Re: Group policy Error; Event ID 1030 & 1058

Hello sphilip,

Before looking around lets start with some basic trouble shooting. Please do not try out additional things. Lets try to find a step by step solution.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm

Also, I ran gpotool /verbose & this is my log

Domain: mudonsiteoff.local
Validating DCs...
Available DCs:
mudonmainsrvr.mudonsiteoff.local
Searching for policies...
Found 2 policies
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Error: Cannot access
\\mudonmainsrvr.mudonsiteoff.local\sysvol\mudonsiteoff.local\policies\
{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini, error 2
Friendly name: Default Domain Policy
Details:
------------------------------------------------------------
DC: mudonmainsrvr.mudonsiteoff.local
Friendly name: Default Domain Policy
Created: 9/5/2007 2:01:02 PM
Changed: 12/23/2007 9:42:40 AM
DS version: 3(user) 49(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions:
[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04F
A372D4}]
Machine extensions:
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04F
B94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D
0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-
11D1-A28C-00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Error: Cannot access
\\mudonmainsrvr.mudonsiteoff.local\sysvol\mudonsiteoff.local\policies\
{6AC1786C-016F-11D2-945F-00C04FB984F9}, error 2
Friendly name: Default Domain Controllers Policy
Details:
------------------------------------------------------------
DC: mudonmainsrvr.mudonsiteoff.local
Friendly name: Default Domain Controllers Policy
Created: 9/5/2007 2:01:02 PM
Changed: 12/24/2007 9:40:41 AM
DS version: 2(user) 22(machine)
Sysvol version: not found
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C9
0F574B}]
Functionality version: 2
------------------------------------------------------------
============================================================
Errors found

Please let me know if you can find anything from this, I will post the
ipconfig /all + netdiag & dcdiag very soon.

Thank You & Merry Xmas

"sphilip" wrote:

Hello Meinolf Weber, Thank You for the response I will be posting
ipconfig /all + dcdiag & netdiag shortly.

However I want to tell you the root of this problem,

I am logging in as administrator of the domain controller but anytime
i try to edit any "Domain Controller Security Policy" & "Domain
Security Policy" & when I click "Apply" to save the changes I get
this error:

Access is Denied.

Failed to Save.

\\domain name\sysvol\domain

name\policies\{6AC1786C-016F-11D2-945F-00C04FB9-84F9}\Machine\Microso
ft\Windows NT\Sec Edit\GptTmpl.inf

Make sure you have the right permissions to this object.

After this i ran dcgpofix tool, running this tool failed with some
"cannot re-create the EFS certificate" error & from then on I am
having this problem.

Please advice me on how I can resolve this issue too.

Thank You & Merry Xmas

"Meinolf Weber" wrote:

Hello sphilip,

Start here, there can be a lot of problems for this event id
combination: http://support.microsoft.com/kb/842804

http://support.microsoft.com/kb/314494

Can you also post an ipconfig /all here and an unedited dcdiag and
netdiag.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm
major



.

Relevant Pages

  • Re: Group policy Error; Event ID 1030 & 1058
    ... Machine extensions: ... Friendly name: Default Domain Controllers Policy ... User extensions: not found ...
    (microsoft.public.windows.group_policy)
  • gpotool - contains user data but version is 0
    ... User extensions: ... Machine extensions: ... Functionality version: 2 ... Friendly name: Default Domain Controllers Policy ...
    (microsoft.public.win2000.group_policy)
  • Re: Default Domain Controllers Policy?
    ... You would like to know what will "Default Domain Controllers Policy" ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Domain controller
    ... The users can login to the Domain controllers with deleted or unlinked Default Domain controllers policy, ... So if you looking why users cannot login to the DCs, ... This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.windows.server.active_directory)
  • Re: slow file transfer
    ... So I'm in Server Mangement. ... name.local> Domain Controllers> Default Domain Controllers Policy ... On the right I have four tabs: Scope, Details, Settings and Delegation. ...
    (microsoft.public.windows.server.sbs)