Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Event ID 1058 and 1030

Posted on 2009-05-13
8
Medium Priority
?
750 Views
Last Modified: 2012-06-21
in one of my windows 2003 memeber server, I keep receiving Event ID 1058 and 1030 source userenv, after I ran Gpupdate.

event ID 1030 says:
"Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this."

event ID 1058 says:
"Windows cannot access the file gpt.ini for GPO CN={B6F302E8-EA81-4A25-A31E-70084174E1B1},CN=Policies,CN=System,DC=mydomain,DC=com. The file must be present at the location <\\mydomain.com\SysVol\mydomain.com\Policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}\gpt.ini>. (The system cannot find the path specified. ). Group Policy processing aborted.

"




I found the following script and ran it, to fix it, but I still receive the same event logs:
@echo on
cd /d c:\temp
if not exist %windir%\system32\wbem goto TryInstall
cd /d %windir%\system32\wbem
net stop winmgmt
winmgmt /kill
if exist Rep_bak rd Rep_bak /s /q
rename Repository Rep_bak
for %%i in (*.dll) do RegSvr32 -s %%i
for %%i in (*.exe) do call :FixSrv %%i
for %%i in (*.mof, *.mfl) do Mofcomp %%i
net start winmgmt
goto End

:FixSrv
if /I (%1) == (wbemcntl.exe) goto SkipSrv
if /I (%1) == (wbemtest.exe) goto SkipSrv
if /I (%1) == (mofcomp.exe) goto SkipSrv
%1 /RegServer

:SkipSrv
goto End

:TryInstall
if not exist wmicore.exe goto End
wmicore /s
net start winmgmt
:End
0
Comment
Question by:jskfan
  • 4
  • 4
8 Comments
 
LVL 80

Expert Comment

by:arnold
ID: 24375346
What does this GPO do?  Is this a user, computer or a combination?  I.e. if this is a user based GPO, you should disable the computer configuration.
run gpotool does it show any errors?

0
 

Author Comment

by:jskfan
ID: 24375406
this GPO is applied at Computer configuration
where do I run this  gpotool ? at the domain controller or at the computer that is throwing the event log 1030 and 1058?
is this an internal command?
when I run it , it says:"'gpotool' is not recognized as an internal or external command,
operable program or batch file."
0
 
LVL 80

Expert Comment

by:arnold
ID: 24375704
gpotool is part of either the support pak or resource kit.
What GPOtool does is it compares the version of the policy on all the DCs as well as on the sysvol.

Check the GPO in GMPC, do the AD and sysvol versions match?
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 

Author Comment

by:jskfan
ID: 24375774
the event log is an Application event log
0
 
LVL 80

Expert Comment

by:arnold
ID: 24375938
The GPO is not being loaded because it does not apply (permissions) to this computer.
There is an error in the GPO which prevents it from replicating from the DC on which it was created/modified to the other DC.
Navigate to \\dc1\SysVol\mydomain.com\Policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}\
and then to \\dc2\SysVol\mydomain.com\Policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}\

Using GPOtool is a way to make sure that the GPO versions are identical and there are no errors.

I don't remember, but there is a way to access to GPO application error log on the system to see what the error is that prevents this GPO from applying.
0
 

Author Comment

by:jskfan
ID: 24375948

I ran the Gpotool on the domain controller and got this output:



