Expiring Today—Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

AD not able to read SYSVOL

Posted on 2013-06-19
9
Medium Priority
?
403 Views
Last Modified: 2013-06-30
I am having an issue with a client's AD that I am unable to resolve.

The Windows Server is 2008 R2.

The C partition has plenty of free space.  163GB free, only 40GB used.

I hope someone can help me pretty quickly.

Here is the error message that is occurring:

gpupdate /force
Updating Policy...

User policy could not be updated successfully. The following errors were encountered:
The processing of Group Policy failed. Windows attempted to read the file \\SSI.LOCAL\SysVol\SSI.LOCAL\Policies\{9165C581-823C-4F9B-9677-B53D1A085154}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be
applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
Computer policy could not be updated successfully. The following errors were encountered:
The processing of Group Policy failed. Windows attempted to read the file \\SSI.LOCAL\SysVol\SSI.LOCAL\Policies\{9165C581-823C-4F9B-9677-B53D1A085154}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be
applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled
0
Comment
Question by:jgrammer42
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
9 Comments
 
LVL 22

Assisted Solution

by:Haresh Nikumbh
Haresh Nikumbh earned 1000 total points
ID: 39259197
run the following command: dfsutil /spcflush

and verify
0
 

Author Comment

by:jgrammer42
ID: 39259209
takecoffe,
What am I looking for specifically?
 
And just to make sure, it is ok to run that cmd on a production AD server correct?  (it will not impact the operation in any way?)  I am pretty sure it will not, just wanting to double check.

Thank you,
Jeff
0
 
LVL 22

Expert Comment

by:Haresh Nikumbh
ID: 39259214
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 5

Expert Comment

by:AbhishekJha
ID: 39259240
0
 

Author Comment

by:jgrammer42
ID: 39259281
takecoffe,
When I run that, I do not see any new entry in the Event viewer logs.  (neither in Application or System) logs.

Under what log file would this be reporting?

thank you,
jeff
0
 
LVL 9

Accepted Solution

by:
VirastaR earned 1000 total points
ID: 39259290
Hi,

From the error message, i see that

The processing of Group Policy failed. Windows attempted to read the file \\SSI.LOCAL\SysVol\SSI.LOCAL\Policies\{9165C581-823C-4F9B-9677-B53D1A085154}\gpt.ini

Go to this location and check whether under the Sysvol folder anything exists.

If Yes,

Check under the Policies Folder whether {9165C581-823C-4F9B-9677-B53D1A085154} exists

if not,

Then check this

http://social.technet.microsoft.com/Forums/windowsserver/en-US/c6b3becc-c0e7-4eb9-b235-8d1e7024e1b9/the-processing-of-group-policy-failed-windows-attempted-to-read-the-file

Hope that helps :)
0
 

Author Comment

by:jgrammer42
ID: 39259360
To all,
I will look at all of this and then post back any findings.

Thank you,
Jeff
0
 
LVL 10

Expert Comment

by:Zenvenky
ID: 39261729
Agree with Virastar. I just want to know howmany DCs are there in the domain, If just one then perform Authoritative SYSVOL restore (D4) to fix this issue as you do not see 1030, 1058 event IDs. If you have more than 1 DC then let us know repadmin /replsum and repadmin /showreps so that we can assist you better.

http://support.microsoft.com/kb/290762
0
 

Author Comment

by:jgrammer42
ID: 39262187
To  all,
I am seeing 1058 errors in the System Event Log.  I am not sure why I could not see them before, (maybe I was looking at the wrong log file), but I do clearly see them now.  

As a result, I am going to have the client run the "dfsutil /spcflush" command and see if that corrects the problem first.

I will check back and post results later today.

thank you,
Jeff
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

718 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question