Re: group policy fails with userenv 1030,158
From: Mark Renoden [MSFT] (markreno_at_online.microsoft.com)
Date: 11/15/04
- Next message: Gregg Hill: "Re: Getting desperate: GPO applying incorrectly, PLEASE HELP ME!!"
- Previous message: Mark Renoden [MSFT]: "Re: Internet Explorer Maintenance Windows XP SP2"
- In reply to: Glenn L: "Re: group policy fails with userenv 1030,158"
- Next in thread: Glenn L: "Re: group policy fails with userenv 1030,158"
- Reply: Glenn L: "Re: group policy fails with userenv 1030,158"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 15 Nov 2004 11:57:37 +1100
Hi Glenn
I just had a crack and reproducing the behaviour without using sites and
didn't see what you're describing. I'm wondering if this might be related
to the /INSITE switch. Take a look at:
282071 Users Are Accessing a DFS Root Replica in a Remote Site
http://support.microsoft.com/?id=282071
It's been a while since I worked on a DFS case involving /INSITE but I have
a vague memory that if INSITE is set and the only DFS root replicate in the
site goes down, clients will have problems.
Kind regards
-- Mark Renoden [MSFT] Windows Platform Support Team Email: markreno@online.microsoft.com Please note you'll need to strip ".online" from my email address to email me; I'll post a response back to the group. This posting is provided "AS IS" with no warranties, and confers no rights. "Glenn L" <the.only(delete)@gmail.com> wrote in message news:OU291iQyEHA.3844@TK2MSFTNGP12.phx.gbl... >I installed the hotfix, and it unfortunately had no impact. > It is possible this issue could be isolated to the VM environment I have > been testing in. > However, I suspect this behavior is reproducable on physical machines as > well. > > -- > Glenn L > > CCNA, MCSE (2000,2003) + Security > "Mark Renoden [MSFT]" <markreno@online.microsoft.com> wrote in message > news:%23sCCtm4xEHA.4044@tk2msftngp13.phx.gbl... >> Hi Glenn >> >> I had a small part to play in the case that motivated this hotfix. I >> just spoke to the guy who authored the article I pointed to before and he >> suggested it will probably be of assistance in your case. >> >> If it doesn't help and you can't reproduce the behaviour on a Windows >> 2000 client, it's probably worth contacting Microsoft to have it >> investigated. >> >> Kind regards >> -- >> Mark Renoden [MSFT] >> Windows Platform Support Team >> Email: markreno@online.microsoft.com >> >> Please note you'll need to strip ".online" from my email address to email >> me; I'll post a response back to the group. >> >> This posting is provided "AS IS" with no warranties, and confers no >> rights. >> >> >> >> "Glenn L" <the.only(delete)@gmail.com> wrote in message >> news:ugdsVx3xEHA.4028@TK2MSFTNGP09.phx.gbl... >>> Thanks Mark. >>> I am aware of the long comprehensive list of things to check for. I'll >>> admit I have not gone through the list. >>> I'm not convinced there is anything on it that will help. This is a >>> very specific thing that only breaks GPO processing when I pull the plug >>> on the DC. I plug the NIC back in and all is well. >>> I also tested the same thing using an XP client and it also fails in the >>> same way. >>> >>> After rebooting client, and with DC01 plugged in, the client XP or W2K3 >>> will apply GPO successfully. >>> >>> dfsreferral cache shows DC01 as the active DFSLINK. This is to be >>> expected. >>> >>> >>> >>> --mup.sys-- >>> >>> 1 entries... >>> >>> Entry: \aditest.swedish.org\sysvol >>> >>> ShortEntry: \aditest.swedish.org\sysvol >>> >>> Expires in 10749248 seconds >>> >>> UseCount: 0 Type:0x1 ( DFS ) >>> >>> 0:[\DC01.aditest.swedish.org\sysvol] State:0x31 ( ACTIVE ) >>> >>> 1:[\DC03.aditest.swedish.org\sysvol] State:0x21 ( ) >>> >>> 2:[\DC02.aditest.swedish.org\sysvol] State:0x21 ( ) >>> >>> >>> >>> >>> >>> I unplug DC01 from the network, force a GPO update on the client, and >>> it (WinXP or W2K3) successfully fails over to an alternate DFS link and >>> applies GPO successfully. Now the dfsreferral cache shows DC03 as the >>> active node. This failover is expected. >>> >>> >>> >>> --mup.sys-- >>> >>> 1 entries... >>> >>> Entry: \aditest.swedish.org\sysvol >>> >>> ShortEntry: \aditest.swedish.org\sysvol >>> >>> Expires in 10749008 seconds >>> >>> UseCount: 0 Type:0x1 ( DFS ) >>> >>> 0:[\DC01.aditest.swedish.org\sysvol] State:0x21 ( ) >>> >>> 1:[\DC03.aditest.swedish.org\sysvol] State:0x31 ( ACTIVE ) >>> >>> 2:[\DC02.aditest.swedish.org\sysvol] State:0x21 ( ) >>> >>> >>> >>> >>> >>> I then purge the dfsreferral cache (dfsutil /pktflush) This is the same >>> as a reboot in this context. We see 0 entries. >>> >>> >>> >>> --mup.sys-- >>> >>> 0 entries... >>> >>> >>> >>> I then force a GPO update on the client. The DFSreferral is the same >>> with DC01 at the top of the list. The client fails to apply the GPO (XP >>> or W2K3). It generates a 1030,1058 combination indicating "The system >>> cannot find the file specified". A network trace shows the client >>> attempting to contact DC01 by arping for it (it continues to arp for >>> DC01 and makes no attempt to contact DC02 or DC03(. But the client >>> never fails over to an alternate DFS link. Note: the DFS referral table >>> shows nothing as active. >>> >>> >>> >>> --mup.sys-- >>> >>> 1 entries... >>> >>> Entry: \aditest.swedish.org\sysvol >>> >>> ShortEntry: \aditest.swedish.org\sysvol >>> >>> Expires in 10749008 seconds >>> >>> UseCount: 0 Type:0x1 ( DFS ) >>> >>> 0:[\DC01.aditest.swedish.org\sysvol] State:0x21 ( ) >>> >>> 1:[\DC02.aditest.swedish.org\sysvol] State:0x21 ( ) >>> >>> 2:[\DC03.aditest.swedish.org\sysvol] State:0x21 ( ) >>> >>> >>> >>> I would expect the client to fail over to an alternate link, but this is >>> not happening. >>> >>> -- >>> Glenn L >>> >>> CCNA, MCSE (2000,2003) + Security >>> "Mark Renoden [MSFT]" <markreno@online.microsoft.com> wrote in message >>> news:efLH3u2xEHA.3368@TK2MSFTNGP15.phx.gbl... >>>> Hi Glenn >>>> >>>> There's a hotfix for 1030 / 1058 events ... >>>> >>>> 842804 Group Policy processing does not work and events 1030 and 1058 >>>> are >>>> http://support.microsoft.com/?id=842804 >>>> >>>> If this doesn't resolve the issue, I'd suggest logging a support >>>> incident. I've seen a few instances of this issue and there's a long >>>> and involved checklist of items that need to be worked through and >>>> verified. >>>> >>>> If you look for ealier posts from me, I think I've provided a >>>> reasonably comprehensive list but I'm not certain this is everything. >>>> >>>> Try the hotfix first and go from there I guess. >>>> >>>> HTH >>>> -- >>>> Mark Renoden [MSFT] >>>> Windows Platform Support Team >>>> Email: markreno@online.microsoft.com >>>> >>>> Please note you'll need to strip ".online" from my email address to >>>> email me; I'll post a response back to the group. >>>> >>>> This posting is provided "AS IS" with no warranties, and confers no >>>> rights. >>>> >>>> "Glenn L" <the.only(delete)@gmail.com> wrote in message >>>> news:OoIzTc2xEHA.1404@TK2MSFTNGP11.phx.gbl... >>>>> Layout >>>>> site 1)DC01, member01 >>>>> site 2)DC02 >>>>> site 3)DC03 >>>>> >>>>> All W2K3 server >>>>> >>>>> I'm testing member01's ability to failover to another DC for group >>>>> policy application in the event DC01 fails. >>>>> I verify member01 applies GPO sucessfully from DC01. >>>>> I pull the network tap on DC01 and force gpupdate on member01. It >>>>> successfully applies GPOs. (in other words it failed over to another >>>>> sysvol based on its existing DFS referral table) >>>>> If I reboot member01 or manually purge the DFS referral cache, GPO >>>>> application fails with 1030 & 1058 "the specified file cannot be >>>>> found" for the GPT.ini file. >>>>> The network trace shows the DFS referral to the client ordered with >>>>> DC01 at the top of the list. >>>>> Member01 sends out arp requests for DC01 until it times out. It does >>>>> not attempt to failover to another sysvol location. I thought it was >>>>> suppose to failover. >>>>> >>>>> My question. >>>>> Should the client attempt to failover to another sysvol copy? (I >>>>> would think so) >>>>> Should the DFS server detect DC01 offline and not include it in the >>>>> DFS referral to the client? >>>>> >>>>> -- >>>>> Glenn L >>>>> >>>>> CCNA, MCSE (2000,2003) + Security >>>>> >>>> >>>> >>> >>> >> >> > >
- Next message: Gregg Hill: "Re: Getting desperate: GPO applying incorrectly, PLEASE HELP ME!!"
- Previous message: Mark Renoden [MSFT]: "Re: Internet Explorer Maintenance Windows XP SP2"
- In reply to: Glenn L: "Re: group policy fails with userenv 1030,158"
- Next in thread: Glenn L: "Re: group policy fails with userenv 1030,158"
- Reply: Glenn L: "Re: group policy fails with userenv 1030,158"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