Validating DCs...
Available DCs:
DC12.mydomain.com
DC11.mydomain.com
DC18.mydomain.com
DC19.mydomain.com
DC10.mydomain.com
DC9.mydomain.com
Searching for policies...
Found 7 policies
============================================================
Policy {0C84EA5A-C6A2-4DC6-9232-26D92A447003}
Friendly name: DC-IPSec
Policy OK
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Friendly name: Default Domain Policy
Error: Version mismatch on DC11.mydomain.com, DS=65547, sysvol=65548
Error: Version mismatch on DC10.mydomain.com, DS=65547, sysvol=65548
Error: Version mismatch on DC9.mydomain.com, DS=65547, sysvol=65548
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/30/2009 4:37:07 PM
DS version:     1(user) 11(machine)
Sysvol version: 1(user) 11(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/30/2009 4:37:21 PM
DS version:     1(user) 11(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 5/13/2009 3:09:44 PM
DS version:     1(user) 12(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 5/13/2009 3:09:59 PM
DS version:     1(user) 12(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/30/2009 4:43:21 PM
DS version:     1(user) 11(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/30/2009 4:43:06 PM
DS version:     1(user) 11(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {4B63F2EA-87AA-455B-BE0E-DE49F72D1FF5}
Error: Version mismatch on DC12.mydomain.com, DS=25, sysvol=12
Friendly name: WSUS-Servers
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 1:54:38 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 1:54:11 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 2:19:49 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 2:20:02 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 2:04:52 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 2:05:07 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {5110F9E0-A9F6-4E9B-AB4F-3456E6A750EE}
Error: Version mismatch on DC12.mydomain.com, DS=393216, sysvol=327680
Friendly name: test
Error: Version mismatch on DC11.mydomain.com, DS=393216, sysvol=327680
Error: Version mismatch on DC18.mydomain.com, DS=393216, sysvol=327680
Error: Version mismatch on DC19.mydomain.com, DS=393216, sysvol=327680
Error: Version mismatch on DC10.mydomain.com, DS=393216, sysvol=327680
Error: Version mismatch on DC9.mydomain.com, DS=393216, sysvol=327680
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 8:54:37 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 8:40:53 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 9:19:49 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 8:51:05 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 9:04:52 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 9:05:07 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Friendly name: Default Domain Controllers Policy
Error: Version mismatch on DC11.mydomain.com, DS=1, sysvol=2
Error: Version mismatch on DC10.mydomain.com, DS=1, sysvol=2
Error: Version mismatch on DC9.mydomain.com, DS=1, sysvol=2
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/9/2009 3:18:49 AM
DS version:     0(user) 1(machine)
Sysvol version: 0(user) 1(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/9/2009 3:34:51 AM
DS version:     0(user) 1(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 5/13/2009 3:09:45 PM
DS version:     0(user) 2(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 5/13/2009 3:09:59 PM
DS version:     0(user) 2(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/15/2009 7:14:07 PM
DS version:     0(user) 1(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/15/2009 9:38:20 PM
DS version:     0(user) 1(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}
Error: Cannot access \\DC12.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Friendly name: WSUS-Clients
Error: Cannot access \\DC18.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Error: Cannot access \\DC19.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Error: Cannot access \\DC10.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Error: Cannot access \\DC9.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 2:54:38 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 1:54:53 PM
DS version:     0(user) 0(machine)
Sysvol version: 0(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 3:20:18 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 3:20:03 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 3:04:52 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 3:05:09 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {B6F302E8-EA81-4A25-A31E-70084174E1B1}
Error: Cannot access \\DC12.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Friendly name: WSUS-Clients
Error: Cannot access \\DC18.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Error: Cannot access \\DC19.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Error: Cannot access \\DC10.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Error: Cannot access \\DC9.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 2:54:38 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 2:38:13 PM
DS version:     0(user) 3(machine)
Sysvol version: 0(user) 3(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 3:20:18 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 3:20:03 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 3:04:52 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 3:05:09 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
============================================================

Errors found
0
 
LVL 80

Accepted Solution

by:
arnold earned 2000 total points
ID: 24376248
You have an error in the default domain policies Computer configuration.  One option is to access the GPO on teh DCs where the user/machine for AD and sysvol match ie.. dc18,dc19. update something trivial that you then can remove.  This will trigger the replication of the changes. see if that corrects the issue.
If it does not, you have to go through the computer configuration to determine where the error could be.  I.e. user rights assignment that uses an invalid/nonexistant group could be a cause for errors.
It is often recommended not to alter the default domain policy nor default domain controller policy but to add rules through additional custom GPOs.
There is a way to reset the default domain and controller policy to its pristine condition dcgpofix
http://windowsitpro.com/article/articleid/41878/how-can-i-restore-the-contents-of-the-default-domain-and-default-domain-controller-dc-group-policy-objects-gpos.html

You might want to create a new GPO into which you can transfer the settings that are normally not part of the Default Domain policy.
Within GPMC and getting policy deltails you might be able to see what the issue could be that's preventing the replication of the policy.
The other thing to check is whether there is something on the DC's that prevents replication of the policy. i.e. ntfrs service is malfuncitoning. The journa system is out of whack.  Check the event logs on dc10,11,12
0
 

Author Comment

by:jskfan
ID: 24377463
I have an IPSec policy that has affected a lot of things in the domain.
I Unassigned it, and run the gpupdate /force for a few times and that event ID is not showing up at all

Now it shows: Security policy in the Group policy objects has been applied successfully.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As the title indicates, I have done this before. It chills me everytime I update the OS on my phone, (http://www.experts-exchange.com/articles/18084/Upgrading-to-Android-5-0-Lollipop.html) because one time I did this and I essentially had a bricked …
In this article we will discuss all things related to StageFright bug, the most vulnerable bug of android devices.
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

877 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question