Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Event ID 1058 and 1030

Posted on 2009-05-13
8
Medium Priority
?
749 Views
Last Modified: 2012-06-21
in one of my windows 2003 memeber server, I keep receiving Event ID 1058 and 1030 source userenv, after I ran Gpupdate.

event ID 1030 says:
"Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this."

event ID 1058 says:
"Windows cannot access the file gpt.ini for GPO CN={B6F302E8-EA81-4A25-A31E-70084174E1B1},CN=Policies,CN=System,DC=mydomain,DC=com. The file must be present at the location <\\mydomain.com\SysVol\mydomain.com\Policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}\gpt.ini>. (The system cannot find the path specified. ). Group Policy processing aborted.

"




I found the following script and ran it, to fix it, but I still receive the same event logs:
@echo on
cd /d c:\temp
if not exist %windir%\system32\wbem goto TryInstall
cd /d %windir%\system32\wbem
net stop winmgmt
winmgmt /kill
if exist Rep_bak rd Rep_bak /s /q
rename Repository Rep_bak
for %%i in (*.dll) do RegSvr32 -s %%i
for %%i in (*.exe) do call :FixSrv %%i
for %%i in (*.mof, *.mfl) do Mofcomp %%i
net start winmgmt
goto End

:FixSrv
if /I (%1) == (wbemcntl.exe) goto SkipSrv
if /I (%1) == (wbemtest.exe) goto SkipSrv
if /I (%1) == (mofcomp.exe) goto SkipSrv
%1 /RegServer

:SkipSrv
goto End

:TryInstall
if not exist wmicore.exe goto End
wmicore /s
net start winmgmt
:End
0
Comment
Question by:jskfan
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
8 Comments
 
LVL 79

Expert Comment

by:arnold
ID: 24375346
What does this GPO do?  Is this a user, computer or a combination?  I.e. if this is a user based GPO, you should disable the computer configuration.
run gpotool does it show any errors?

0
 

Author Comment

by:jskfan
ID: 24375406
this GPO is applied at Computer configuration
where do I run this  gpotool ? at the domain controller or at the computer that is throwing the event log 1030 and 1058?
is this an internal command?
when I run it , it says:"'gpotool' is not recognized as an internal or external command,
operable program or batch file."
0
 
LVL 79

Expert Comment

by:arnold
ID: 24375704
gpotool is part of either the support pak or resource kit.
What GPOtool does is it compares the version of the policy on all the DCs as well as on the sysvol.

Check the GPO in GMPC, do the AD and sysvol versions match?
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 

Author Comment

by:jskfan
ID: 24375774
the event log is an Application event log
0
 
LVL 79

Expert Comment

by:arnold
ID: 24375938
The GPO is not being loaded because it does not apply (permissions) to this computer.
There is an error in the GPO which prevents it from replicating from the DC on which it was created/modified to the other DC.
Navigate to \\dc1\SysVol\mydomain.com\Policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}\
and then to \\dc2\SysVol\mydomain.com\Policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}\

Using GPOtool is a way to make sure that the GPO versions are identical and there are no errors.

I don't remember, but there is a way to access to GPO application error log on the system to see what the error is that prevents this GPO from applying.
0
 

Author Comment

by:jskfan
ID: 24375948

I ran the Gpotool on the domain controller and got this output:



