Several w2k3 servers in AD domain not receiving latest Computer Config settings from GPO

I have several Windows 2003 SP2 servers that have not received the latest Computer Configuration settings for several months (The last successful one was in March).  Other servers in the AD domain have been getting the updates and are fine.  When I generate an RSOP against the problem server I get the following:
Component Name
Group Policy Infrastructure
The specified domain either does not exist or could not be contacted
Note: Due to the GP Core failure, none of the other Group Policy components processed their policy.  Consequently, status information for the other components is not available.
Additionally, I get a '1053 Userenv error'.  This event pops up after the server is rebooted.

I have checked DNS (statically defined) and the network settings on the NIC and they look good.  I have also checked the BIOS name and have verified that the computer object exists in the Domain.  Other applications on the server function correctly, and the user configuration settings apply just fine.

I have been working on this for quite a while, trying to find something causing this but I keep coming up empty.  Please advise.


Who is Participating?
bluntTonyConnect With a Mentor Commented:
I would also run a DCDIAG test on the server, but I have a feeling it will return back clean.
If users can logon the to server in question, double check your IP settings are correct with respects to DNS, and run some nslookup tests. Try this:
set type=srv
(where domain.local is your domain name). The resulting output should list a record for each DC on your domain. If nothing returns, then it could be a DNS issue. If you do get problems, try logging on to the server as a user that will not have cached credentials on it. If this fails as well this would also suggest DNS. If this is the case disable the firewall on the server and try again.
If none of this fixes it, I would suggest disjoining, resetting the computer account password, then re-joining. If this doesn't work, then try disjoin, delete account, re-join.
Try NETDIAG yet?

Can you post IPCONFIG /ALL from one of the machines that is having the problem and also from one that is not having it?
Hi there. What's the actual error message in the 1053 event you're getting?
Sounds like a possible permissions issue. If user settings are being applied OK and you're not experiencing other problems, then it sounds like your IP config is likely to be OK, as is DNS (this would suggest at least).
Is there anything these servers have anything in common? e.g. they're the only servers on a particular site?
Have you tried disjoining a server, deleting it's computer account and rejoining it to the domain?
Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

sagdocAuthor Commented:
Currently, I can't post an IPconfig for legal reasons, but I did not see anything out of the ordinary.  I have not tried Netdiag but I will on Monday and describe the results.  They are all in the same site, our AD site structure is fully centralized.  There is nothing specific in common other than Ops system and version.  

I have not disjoined, deleted,  rejoined the computer yet, mostly because I am concerned it may not go back in (since I don't know the root cause of this problem) and it is a sensitive server.  
sagdocAuthor Commented:
So I ran a Netdiag against one of the problem servers but unfortunately, all tests passed.  The 1053 event error states:
Windows cannot determine the user or computername. (The specified domain either does not exist or could not be contacted).  Group Policy processing aborted.  
This seems to happen after a reboot.
sagdocAuthor Commented:
The rejoin worked for one server but not the other.  
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.