• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 526
  • Last Modified:

SBS 2003 Error 1058 and Error 1030 Every 5 Mins

Keep getting this message and the serve freezes. Have tried everything Google has to offer so i thought i would ask the experts!
0
grovenetsupport
Asked:
grovenetsupport
  • 32
  • 26
1 Solution
 
Alan HardistyCommented:
Is the following KB Article one of the things you have tried?

http://support.microsoft.com/kb/888943

Alan
0
 
grovenetsupportAuthor Commented:
Yep tried this and all seemed ok in the edit box?
0
 
Alan HardistyCommented:
Do the Event ID's that you have posted show the same descriptions in the Event Log as the KB article or do they say something different?

If different - please post them.

What SP is Windows 2003 on and what SP is Exchange on please?

Are all Windows Updates installed?

Alan
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
grovenetsupportAuthor Commented:
Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=atbsystems,DC=local. The file must be present at the location <\\atbsystems.local\sysvol\atbsystems.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. (The system cannot find the path specified. ). Group Policy processing aborted.

Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.


All windows updates and service packs installed
0
 
grovenetsupportAuthor Commented:
This is what we get
event.bmp
0
 
Alan HardistyCommented:
Okay - Start with the basics.

Please output the result of IPCONFIG /all from a command prompt.

You need to make sure that the DNS on the NIC points to itself ONLY and that there is no 2nd DNS server added.  If that isn't the case - please change it.

Alan
0
 
grovenetsupportAuthor Commented:
0
 
Alan HardistyCommented:
Okay - that looks good.

Please run the following and post the results (dcdiag.txt):

dcdiag > c:dcdiag.txt
0
 
grovenetsupportAuthor Commented:
That does not seem to work sorry
0
 
Alan HardistyCommented:
Okay - please download and install the two files from the following link:

http://www.microsoft.com/en-us/download/details.aspx?id=15326

Then you should be able to run dcdiag as per the command above.
0
 
grovenetsupportAuthor Commented:
Ok done that but it does not seem to output the text file?
0
 
grovenetsupportAuthor Commented:
Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests
   
   Testing server: Default-First-Site-Name\ATB
      Starting test: Connectivity
         ......................... ATB passed test Connectivity

Doing primary tests
   
   Testing server: Default-First-Site-Name\ATB
      Starting test: Replications
         ......................... ATB passed test Replications
      Starting test: NCSecDesc
         ......................... ATB passed test NCSecDesc
      Starting test: NetLogons
         ......................... ATB passed test NetLogons
      Starting test: Advertising
         ......................... ATB passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... ATB passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... ATB passed test RidManager
      Starting test: MachineAccount
         ......................... ATB passed test MachineAccount
      Starting test: Services
            IsmServ Service is stopped on [ATB]
         ......................... ATB failed test Services
      Starting test: ObjectsReplicated
         ......................... ATB passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... ATB passed test frssysvol
      Starting test: frsevent
         ......................... ATB passed test frsevent
      Starting test: kccevent
         ......................... ATB passed test kccevent
      Starting test: systemlog
         ......................... ATB passed test systemlog
      Starting test: VerifyReferences
         ......................... ATB passed test VerifyReferences
   
   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
   
   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
   
   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
   
   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
   
   Running partition tests on : atbsystems
      Starting test: CrossRefValidation
         ......................... atbsystems passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... atbsystems passed test CheckSDRefDom
   
   Running enterprise tests on : atbsystems.local
      Starting test: Intersite
         ......................... atbsystems.local passed test Intersite
      Starting test: FsmoCheck
         ......................... atbsystems.local passed test FsmoCheck
0
 
Alan HardistyCommented:
It will - if you used the exact command I gave you there will be a dcdiag.txt file in the folder (usually c:\windows\system32).

You can type

dcdiag.txt

from the same command prompt and it should open up the file.
0
 
grovenetsupportAuthor Commented:
Sorry the / was missing
0
 
Alan HardistyCommented:
Okay - nothing to get excited about there.  Do you just have a single server?  If you do - the ISM Service (Intersite Messaging Service) error can be ignored.

Please post the following output (from a command prompt):

net share

Also check to see if the following file exists:

c:\windows\sysvol\sysvol\atbsystems.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini
0
 
grovenetsupportAuthor Commented:
I think that is one of the problem as i dont seem to have a folder of that name
0
 
Alan HardistyCommented:
Okay - what about the 'net share' output?
0
 
grovenetsupportAuthor Commented:
0
 
Alan HardistyCommented:
Okay - so SYSVOL and NETLOGON are shared - which is as it should be.

Hardware time!

What make / model of server do you have?

Do you have a single NIC / teamed NIC's / dual NIC's (looks like one - just want to make sure).

Have you checked for updated network card drivers from the server manufacturer?
0
 
grovenetsupportAuthor Commented:
Dell Power Edge Single NIC upgraded all drivers and BIOS so next step was to install an new NIC?
0
 
grovenetsupportAuthor Commented:
We have run all hardware checks and it is an entry level t100 but works fine other than this error
0
 
Alan HardistyCommented:
Okay - please screen-dump the NIC properties.

Click on Start> Run> {type} ncpa.cpl {press enter}.  Right click on Local Area Network and choose Properties - please screen dump and paste that screen (CTRL+PRT SCRN) and then paste into mspaint.exe, save as a .PNG file (smaller) and then upload.

Thanks
0
 
grovenetsupportAuthor Commented:
0
 
Alan HardistyCommented:
Okay - you are playing hard to get!

