Event ID 1058 The processing of Group Policy failed.

We have just migrated the domain controllers (2 total) in our environment to Windows 2012 R2 Server from Windows 2003 Server.  One of new domain controllers (with the PDC role) is generating the following error in the event log.  No additional errors are logged:

Log Name:      System
Source:        Microsoft-Windows-GroupPolicy
Date:          4/7/2015 10:54:19 AM
Event ID:      1058
Task Category: None
Level:         Error
User:          DOMAIN\administrator
Computer:      dc1.domain.local
The processing of Group Policy failed. Windows attempted to read the file \\domain.local\sysvol\domain.local\Policies\{612B6FAD-0B10-45BE-9C67-D550683BF731}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" />
    <TimeCreated SystemTime="2015-04-07T14:54:19.375724700Z" />
    <Correlation ActivityID="{52B9B4DF-A552-4B4C-9BB3-3BD86342100E}" />
    <Execution ProcessID="896" ThreadID="2856" />
    <Security UserID="S-1-5-21-1213856313-2713998092-3329232872-500" />
    <Data Name="SupportInfo1">4</Data>
    <Data Name="SupportInfo2">912</Data>
    <Data Name="ProcessingMode">0</Data>
    <Data Name="ProcessingTimeInMilliseconds">360</Data>
    <Data Name="ErrorCode">2148073478</Data>
    <Data Name="ErrorDescription">Invalid Signature. </Data>
    <Data Name="DCName">dc1.domain.local</Data>
    <Data Name="GPOCNName">cn={421A4FAD-1B11-32BE-8C65-B550783F7213},cn=policies,cn=system,DC=domain,DC=local</Data>
    <Data Name="FilePath">\\domain.local\sysvol\domain.local\Policies\{421A4FAD-1B11-32BE-8C65-B550783F7213}\gpt.ini</Data>

The error code/description indicated is 2148073478/Invalid Signature.  However, I'm not having much luck finding similar issues with event ID 1058 that have the same error code.  

I found the article http://support.microsoft.com/en-us/kb/2686098 but it doesn't seem like it applies here.  

I have recreated the policy indicated in the log and have also ran dfsutil /purgemupcache.  This only resolves the issue temporarily.  in addition, I am able to access the SYSVOL directory indicated and gpt.ini file without any issues.

Any help would be greatly appreciated!
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Will SzymkowskiSenior Solution ArchitectCommented:
The policy that is failing did you recently create it? Are you able to remove it and re-create it?

Was this a policy that was created on the 2003 DC before the upgrade?

Have you ensure that replication is working as expected?

using repadmin /replsum

tbeck1983Author Commented:
The affected policy has already been re-created.  That was one of the first things I did to try to re-mediate the issue.
The policy was created on the 2003 DC before the upgrade.
repadmin /replsum shows no errors

Replication Summary Start Time: 2015-04-07 15:49:35

Beginning data collection for replication summary, this may take awhile:

Source DSA          largest delta    fails/total %%   error
 DC1              58m:54s    0 /  10    0
 DC2              56m:59s    0 /  10    0
 DC3                      58m:54s    0 /  10    0

Destination DSA     largest delta    fails/total %%   error
 DC1              51m:19s    0 /  10    0
 DC2              58m:54s    0 /  10    0
 DC3                      56m:59s    0 /  10    0
Have you run dcdiag /v /e >c:\dcdiag.txt to check the health of AD....

Also see if the following article applied to you....

tbeck1983Author Commented:
AD health looks fine.  It actually looks as if running dfsutil /PurgeMupCache for a second time has cleared up the errors.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Nice work.. after thinking about it running the dfsutil /PurgeMupCache makes sense after a migration
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.