Solved

Event ID 1058 on SBS 2008 - no group policy deploying

Posted on 2013-01-04
12
797 Views
Last Modified: 2013-01-07
Hi everyone,

I am having some issues with group policy deployment and can not add any new computers to the network.  This is a SBS 2008 server fully updated etc...

i found the issue but I can not seem to find a resolution.  Hoping you can help.

The error I am getting is as follows:

The processing of Group Policy failed. Windows attempted to read the file \\{my-domain}\SysVol\{my-domain}\Policies\{D7566850-CD28-4AEB-899D
-1603BBBE7D18}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be
 transient and could be caused by one or more of the following:

So the issue is the C:\Windows\sysvol\sysvol\{my-comain}\Policies\{D7566850-CD28-4AEB-899D-1603BBBE7D18} is not the location of the gpt.ini file...  it is actually located at C:\Windows\sysvol\sysvol\{my-comain}\Policies\{F65B9DFD-1820-464D-934E-B0B73C01839F}

How do I get the system looking in the correct location?  I have no idea how this got changed but domain join and group policy flat doesn't work right now.

Thanks a bunch!
0
Comment
Question by:mrjking2000
  • 7
  • 5
12 Comments
 
LVL 1

Author Comment

by:mrjking2000
ID: 38743953
another question...is it as simple as re-naming the directory??  would that break something?
0
 
LVL 2

Expert Comment

by:Loyall
ID: 38743980
renaming may cause other problems .

it is best practice to delete the "damaged" policy and re-create it. by re-creating the policy the access-right structure on the gp map is configured the right way.
0
 
LVL 1

Author Comment

by:mrjking2000
ID: 38743996
interesting okay, so to delete the policy...is it just remove that directory or delete the items inside the group policy manager?
0
 
LVL 2

Expert Comment

by:Loyall
ID: 38744033
open group policy management.

open the drop down structure under Group policy objects

verify which policy is causing the problems (by comparing the unique id's ... tab details)
in this case it is the policy with id {D7566850-CD28-4AEB-899D
-1603BBBE7D18}



when you found the policy that is causing the troubles delete it but make sure you know which settings are included in that policy. probably it wont even show cause it does not have a valid source any more.

re create the policy and link it to the appropriate organisational unit (under your domain).

ps

verify if the folder  \\{my-domain}\SysVol\{my-domain}\Policies\{D7566850-CD28-4AEB-899D
-1603BBBE7D18} still exists ... if it does maybe you have a rights issue and giving the right rights on folder and subfolders will resolve.
0
 
LVL 1

Author Comment

by:mrjking2000
ID: 38744054
ok wow!  I am missing the default domain policy, some network drive deployment and printer policies that I made and have the settings backed up (in a word doc), all the update services client, common, and server policies too are gone!  The only one that still exists is windows SBS user policy.

that is some bad news...

what are the settings inside the default domain policy?  How do i recreate that?
0
 
LVL 2

Expert Comment

by:Loyall
ID: 38744086
ouch... that is some bad new indeed!

have you made a backup?

try dcgpofix to re-create the default domain policy
this link explains... i am not sure it works for SBS but i guess any help is welcome.
0
Don't lose your head updating email signatures!

Do your end users still have the wrong email signature? Do email signature updates bore you or fill you with a sense of dread? You can make this a whole lot easier on yourself by trusting an Exclaimer email signature management solution. Over 50 million users do...so should you!

 
LVL 1

Author Comment

by:mrjking2000
ID: 38744095
looks like I have backups back to october 24th, but of course when analyzing the structure the directories that I need are still gone...hopefully the client has the other backup drive somewhere going back even further.
0
 
LVL 2

Accepted Solution

by:
Loyall earned 500 total points
ID: 38744106
well try to re-create the default domain policy first... as explained in the link from my previous post. normally a default domain policy is not altered and is best to be kept as the system made it.

for now i cant reply any sooner then next monday as I am commencing "operation dust cloud" the weekend is calling me :)

i wish you the best of luck and hope you have this resolved before your weekend starts!
0
 
LVL 1

Author Comment

by:mrjking2000
ID: 38744124
i did just successfully recreate the default domain policy and default Domain Controller policy...we will see if these issues iron out here after re-creating the custom policies I made for printer and network drive deployment.

will report back and thanks for the help!
0
 
LVL 1

Author Comment

by:mrjking2000
ID: 38744272
update: this looks like things are ironing out right now...i am no longer getting errors on my group policy deployment, I will keep an eye on the actual client computers next and see if all the re-created policies apply.

thanks a ton for the help!
0
 
LVL 2

Expert Comment

by:Loyall
ID: 38749992
hi there,

i survived the weekend and i am curious if everything is sorted out now?

please do not forget to mark this thread as solved :)
0
 
LVL 1

Author Comment

by:mrjking2000
ID: 38753166
yep i actually got word that everything seems to have returned to normal, except of course resetting the default domain policy made every users passwords expire for some reason.

But yes issue resolved!  Thank you very much!!
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
Know what services you can and cannot, should and should not combine on your server.
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now