:jskfan
ID: 24375774
the event log is an Application event log
0
 
LVL 78

Expert Comment

by:arnold
ID: 24375938
The GPO is not being loaded because it does not apply (permissions) to this computer.
There is an error in the GPO which prevents it from replicating from the DC on which it was created/modified to the other DC.
Navigate to \\dc1\SysVol\mydomain.com\Policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}\
and then to \\dc2\SysVol\mydomain.com\Policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}\

Using GPOtool is a way to make sure that the GPO versions are identical and there are no errors.

I don't remember, but there is a way to access to GPO application error log on the system to see what the error is that prevents this GPO from applying.
0
 

Author Comment

by:jskfan
ID: 24375948

I ran the Gpotool on the domain controller and got this output:



Validating DCs...
Available DCs:
DC12.mydomain.com
DC11.mydomain.com
DC18.mydomain.com
DC19.mydomain.com
DC10.mydomain.com
DC9.mydomain.com
Searching for policies...
Found 7 policies
============================================================
Policy {0C84EA5A-C6A2-4DC6-9232-26D92A447003}
Friendly name: DC-IPSec
Policy OK
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Friendly name: Default Domain Policy
Error: Version mismatch on DC11.mydomain.com, DS=65547, sysvol=65548
Error: Version mismatch on DC10.mydomain.com, DS=65547, sysvol=65548
Error: Version mismatch on DC9.mydomain.com, DS=65547, sysvol=65548
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/30/2009 4:37:07 PM
DS version:     1(user) 11(machine)
Sysvol version: 1(user) 11(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/30/2009 4:37:21 PM
DS version:     1(user) 11(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 5/13/2009 3:09:44 PM
DS version:     1(user) 12(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 5/13/2009 3:09:59 PM
DS version:     1(user) 12(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/30/2009 4:43:21 PM
DS version:     1(user) 11(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/30/2009 4:43:06 PM
DS version:     1(user) 11(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {4B63F2EA-87AA-455B-BE0E-DE49F72D1FF5}
Error: Version mismatch on DC12.mydomain.com, DS=25, sysvol=12
Friendly name: WSUS-Servers
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 1:54:38 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 1:54:11 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 2:19:49 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 2:20:02 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 2:04:52 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 2:05:07 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {5110F9E0-A9F6-4E9B-AB4F-3456E6A750EE}
Error: Version mismatch on DC12.mydomain.com, DS=393216, sysvol=327680
Friendly name: test
Error: Version mismatch on DC11.mydomain.com, DS=393216, sysvol=327680
Error: Version mismatch on DC18.mydomain.com, DS=393216, sysvol=327680
Error: Version mismatch on DC19.mydomain.com, DS=393216, sysvol=327680
Error: Version mismatch on DC10.mydomain.com, DS=393216, sysvol=327680
Error: Version mismatch on DC9.mydomain.com, DS=393216, sysvol=327680
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 8:54:37 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 8:40:53 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 9:19:49 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 8:51:05 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 9:04:52 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 9:05:07 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Friendly name: Default Domain Controllers Policy
Error: Version mismatch on DC11.mydomain.com, DS=1, sysvol=2
Error: Version mismatch on DC10.mydomain.com, DS=1, sysvol=2
Error: Version mismatch on DC9.mydomain.com, DS=1, sysvol=2
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/9/2009 3:18:49 AM
DS version:     0(user) 1(machine)
Sysvol version: 0(user) 1(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/9/2009 3:34:51 AM
DS version:     0(user) 1(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 5/13/2009 3:09:45 PM
DS version:     0(user) 2(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 5/13/2009 3:09:59 PM
DS version:     0(user) 2(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/15/2009 7:14:07 PM
DS version:     0(user) 1(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/15/2009 9:38:20 PM
DS version:     0(user) 1(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}
Error: Cannot access \\DC12.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Friendly name: WSUS-Clients
Error: Cannot access \\DC18.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Error: Cannot access \\DC19.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Error: Cannot access \\DC10.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Error: Cannot access \\DC9.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 2:54:38 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 1:54:53 PM
DS version:     0(user) 0(machine)
Sysvol version: 0(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 3:20:18 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 3:20:03 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 3:04:52 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 3:05:09 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {B6F302E8-EA81-4A25-A31E-70084174E1B1}
Error: Cannot access \\DC12.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Friendly name: WSUS-Clients
Error: Cannot access \\DC18.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Error: Cannot access \\DC19.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Error: Cannot access \\DC10.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Error: Cannot access \\DC9.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 2:54:38 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 2:38:13 PM
DS version:     0(user) 3(machine)
Sysvol version: 0(user) 3(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 3:20:18 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 3:20:03 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 3:04:52 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 3:05:09 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
============================================================

Errors found
0
 
LVL 78

Accepted Solution

by:
arnold earned 500 total points
ID: 24376248
You have an error in the default domain policies Computer configuration.  One option is to access the GPO on teh DCs where the user/machine for AD and sysvol match ie.. dc18,dc19. update something trivial that you then can remove.  This will trigger the replication of the changes. see if that corrects the issue.
If it does not, you have to go through the computer configuration to determine where the error could be.  I.e. user rights assignment that uses an invalid/nonexistant group could be a cause for errors.
It is often recommended not to alter the default domain policy nor default domain controller policy but to add rules through additional custom GPOs.
There is a way to reset the default domain and controller policy to its pristine condition dcgpofix
http://windowsitpro.com/article/articleid/41878/how-can-i-restore-the-contents-of-the-default-domain-and-default-domain-controller-dc-group-policy-objects-gpos.html

You might want to create a new GPO into which you can transfer the settings that are normally not part of the Default Domain policy.
Within GPMC and getting policy deltails you might be able to see what the issue could be that's preventing the replication of the policy.
The other thing to check is whether there is something on the DC's that prevents replication of the policy. i.e. ntfrs service is malfuncitoning. The journa system is out of whack.  Check the event logs on dc10,11,12
0
 

Author Comment

by:jskfan
ID: 24377463
I have an IPSec policy that has affected a lot of things in the domain.
I Unassigned it, and run the gpupdate /force for a few times and that event ID is not showing up at all

Now it shows: Security policy in the Group policy objects has been applied successfully.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Introduction Often we come across situations wherein our batch files would be needing to reboot Windows for a variety of reasons. A few of them would be like: (1) Setup files have been updated whose changes can take effect only after a reboot …
Sometimes a user will call me frantically, explaining that something has gone wrong and they have tried everything (read - they have messed it up more and now need someone to clean up) and it still does no good, can I help them?!  Usually the standa…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question