Validating DCs...
Available DCs:
DC12.mydomain.com
DC11.mydomain.com
DC18.mydomain.com
DC19.mydomain.com
DC10.mydomain.com
DC9.mydomain.com
Searching for policies...
Found 7 policies
============================================================
Policy {0C84EA5A-C6A2-4DC6-9232-26D92A447003}
Friendly name: DC-IPSec
Policy OK
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Friendly name: Default Domain Policy
Error: Version mismatch on DC11.mydomain.com, DS=65547, sysvol=65548
Error: Version mismatch on DC10.mydomain.com, DS=65547, sysvol=65548
Error: Version mismatch on DC9.mydomain.com, DS=65547, sysvol=65548
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/30/2009 4:37:07 PM
DS version:     1(user) 11(machine)
Sysvol version: 1(user) 11(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/30/2009 4:37:21 PM
DS version:     1(user) 11(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 5/13/2009 3:09:44 PM
DS version:     1(user) 12(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 5/13/2009 3:09:59 PM
DS version:     1(user) 12(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/30/2009 4:43:21 PM
DS version:     1(user) 11(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: Default Domain Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/30/2009 4:43:06 PM
DS version:     1(user) 11(machine)
Sysvol version: 1(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {4B63F2EA-87AA-455B-BE0E-DE49F72D1FF5}
Error: Version mismatch on DC12.mydomain.com, DS=25, sysvol=12
Friendly name: WSUS-Servers
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 1:54:38 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 12(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 1:54:11 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 2:19:49 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 2:20:02 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 2:04:52 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: WSUS-Servers
Created: 5/5/2009 8:49:45 PM
Changed: 5/12/2009 2:05:07 PM
DS version:     0(user) 25(machine)
Sysvol version: 0(user) 25(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {5110F9E0-A9F6-4E9B-AB4F-3456E6A750EE}
Error: Version mismatch on DC12.mydomain.com, DS=393216, sysvol=327680
Friendly name: test
Error: Version mismatch on DC11.mydomain.com, DS=393216, sysvol=327680
Error: Version mismatch on DC18.mydomain.com, DS=393216, sysvol=327680
Error: Version mismatch on DC19.mydomain.com, DS=393216, sysvol=327680
Error: Version mismatch on DC10.mydomain.com, DS=393216, sysvol=327680
Error: Version mismatch on DC9.mydomain.com, DS=393216, sysvol=327680
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 8:54:37 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 8:40:53 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 9:19:49 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 8:51:05 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 9:04:52 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: test
Created: 5/11/2009 11:59:31 AM
Changed: 5/11/2009 9:05:07 PM
DS version:     6(user) 0(machine)
Sysvol version: 5(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Friendly name: Default Domain Controllers Policy
Error: Version mismatch on DC11.mydomain.com, DS=1, sysvol=2
Error: Version mismatch on DC10.mydomain.com, DS=1, sysvol=2
Error: Version mismatch on DC9.mydomain.com, DS=1, sysvol=2
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/9/2009 3:18:49 AM
DS version:     0(user) 1(machine)
Sysvol version: 0(user) 1(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/9/2009 3:34:51 AM
DS version:     0(user) 1(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 5/13/2009 3:09:45 PM
DS version:     0(user) 2(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 5/13/2009 3:09:59 PM
DS version:     0(user) 2(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/15/2009 7:14:07 PM
DS version:     0(user) 1(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: Default Domain Controllers Policy
Created: 4/9/2009 3:18:49 AM
Changed: 4/15/2009 9:38:20 PM
DS version:     0(user) 1(machine)
Sysvol version: 0(user) 2(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}
Error: Cannot access \\DC12.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Friendly name: WSUS-Clients
Error: Cannot access \\DC18.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Error: Cannot access \\DC19.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Error: Cannot access \\DC10.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Error: Cannot access \\DC9.mydomain.com\sysvol\mydomain.com\policies\{B6A26FE5-C48A-41FB-91E5-02ECE8E5D20C}, error 2
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 2:54:38 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 1:54:53 PM
DS version:     0(user) 0(machine)
Sysvol version: 0(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 3:20:18 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 3:20:03 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 3:04:52 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 1:54:53 PM
Changed: 5/12/2009 3:05:09 PM
DS version:     0(user) 0(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {B6F302E8-EA81-4A25-A31E-70084174E1B1}
Error: Cannot access \\DC12.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Friendly name: WSUS-Clients
Error: Cannot access \\DC18.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Error: Cannot access \\DC19.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Error: Cannot access \\DC10.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Error: Cannot access \\DC9.mydomain.com\sysvol\mydomain.com\policies\{B6F302E8-EA81-4A25-A31E-70084174E1B1}, error 2
Details:
------------------------------------------------------------
DC: DC12.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 2:54:38 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC11.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 2:38:13 PM
DS version:     0(user) 3(machine)
Sysvol version: 0(user) 3(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC18.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 3:20:18 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC19.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 3:20:03 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC10.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 3:04:52 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: DC9.mydomain.com
Friendly name: WSUS-Clients
Created: 5/12/2009 2:37:09 PM
Changed: 5/12/2009 3:05:09 PM
DS version:     0(user) 3(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
Functionality version: 2
------------------------------------------------------------
============================================================

Errors found
0
 
LVL 79

Accepted Solution

by:
arnold earned 2000 total points
ID: 24376248
You have an error in the default domain policies Computer configuration.  One option is to access the GPO on teh DCs where the user/machine for AD and sysvol match ie.. dc18,dc19. update something trivial that you then can remove.  This will trigger the replication of the changes. see if that corrects the issue.
If it does not, you have to go through the computer configuration to determine where the error could be.  I.e. user rights assignment that uses an invalid/nonexistant group could be a cause for errors.
It is often recommended not to alter the default domain policy nor default domain controller policy but to add rules through additional custom GPOs.
There is a way to reset the default domain and controller policy to its pristine condition dcgpofix
http://windowsitpro.com/article/articleid/41878/how-can-i-restore-the-contents-of-the-default-domain-and-default-domain-controller-dc-group-policy-objects-gpos.html

You might want to create a new GPO into which you can transfer the settings that are normally not part of the Default Domain policy.
Within GPMC and getting policy deltails you might be able to see what the issue could be that's preventing the replication of the policy.
The other thing to check is whether there is something on the DC's that prevents replication of the policy. i.e. ntfrs service is malfuncitoning. The journa system is out of whack.  Check the event logs on dc10,11,12
0
 

Author Comment

by:jskfan
ID: 24377463
I have an IPSec policy that has affected a lot of things in the domain.
I Unassigned it, and run the gpupdate /force for a few times and that event ID is not showing up at all

Now it shows: Security policy in the Group policy objects has been applied successfully.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Hello I read in a discussion about a person who configured a very simple mirror RAID with two hard drives; the system and data were on the same partition. He asked how to repair the system as it was not booting up anymore. In his case running …
Sometimes a user will call me frantically, explaining that something has gone wrong and they have tried everything (read - they have messed it up more and now need someone to clean up) and it still does no good, can I help them?!  Usually the standa…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

704 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question