Solved

Gpupdate Returns Event ID 1058 Error Code

Posted on 2013-05-11
6
2,879 Views
Last Modified: 2013-06-09
When I run gpupdate /force to update my GPO in my AD 2008R2 I receive the flowing error:
User policy could not be updated successfully. The following errors were encount ered:
The processing of Group Policy failed. Windows attempted to read the file \\rome.com\SysVol\rome.com\Policies\{xxxxxx-xxxxxx-xxxxxx-xxxxxx}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
Computer policy could not be updated successfully. The following errors were encountered:
 The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
a) Name Resolution failure on the current domain controller.
b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).
 To diagnose the failure, review the event log or invoke gpmc.msc to access information about Group Policy results.
When I receive this errors I start to fix them as follow:
To change this registry parameter, run regedit.
Click on Start, Run and type regedit.
Expand HKEY_LOCAL_MACHINE.
Click down the key path:
 "System\CurrentControlSet\Services\NtFrs\Parameters"
New->DWORD and add this value:  Enable Journal Wrap Automatic Restore   value:0
I have Stop and start the ntfrs service, then I start get the following events:
13560, 13520 and 13516 – no longer preventing from becoming DC
So far so good, but I still have the same errors for updating the group policy:
•Name Resolution/Network Connectivity to the current domain controller.
•File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
•The Distributed File System (DFS) client has been disabled.
I have 2 DC and most of the domain clients are windows 7 computer, do I need to do this registry parameter on both DCs.
What I need to do for the Distributed File System?

Thanks
0
Comment
Question by:Mahmoud Anis Arafa
  • 4
6 Comments
 

Author Comment

by:Mahmoud Anis Arafa
ID: 39159119
I have a group policy error when I run gpupdate /force

a)Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
0
 
LVL 16

Expert Comment

by:cantoris
ID: 39159226
Check out your replication health:
http://www.microsoft.com/en-us/download/details.aspx?id=30005

You may need to take a look at dcdiag too:
http://technet.microsoft.com/en-us/library/cc731968(v=ws.10).aspx
It can check your relevant parts of DNS for example.
0
 

Author Comment

by:Mahmoud Anis Arafa
ID: 39160468
Now after Icheck the links,

I found that I have a problem at user permissions to the group ploicy. When I try to give thess permissions I recive an error.

Also when I check the SYSVOL folder I saw two Policy folder one whith the name Policies and the other Policies_NTFRS_03b130c3. How to fix this?

Thanks
0
How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

 
LVL 28

Expert Comment

by:Michael Pfister
ID: 39160988
"Troubleshooting Morphed Folders"

http://technet.microsoft.com/library/Bb727056#ECAA
0
 

Accepted Solution

by:
Mahmoud Anis Arafa earned 0 total points
ID: 39178153
I have checked MS report and I delete the old GPO and create a new one.

Thanks
0
 

Author Closing Comment

by:Mahmoud Anis Arafa
ID: 39232782
I have checked MS report and I delete the old GPO and create a new one.

Thanks
0

Featured Post

How does your email signature look on mobiles?

Do your employees use mobile devices to reply to emails? With mobile becoming increasingly important to the business world, it is in your best interest to make sure that your email signature looks great across all types of devices.

Join & Write a Comment

Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
This is an article about Leadership and accepting and adapting to new challenges. It focuses mostly on upgrading to Windows 10.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now