Solved

Event ID 1058 and 1030

Posted on 2009-05-13
8
731 Views
Last Modified: 2012-06-21
in one of my windows 2003 memeber server, I keep receiving Event ID 1058 and 1030 source userenv, after I ran Gpupdate.

event ID 1030 says:
"Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this."

event ID 1058 says:
"Windows cannot access the file gpt.ini for GPO CN={B6F302E8-EA81-4A25-A31E-70084174E1B1},CN=Policies,CN=System,DC=mydomain,DC=com. The file must be present at the location <\\mydomain.com\SysVol\mydomain.com\Policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}\gpt.ini>. (The system cannot find the path specified. ). Group Policy processing aborted.

"




I found the following script and ran it, to fix it, but I still receive the same event logs:
@echo on
cd /d c:\temp
if not exist %windir%\system32\wbem goto TryInstall
cd /d %windir%\system32\wbem
net stop winmgmt
winmgmt /kill
if exist Rep_bak rd Rep_bak /s /q
rename Repository Rep_bak
for %%i in (*.dll) do RegSvr32 -s %%i
for %%i in (*.exe) do call :FixSrv %%i
for %%i in (*.mof, *.mfl) do Mofcomp %%i
net start winmgmt
goto End

:FixSrv
if /I (%1) == (wbemcntl.exe) goto SkipSrv
if /I (%1) == (wbemtest.exe) goto SkipSrv
if /I (%1) == (mofcomp.exe) goto SkipSrv
%1 /RegServer

:SkipSrv
goto End

:TryInstall
if not exist wmicore.exe goto End
wmicore /s
net start winmgmt
:End
0
Comment
Question by:jskfan
  • 4
  • 4
8 Comments
 
LVL 76

Expert Comment

by:arnold
ID: 24375346
What does this GPO do?  Is this a user, computer or a combination?  I.e. if this is a user based GPO, you should disable the computer configuration.
run gpotool does it show any errors?

0
 

Author Comment

by:jskfan
ID: 24375406
this GPO is applied at Computer configuration
where do I run this  gpotool ? at the domain controller or at the computer that is throwing the event log 1030 and 1058?
is this an internal command?
when I run it , it says:"'gpotool' is not recognized as an internal or external command,
operable program or batch file."
0
 
LVL 76

Expert Comment

by:arnold
ID: 24375704
gpotool is part of either the support pak or resource kit.
What GPOtool does is it compares the version of the policy on all the DCs as well as on the sysvol.

Check the GPO in GMPC, do the AD and sysvol versions match?
0
 

Author Comment

by:jskfan
ID: 24375774
the event log is an Application event log
0
How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

 
LVL 76

Expert Comment

by:arnold
ID: 24375938
The GPO is not being loaded because it does not apply (permissions) to this computer.
There is an error in the GPO which prevents it from replicating from the DC on which it was created/modified to the other DC.
Navigate to \\dc1\SysVol\mydomain.com\Policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}\
and then to \\dc2\SysVol\mydomain.com\Policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}\

Using GPOtool is a way to make sure that the GPO versions are identical and there are no errors.

I don't remember, but there is a way to access to GPO application error log on the system to see what the error is that prevents this GPO from applying.
0
 

Author Comment

by:jskfan
ID: 24375948

I ran the Gpotool on the domain controller and got this output:



