Re: Continual errors - Event ID 1030 and 1058 on DC

Tech-Archive recommends: Speed Up your PC by fixing your registry

The Default Domain and the Default Domain Controllers group
policy objects are two different things. It sounds as though you
are being told to check that the second of these is being applied
to the DCs in the DCs OU, but you state you check in the security
settings for the first of these.


"Saral6978" <Saral6978@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:7F44BCA0-DAF5-41E5-846A-2037EA5E6FA6@xxxxxxxxxxxxxxxx
Regarding this:
. Domain controllers have the read and apply rights to the Domain
Controllers Policy.
-I'm not sure where to check this? In the security tab of default domain
policy? And where would this setting be configured? I have my Domain
Controllers OU, but the default domain policy is applied here as is 2
other
policies that were created regarding Automatic updates.

I believe I found where this was - I right-clicked on the "default domain
policy" went to "properties". Clicked on the Security tab, and added the
group "Domain Controllers" which contain my 4 DCs and selected Read and
Apply
Group Policy rights for that group; Hopefully this is the policy they are
talking about.


"Saral6978" wrote:

I am continually getting the above 2 errors on my domain controller. KB
Article 842804 refers to a hotfix, but it also says to look at a few
other
possible causes to the error messages before applying the hotfix:

. Netlogon and DFS services are started.
-These services are started

. Domain controllers have the read and apply rights to the Domain
Controllers Policy.
-I'm not sure where to check this? In the security tab of default domain
policy? And where would this setting be configured? I have my Domain
Controllers OU, but the default domain policy is applied here as is 2
other
policies that were created regarding Automatic updates

. NTFS file system permissions and share permissions are set correctly on
the Sysvol share.
-What are the permissions supposed to be exactly?

. DNS entries are correct for the domain controllers.
-This looks to be correct

I'dl like to confirm I have the correct settings above before installing
the
hotfix. I would think that NTFS permissions for the Sysvol should be
fine,
if the default settings were kept, as well as the domain controllers'
read
and apply rights, but I just don't know for sure. I'm not sure if the
person
who worked here before me made any manual changes to this information.

I have a total of 4 domains controllers and the other 3 are not getting
these 2 errors. The particular DC having the issue is considered our
"Master" DC - it assumes all FSMO responsiblities.

Any help would be appreciated as I would love to stop these errors from
occuring all day long, almost every day. Anyone else ever have these 2
errors?


.

Relevant Pages

  • Re: USERENV error - Group Policy
    ... However, as per instructions, I've set these permissions correctly. ... policy object in AD. ... folder and GPO, returning the security to normal settings, did another GP ... -Domain controllers have the read and apply rights to the Domain Controllers ...
    (microsoft.public.windows.server.active_directory)
  • Re: Permissions to GPO for Enterprise Domain Controllers
    ... have only seen a GPMC launch of the GPO editor popup message ... that "permissions are incorrect, click here to have this corrected" ... selecting either Default Domain Policy or Default Domain Controllers ... "The Enterprise Domain Controllers group does not have read access to ...
    (microsoft.public.windows.server.active_directory)
  • RE: USERENV error - Group Policy
    ... with no AD policies attached. ... policy to this container and do a gpupdate, I get the error on the server. ... Domain controllers have the read and apply rights to the Domain Controllers ... I've checked numerous settings as follows: ...
    (microsoft.public.windows.server.active_directory)
  • Re: Minimum Password length GPO setting wont take effect
    ... Make all settings related to Accounts in the DC policy. ... you have the Domain Controllers OU Blocking Inheritance there is no purpose ... I am a little unclear then on what settings need to be in the GPO that is ...
    (microsoft.public.windows.group_policy)
  • Re: Does user have to be a member of domain admins? Surely not!
    ... policy object is over the Domain Controllers organization unit. ... gVTT_Everyone security group have the following delegation for my test ... "Apply Group Policy" permissions. ...
    (microsoft.public.windows.server.sbs)