Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

How to find stale {GUID} folders in SYSVOL

Posted on 2009-05-16
6
Medium Priority
?
2,392 Views
Last Modified: 2013-12-05
For the past week or so, I keep having Userenv 1000 on the DC's and 1030/1058 on the clients, and the errors basically say "Windows cannot access the file gpt.ini for GPO"... When I look at the Sysvol folders on the DC's, all of them have different total numbers of {GUID} folders, some have 20+, some have 50+ folders... How can I determine which DC's hold the correct/current {GUID} and which ones I should remove.  Thanks.
0
Comment
Question by:Silly013
  • 2
  • 2
  • 2
6 Comments
 
LVL 31

Accepted Solution

by:
Toni Uranjek earned 1600 total points
ID: 24402354
Hi!

I would suggest that you download gpotool.exe which is part of Resource Kit:

"Windows Server 2003 Resource Kit Tools"
http://www.microsoft.com/downloads/details.aspx?familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en

Use this toll to check for GPO consistency in your domain.

If you want to remove "orphaned" GPO from SYSVOL, you should install Group Policy Managment Console:

"Group Policy Management Console with Service Pack 1"
http://www.microsoft.com/downloads/details.aspx?FamilyID=0A6D4C24-8CBD-4B35-9272-DD3CBFC81887&displaylang=en

After GPMC is installed, go to command prompt and to "%programfiles%\gpmc\scripts" folder. Execute the following script "FindOrphanedGPOsInSYSVOL.wsf". It will list orphaned Group Policy Objects.

HTH

Toni
; command to find orphaned GPOs - substitue test.local with your domain
cscript FindOrphanedGPOsInSYSVOL.wsf /domain:test.local

Open in new window

0
 
LVL 27

Expert Comment

by:bluntTony
ID: 24402503
It also looks like you have a problem with FRS replicating SYSVOL, causing the differences.

The chance are, unless you changed the default, then your PDC will be holding the 'correct' set of policies (the GPMC by default connects to the PDC emulator).

Run DCDIAG (from the support tools on the OS CD) on your DCs - see what errors it returns.
0
 
LVL 2

Author Comment

by:Silly013
ID: 24404972
@bluntTony - replications tests from dcdiag are okay.  (We used to have replication problems because of a couple of failed DC's.. but I did remove the metadata using ntdsutil, and everything seemed to work fine until the past week.)
@toniur - i'm working toward your tips using gpmc-- the script yielded only two orphaned GPO's... and I still  don't know where the other extra 25+ came from.  Anyways.. I compared the GUID's from System folder in ADUC / GPMC and ADSIEDIT... the result is pretty much the same... so what I'm thinking is to just create a folder on each of the DC's and move those that don't match with what found in the System folder, and see how it goes.  Please let me know if this workaround would be okay to do.
0
Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 24405361
Did you run gpotool.exe? It will show you version mismatches between GPOS?
Create backup of all GPOs with GPMC before you move or delete anything.
0
 
LVL 27

Assisted Solution

by:bluntTony
bluntTony earned 400 total points
ID: 24405991
If you create a text file in one SYSVOL share, does it appear in all others? If it does, what you have suggested could work, but then if replication has failed previously some folders may not match what is in the same folder in another replica set, if you've made changes to the GPO.

If you know which is your 'good' replica, you might also want to try and re-initialise FRS so that all members sync.

http://support.microsoft.com/kb/290762

Like toniur says, though, ensure you've got backups before working on it!


0
 
LVL 2

Author Closing Comment

by:Silly013
ID: 31582191
Everything seems to be fine now... I'll keep my eyes on the situation for a week and let you guys know if there's further problem.  Thanks!
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Can I legally transfer my OEM version of Windows to another PC?  (AKA - Can I put a new systemboard in my OEM PC?) Few of us are both IT and legal experts but we all have our own views of Microsoft's licensing rules and how they apply.  There are…
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Is your data getting by on basic protection measures? In today’s climate of debilitating malware and ransomware—like WannaCry—that may not be enough. You need to establish more than basics, like a recovery plan that protects both data and endpoints.…

879 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question