[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Gpupdate Returns Event ID 1058 Error Code

Posted on 2013-05-11
6
Medium Priority
?
3,065 Views
Last Modified: 2013-06-09
When I run gpupdate /force to update my GPO in my AD 2008R2 I receive the flowing error:
User policy could not be updated successfully. The following errors were encount ered:
The processing of Group Policy failed. Windows attempted to read the file \\rome.com\SysVol\rome.com\Policies\{xxxxxx-xxxxxx-xxxxxx-xxxxxx}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
Computer policy could not be updated successfully. The following errors were encountered:
 The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
a) Name Resolution failure on the current domain controller.
b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).
 To diagnose the failure, review the event log or invoke gpmc.msc to access information about Group Policy results.
When I receive this errors I start to fix them as follow:
To change this registry parameter, run regedit.
Click on Start, Run and type regedit.
Expand HKEY_LOCAL_MACHINE.
Click down the key path:
 "System\CurrentControlSet\Services\NtFrs\Parameters"
New->DWORD and add this value:  Enable Journal Wrap Automatic Restore   value:0
I have Stop and start the ntfrs service, then I start get the following events:
13560, 13520 and 13516 – no longer preventing from becoming DC
So far so good, but I still have the same errors for updating the group policy:
•Name Resolution/Network Connectivity to the current domain controller.
•File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
•The Distributed File System (DFS) client has been disabled.
I have 2 DC and most of the domain clients are windows 7 computer, do I need to do this registry parameter on both DCs.
What I need to do for the Distributed File System?

Thanks
0
Comment
Question by:Mahmoud Anis Arafa
  • 4
6 Comments
 

Author Comment

by:Mahmoud Anis Arafa
ID: 39159119
I have a group policy error when I run gpupdate /force

a)Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
0
 
LVL 16

Expert Comment

by:cantoris
ID: 39159226
Check out your replication health:
http://www.microsoft.com/en-us/download/details.aspx?id=30005

You may need to take a look at dcdiag too:
http://technet.microsoft.com/en-us/library/cc731968(v=ws.10).aspx
It can check your relevant parts of DNS for example.
0
 

Author Comment

by:Mahmoud Anis Arafa
ID: 39160468
Now after Icheck the links,

I found that I have a problem at user permissions to the group ploicy. When I try to give thess permissions I recive an error.

Also when I check the SYSVOL folder I saw two Policy folder one whith the name Policies and the other Policies_NTFRS_03b130c3. How to fix this?

Thanks
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 29

Expert Comment

by:Michael Pfister
ID: 39160988
"Troubleshooting Morphed Folders"

http://technet.microsoft.com/library/Bb727056#ECAA
0
 

Accepted Solution

by:
Mahmoud Anis Arafa earned 0 total points
ID: 39178153
I have checked MS report and I delete the old GPO and create a new one.

Thanks
0
 

Author Closing Comment

by:Mahmoud Anis Arafa
ID: 39232782
I have checked MS report and I delete the old GPO and create a new one.

Thanks
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows how to use a free utility called 'Parkdale' to easily test the performance and benchmark any Hard Drive(s) installed in your computer. We also look at RAM Disks and their speed comparisons.
Unable to change the program that handles the scan event from a network attached Canon/Brother printer/scanner. This means you'll always have to choose which program handles this action, e.g. ControlCenter4 (in the case of a Brother).
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
How to fix incompatible JVM issue while installing Eclipse While installing Eclipse in windows, got one error like above and unable to proceed with the installation. This video describes how to successfully install Eclipse. How to solve incompa…

873 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question