Solved

Gpupdate Returns Event ID 1058 Error Code

Posted on 2013-05-11
6
2,941 Views
Last Modified: 2013-06-09
When I run gpupdate /force to update my GPO in my AD 2008R2 I receive the flowing error:
User policy could not be updated successfully. The following errors were encount ered:
The processing of Group Policy failed. Windows attempted to read the file \\rome.com\SysVol\rome.com\Policies\{xxxxxx-xxxxxx-xxxxxx-xxxxxx}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
Computer policy could not be updated successfully. The following errors were encountered:
 The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
a) Name Resolution failure on the current domain controller.
b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).
 To diagnose the failure, review the event log or invoke gpmc.msc to access information about Group Policy results.
When I receive this errors I start to fix them as follow:
To change this registry parameter, run regedit.
Click on Start, Run and type regedit.
Expand HKEY_LOCAL_MACHINE.
Click down the key path:
 "System\CurrentControlSet\Services\NtFrs\Parameters"
New->DWORD and add this value:  Enable Journal Wrap Automatic Restore   value:0
I have Stop and start the ntfrs service, then I start get the following events:
13560, 13520 and 13516 – no longer preventing from becoming DC
So far so good, but I still have the same errors for updating the group policy:
•Name Resolution/Network Connectivity to the current domain controller.
•File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
•The Distributed File System (DFS) client has been disabled.
I have 2 DC and most of the domain clients are windows 7 computer, do I need to do this registry parameter on both DCs.
What I need to do for the Distributed File System?

Thanks
0
Comment
Question by:Mahmoud Anis Arafa
  • 4
6 Comments
 

Author Comment

by:Mahmoud Anis Arafa
ID: 39159119
I have a group policy error when I run gpupdate /force

a)Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
0
 
LVL 16

Expert Comment

by:cantoris
ID: 39159226
Check out your replication health:
http://www.microsoft.com/en-us/download/details.aspx?id=30005

You may need to take a look at dcdiag too:
http://technet.microsoft.com/en-us/library/cc731968(v=ws.10).aspx
It can check your relevant parts of DNS for example.
0
 

Author Comment

by:Mahmoud Anis Arafa
ID: 39160468
Now after Icheck the links,

I found that I have a problem at user permissions to the group ploicy. When I try to give thess permissions I recive an error.

Also when I check the SYSVOL folder I saw two Policy folder one whith the name Policies and the other Policies_NTFRS_03b130c3. How to fix this?

Thanks
0
Guide to Performance: Optimization & Monitoring

Nowadays, monitoring is a mixture of tools, systems, and codes—making it a very complex process. And with this complexity, comes variables for failure. Get DZone’s new Guide to Performance to learn how to proactively find these variables and solve them before a disruption occurs.

 
LVL 28

Expert Comment

by:Michael Pfister
ID: 39160988
"Troubleshooting Morphed Folders"

http://technet.microsoft.com/library/Bb727056#ECAA
0
 

Accepted Solution

by:
Mahmoud Anis Arafa earned 0 total points
ID: 39178153
I have checked MS report and I delete the old GPO and create a new one.

Thanks
0
 

Author Closing Comment

by:Mahmoud Anis Arafa
ID: 39232782
I have checked MS report and I delete the old GPO and create a new one.

Thanks
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Know what services you can and cannot, should and should not combine on your server.
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question