Validating DCs...
Available DCs:
DC12.mydomain.com
DC11.mydomain.com
DC18.mydomain.com
DC19.mydomain.com
DC10.mydomain.com
DC9.mydomain.com
Searching for policies...
Found 7 policies
============================================================
Policy {0C84EA5A-C6A2-4DC6-9232-26D92A447003}
Friendly name: DC-IPSec
Policy OK
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Friendly name: Default Domain Policy
Error: Version mismatch on DC11.mydomain.com, DS=65547, sysvol=65548
Error: Version mismatch on DC10.mydomain.com, DS=65547, sysvol=65548
Error: Version mismatch on DC9.mydomain.com, DS=65547, sysvol=65548
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/30/2009 4:37:07 PM
DS version:     1(user) 11(machine)
Sysvol version: 1(user) 11(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/30/2009 4:37:21 PM
DS version:     1(user) 11(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 5/13/2009 3:09:44 PM
DS version:     1(user) 12(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 5/13/2009 3:09:59 PM
DS version:     1(user) 12(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/30/2009 4:43:21 PM
DS version:     1(user) 11(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/30/2009 4:43:06 PM
DS version:     1(user) 11(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {4B63F2EA-87AA-455B-BE0E-DE49F72D1FF5}
Error: Version mismatch on DC12.mydomain.com, DS=25, sysvol=12
Friendly name: WSUS-Servers
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 1:54:38 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 1:54:11 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 2:19:49 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 2:20:02 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 2:04:52 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 2:05:07 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {5110F9E0-A9F6-4E9B-AB4F-3456E6A750EE}
Error: Version mismatch on DC12.mydomain.com, DS=393216, sysvol=327680
Friendly name: test
Error: Version mismatch on DC11.mydomain.com, DS=393216, sysvol=327680
Error: Version mismatch on DC18.mydomain.com, DS=393216, sysvol=327680
Error: Version mismatch on DC19.mydomain.com, DS=393216, sysvol=327680
Error: Version mismatch on DC10.mydomain.com, DS=393216, sysvol=327680
Error: Version mismatch on DC9.mydomain.com, DS=393216, sysvol=327680
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 8:54:37 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 8:40:53 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 9:19:49 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 8:51:05 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 9:04:52 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 9:05:07 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Friendly name: Default Domain Controllers Policy
Error: Version mismatch on DC11.mydomain.com, DS=1, sysvol=2
Error: Version mismatch on DC10.mydomain.com, DS=1, sysvol=2
Error: Version mismatch on DC9.mydomain.com, DS=1, sysvol=2
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/9/2009 3:18:49 AM
DS version:     0(user) 1(machine)
Sysvol version: 0(user) 1(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/9/2009 3:34:51 AM
DS version:     0(user) 1(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 5/13/2009 3:09:45 PM
DS version:     0(user) 2(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 5/13/2009 3:09:59 PM
DS version:     0(user) 2(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/15/2009 7:14:07 PM
DS version:     0(user) 1(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/15/2009 9:38:20 PM
DS version:     0(user) 1(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}
Error: Cannot access \\DC12.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Friendly name: WSUS-Clients
Error: Cannot access \\DC18.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Error: Cannot access \\DC19.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Error: Cannot access \\DC10.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Error: Cannot access \\DC9.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 2:54:38 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 1:54:53 PM
DS version:     0(user) 0(machine)
Sysvol version: 0(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 3:20:18 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 3:20:03 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 3:04:52 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 3:05:09 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {B6F302E8-EA81-4A25-A31E-70084174E1B1}
Error: Cannot access \\DC12.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Friendly name: WSUS-Clients
Error: Cannot access \\DC18.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Error: Cannot access \\DC19.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Error: Cannot access \\DC10.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Error: Cannot access \\DC9.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 2:54:38 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 2:38:13 PM
DS version:     0(user) 3(machine)
Sysvol version: 0(user) 3(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 3:20:18 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 3:20:03 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 3:04:52 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 3:05:09 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
============================================================

Errors found
0
 
LVL 76

Accepted Solution

by:
arnold earned 500 total points
ID: 24376248
You have an error in the default domain policies Computer configuration.  One option is to access the GPO on teh DCs where the user/machine for AD and sysvol match ie.. dc18,dc19. update something trivial that you then can remove.  This will trigger the replication of the changes. see if that corrects the issue.
If it does not, you have to go through the computer configuration to determine where the error could be.  I.e. user rights assignment that uses an invalid/nonexistant group could be a cause for errors.
It is often recommended not to alter the default domain policy nor default domain controller policy but to add rules through additional custom GPOs.
There is a way to reset the default domain and controller policy to its pristine condition dcgpofix
http://windowsitpro.com/article/articleid/41878/how-can-i-restore-the-contents-of-the-default-domain-and-default-domain-controller-dc-group-policy-objects-gpos.html

You might want to create a new GPO into which you can transfer the settings that are normally not part of the Default Domain policy.
Within GPMC and getting policy deltails you might be able to see what the issue could be that's preventing the replication of the policy.
The other thing to check is whether there is something on the DC's that prevents replication of the policy. i.e. ntfrs service is malfuncitoning. The journa system is out of whack.  Check the event logs on dc10,11,12
0
 

Author Comment

by:jskfan
ID: 24377463
I have an IPSec policy that has affected a lot of things in the domain.
I Unassigned it, and run the gpupdate /force for a few times and that event ID is not showing up at all

Now it shows: Security policy in the Group policy objects has been applied successfully.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Introduction Often we come across situations wherein our batch files would be needing to reboot Windows for a variety of reasons. A few of them would be like: (1) Setup files have been updated whose changes can take effect only after a reboot …
Just about everyone has an old PC laying around.  Ask anyone in the IT industry, whether they are a professional or play in it as a hobby.  From outdated Desktops to cheap "throwaway" laptops, they are all around and not as hard to "fix up" as you m…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now