GPO error 1058

Hi there,

I have 5 DCs in one location as BC1 (PDC), BC2, WC1, WC2 (all W2k8R2), BC3 (W2k3) and WC7 and EC1 (W2k8R2) both in two different remote locations.

1.      I’m getting event 1058 on all the DCs in location one every 5 minutes except on BC3 and non on WC7 and EC1.
2.      Can’t access \\\sysvol &netlogon on BC1,BC2,WC1,WC2 but can access them with \\server\sysvol &netlogons on the individual servers.
3.      I Can access \\\sysvol &netlogons on WC7,EC1 and BC3 as well as on the individual servers.
4.      Gpupdate /force comes up with “User policy could not be updated successfully. The following errors were encountered: The processing of group policy fail” on BC1, BC2, WC1, WC2 but not on BC3,WC7 and EC1. And that particular gpo is the domain controller’s gpo and it  exist in all the Sysvol folders on all the DCs.
5.      I get the error attached on BC1,BC2,WC1,WC2
when changes are done under “computer configuration\policies\windows settings\security settings\advanced audit policy configuration” but no issue on BC3,WC7 and EC1. Changes done in the same “advanced audit policy configuration” on BC3,WC7 and EC1 gets saved but never replicates to BC1,BC2,WC1,WC2 (this almost happens to every gpo I tested this on)
6.      Changes in other configurations replicates to all the DCs.
I have check the DNS and replications and seems to be fine. Need more help to fix these issues.

Many thanks.
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Raheman M. AbdulSenior Infrastructure Support Analyst & Systems DeveloperCommented:
Muhammad BurhanManager I.T.Commented:
what error occurs when you try \\\sysvol ?
try after resetting DNS server service
Raheman M. AbdulSenior Infrastructure Support Analyst & Systems DeveloperCommented:
On the servers check the shares are OK by running "net share"

Try with the IP address instead of FQDN locally   \\IPAddress\...

See if you can access the SYSVOL folder from the client machines via UNC path \\ipaddressDC and \\FQDNofDC (check the TCP/IP configuration of the network card of the clients to verify that the preferred DNS server is pointed to the correct DNS server in the domain)

Check the permissons on SYSVOL and compare with working ones.

Make sure you have the right DNS entries and no incorrect entries or duplicate entries
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

Ganesamoorthy STech LeadCommented:
Check is the SYSVOL been shared, and also check the FRS service status

Re-start FRS service and check the FRS event log

If require do D2 to resolve the issue
it_gsrAuthor Commented:
Raheman, i have check and there are not traces of any old server demoted that are still in the system.
Net share list both sysvol and netlogon on all the DCs and i can access both folders using the \\servername or IP\sysvol on all the Dcs. Have also manually compare the both share and security settings on them and they are ok. check on TCP/IP configuration is also ok.

Burhan, \\domain\sysvol comes up with network error "windows cannot access\\domain\sysvol"
Kindly see the other errors in the attached file.

Additional information, dcdiag test on BC3 show below:
Starting test: Services

         * Checking Service: EventSystem
         * Checking Service: RpcSs
            Invalid service type: RpcSs on BC3, current value

            WIN32_OWN_PROCESS, expected value WIN32_SHARE_PROCESS

         * Checking Service: DnsCache
            Invalid service startup type: DnsCache on BC3, current value

            DEMAND_START, expected value AUTO_START.

Dcdiag test on WC7 and EC1 also show below

Starting test: FrsEvent

         * The File Replication Service Event log test
         The event log File Replication Service on server W7
         could not be queried, error 0x6ba "The RPC server is unavailable."

    Both servers failed  FrsEvent, KccEvent and SystemLog test.

Screenshot of the errors are in the attached file.
it_gsrAuthor Commented:
Solved this by just removing the gpo and reapplying it. Thanks all.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.