What folders do you see under c:\windows\sysvol\sysvol\atbsystems.local ?
0
 
grovenetsupportAuthor Commented:
That the lot
sysvol.PNG
0
 
Alan HardistyCommented:
Okay - do you have a backup that you can restore the c:\windows\sysvol\sysvol\atbsystems.local folder from?

The Policies folder is missing for some reason and restore is the easiest way to get it back.

How long has the server been throwing these errors and how far back do your backups go?
0
 
grovenetsupportAuthor Commented:
Checking now
0
 
grovenetsupportAuthor Commented:
To be honest i think only the data directory is backed up
0
 
Alan HardistyCommented:
Oh dear - no system state backups?

Any other domain controllers on the network?  Couldn't see any from the DCDIAG report but you never know!
0
 
grovenetsupportAuthor Commented:
nope just data
0
 
Alan HardistyCommented:
Okay - before we go any further - please run a full backup of the server (if you can) using the SBS backup.

At the very least - run a backup of the System State.

Once you are done - we can try the Authoritative restore of the SYSVOL using the D4 Burfags registry key:

http://support.microsoft.com/kb/290762
0
 
Alan HardistyCommented:
If the burflags doesn't work - we will try DCGPOFIX next.

Has someone been a bit overzealous with the Delete Key or did you have a virus on the server?

Any history that I need to know about?

Alan
0
 
grovenetsupportAuthor Commented:
Burflags did not seem to help with the problem so running the DCGPOFIX next
0
 
grovenetsupportAuthor Commented:
Ok this has restored some of the policies that were missing but unfortunately not the one the error is complaining about?
0
 
Alan HardistyCommented:
Has the following file been recreated by the dcgpofix?

c:\windows\sysvol\sysvol\atbsystems.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini
0
 
grovenetsupportAuthor Commented:
Yes
0
 
Alan HardistyCommented:
Okay - can you reboot the server and check the logs for the same events please.
0
 
grovenetsupportAuthor Commented:
Unfortunately same error
0
 
Alan HardistyCommented:
Okay - so the policies have been created and the .ini file created, yet the logs still say the file is missing?

Any other Errors in the logs?
0
 
grovenetsupportAuthor Commented:
Nope clean but the error is complaining about a different folder name to the ones it recreated
0
 
Alan HardistyCommented:
Okay - what's it complaining about now?
0
 
grovenetsupportAuthor Commented:
Windows cannot access the file gpt.ini for GPO CN={2CAE2A6A-0CE3-4CC0-BB49-2389483B147A},CN=Policies,CN=System,DC=atbsystems,DC=local. The file must be present at the location <\\atbsystems.local\SysVol\atbsystems.local\Policies\{2CAE2A6A-0CE3-4CC0-BB49-2389483B147A}\gpt.ini>. (The system cannot find the path specified. ). Group Policy processing aborted.


The folders it recreated start with 6A and 31
0
 
Alan HardistyCommented:
Please fire up Group Policy Management (Start> Programs> Administrative Tools)

Expand the Domain, then the Group Policy Objects.

Select Each Object in turn and then click on the details tab for each policy and note down the Unique ID for each policy.

Complete for all the Policies and then check your c:\windows\sysvol\sysvol\atbsystems.local\policies path and note which folders are present.

Then please post a list of the Policies that exist in Group Policy Management but not in the Policies folder on the C: drive.
0
 
grovenetsupportAuthor Commented:
Get this on all policies starting with Small Business
gpo.PNG
0
 
Alan HardistyCommented:
Okay - attached is a Text File with the name and folder name for each of the SBS Policies, together with a link for a Policies.zip file of the relevant Policy Folders from another SBS 2003 server (which contain the default SBS Policies unmodified as far as I am aware).

Please copy the relevant Policy folder from the zip file (referring to the TXT file first) to the Policy Folder on your server and rename the folder to match the name that your Group Policy is listed as on your server.  Make sense?

http://www.sohotechnology.co.uk/Policies.zip
Group-Policies.txt
0
 
grovenetsupportAuthor Commented:
Yep on it now
0
 
Alan HardistyCommented:
Okay - I hope you understand what I was trying to convey above.  Shout if you're not sure.
0
 
grovenetsupportAuthor Commented:
Event log clear after ten minutes and full reboot!!!!!!!!!!!!!!!
0
 
Alan HardistyCommented:
Damn we are good!
0
 
grovenetsupportAuthor Commented:
You are a legend!
0
 
grovenetsupportAuthor Commented:
So stupidly simple with the right train of thought! Well done you
0
 
Alan HardistyCommented:
Well - needed a bit of parallel thinking, but glad all is good in the end.

Time to encourage people to take FULL backups of the server, not just the data otherwise next time might not be so successful.

If you had a backup of the System, you could have simply restored the folder and then you would be back to happy again.

Alan
0
 
grovenetsupportAuthor Commented:
A large lesson learnt but  when it goes back they wont even thank for the effort that's gone in i guess!
0
 
Alan HardistyCommented:
That sounds about right!  Still - you can tell them that you solved it on your own and then demand a pay rise!!  Just don't tell them how you fixed it.
0
 
grovenetsupportAuthor Commented:
Not sure which of the answers to accept as the fix!
0
 
Alan HardistyCommented:
I'd suggest the dcgpofix comment and the comment with the text file and link to the zip file - but that's just me!!
0
 
grovenetsupportAuthor Commented:
I've requested that this question be closed as follows:

Accepted answer: 500 points for alanhardisty's comment #a38403485
Assisted answer: 0 points for grovenetsupport's comment #a38402679

for the following reason:

Legend
0
 
grovenetsupportAuthor Commented:
Legend
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 32
  • 26
Tackle projects and never again get stuck behind a technical roadblock.
Join Now