Re: GPO Reinstall

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



On Apr 28, 1:31 pm, "Andre Monostori" <tech...@xxxxxxxxxxxxxx> wrote:
I have tried dcgpofix.exe and I get the following error:

Unable to read EFS certificates from Registry.pol file of Default Domain
Policy....

I keep getting 1030 & 1058 errors in logs. I can not even view the GPOs.
This is a win 2003 server. Problems started after upgrade from win 2K
server to win2003 server.

Any suggestions to zap this and start over with the GPO?

Hi,

When you say server, do you mean Domain controllers:
Do you have Certificates in your environment?
Did you recreate both of the policies with dcgpofix? (domain and
domain controllers)
I would do one of two things here. Verify your DNS settings, point
the DC's to the PDC in the network and flush, register dns and stop
and start the netlogon service.
If this does not fix this, go into the sysvol under the default domain
policy (the one with the GUID starting with 31B2F340) and delete the
registry.pol file.
Go into the default domain policy and make a settings change. This
will recreate the registry.pol file

Good luck

Harj Singh
Power Your Active Directory Investment
www.specopssoft.com

.



Relevant Pages

  • Re: GPO Reinstall
    ... Unable to read EFS certificates from Registry.pol file of Default Domain ... server to win2003 server. ... Verify your DNS settings, point ... Go into the default domain policy and make a settings change. ...
    (microsoft.public.windows.group_policy)
  • Re: My users have disappeared!
    ... Using a brand new OEM install of Windows Server 2008 Std SP1. ... containers, one for each office. ... When I came out of Default Domain Policy, ... I can't figure out how to UN apply that filter, ...
    (microsoft.public.windows.server.active_directory)
  • Re: why dont the login scripts work some time?
    ... DNS settings are just fine, ... We have other shares on the same server accessed without a problem. ... >> Login script sometimes doesn't want to map network drive. ...
    (microsoft.public.win2000.general)
  • Re: Downtime issues
    ... >What are your dns settings for the server? ... I am not to sure what you mean by the DNS settings. ... >> about this event, see ISA Server Help. ... >> Product Support Services to report this error. ...
    (microsoft.public.exchange2000.general)
  • Re: Start the following program at logon - Does not respond > Environment Tab
    ... I suspect it's one of the many settings in your domain policy ... I usually specify a logon script, ... The windows 2003 is a domain ... When logging in the server just goes to the normal ...
    (microsoft.public.windows.server.general)