Re: EventID 1054 from Userenv for startup script

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Did you configure the mentioned policy for the XP computers?
Sorry, I don't understand what you mean by this. I'll describe the
two policies I've mentioned:

The startup script policy: This is a GPO which only contains a
startup script. The GPO is added to a high level OU which contains
all user and computer objects in the domain (nested in sub-OUs).
However, the GPO uses Security Filtering to apply only to a security
group and not to the "Authenticated Users" group. The security group
contains only the computer objects used by people who have the
software which the script uninstalls. Therefore, the policy created a
folder containing the script, removed "Authenticated Users" from the
ACL, and added the special security group instead.

The "Wait for network" policy: On the server's Default Domain Policy,
I set Computer > Admin Templates > System > Login > Always wait for
the network = Enabled. On the problem client mentioned below, I also
set this on its local group policy (which led to a new error saying
the startup script could not be found).


Here is a problem client ipconfig /all, with sanitization.

Windows IP Configuration

Host Name . . . . . . . . . . . . : dept-44
Primary Dns Suffix . . . . . . . : ad-dept.school.edu
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : ad-dept.school.edu
ad-dept.school.edu
school.edu

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : ad-dept.school.edu
Description . . . . . . . . . . . : NVIDIA nForce Networking
Controller
Physical Address. . . . . . . . . : 00-13-D4-04-C1-FD
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : AAA.BBB.CCC.44
Subnet Mask . . . . . . . . . . . : 255.255.255.192
Default Gateway . . . . . . . . . : AAA.BBB.CCC.1
DHCP Server . . . . . . . . . . . : AAA.BBB.CCC.47
DNS Servers . . . . . . . . . . . : AAA.BBB.CCC.47
Lease Obtained. . . . . . . . . . : Thursday, May 07, 2009
12:15:27 PM
Lease Expires . . . . . . . . . . : Friday, May 15, 2009
12:15:27 PM


This must be a simple problem, I just can't figure out what it is.
Thanks again for trying.



Here is the server (file server, DC, DNS, DHCP) ipconfig /all, with
sanitization. Its DNS server forwards requests to central university
DNS servers for resolution.

Windows IP Configuration

Host Name . . . . . . . . . . . . : dept-files
Primary Dns Suffix . . . . . . . : ad-dept.school.edu
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : ad-dept.school.edu
school.edu

Ethernet adapter Local Area Connection 2:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/100 S Server
Adapter
Physical Address. . . . . . . . . : 00-0E-0C-D4-4F-D3
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : AAA.BBB.CCC.47
Subnet Mask . . . . . . . . . . . : 255.255.255.192
Default Gateway . . . . . . . . . : AAA.BBB.CCC.1
DNS Servers . . . . . . . . . . . : AAA.BBB.CCC.47




On May 8, 1:54 am, Meinolf Weber [MVP-DS] <meiweb(nospam)@gmx.de>
wrote:
Hello cjg.gro...@xxxxxxxxx,

Did you configure the mentioned policy for the XP computers?

Please post an unedited ipconfig /all from the DC/DNS and a problem client.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm

Thank you both for the feedback.  The policy folder containing the
startup script currently does not have Authenticated Users in its ACL.
This is because I'm using Security Filtering to apply this policy to a
group of computers.  So, the ACL gives Read & Execute access to that
group (and server-local groups like Domain Admins, etc).

I added Authenticated Users to script folder ACL with Read & Execute
permission, but it still didn't run at startup.  However, if I run the
script by hand and reboot, the next GPO after the script (software
deployment) does run.

The Local System account simply can't find the domain controller at
startup, and it never has been able to since I built the computer.
Yet, everything about this computer works, and the other computers
with this problem work fine too.  It obviously gets group policy
(during a refresh after startup) because it knows to look for that
script, but it seemingly has no network access during bootup to get
it.  But it can get the software deployment package from the same
server.

I currently get these three errors at startup in the Application log:
EventID 1054 from Userenv - Windows cannot obtain the domain
controller name for your computer network. (The specified domain
either does not exist or could not be contacted. ). Group Policy
processing aborted.

EventID 1000 from UserInit - Could not execute the following script
StartupScript.bat. The system cannot find the file specified.

EventID 15 from AutoEnrollment - Automatic certificate enrollment for
local system failed to contact the active directory (0x8007054b).  The
specified domain either does not exist or could not be contacted.
Enrollment will not be performed.
I also have this error in the System log:
EventID 5719 from NETLOGON - No Domain Controller is available for
domain MYDOMAIN due to the following:
There are currently no logon servers available to service the logon
request. .
Any idea why it's "just not working"?  Thanks.

On May 7, 2:14 am, "Florian Frommherz [MVP]"
<flor...@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Howdie!

cjg.gro...@xxxxxxxxx schrieb:

Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be
contacted. ). Group Policy processing aborted.

However, other machines do not log this error.  All machines were
configured similarly and all function normally in every other
respect.

That is a typical error message for either DNS or the "always wait
for the network.." policy unset, originally. Have you checked client
DNS settings are ok?

On one machine, I set the local policy to wait for network before
allowing login:
Computer\Administrative Templates\System\Logon\[Always wait for the
network at computer startup and logon]
This revealed a new Event Log error saying that SYSTEM simply could
not access the startup BAT file on the network.  Permissions are set
the same for all computers, though some got it and some couldn't.
Okay-- the setting is applied on all machines? What permissions are
on the share (just to be sure?) Can you test "Authenticated Users"
with at least "Read" permissions?

cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog:http://www.frickelsoft.net/blog.
Maillist
(german):http://frickelsoft.net/cms/index.php?page=mailingliste



.

Relevant Pages

  • Re: EventID 1054 from Userenv for startup script
    ... So if you said "some machines don't have full access to the network ... at startup" the GPO's seems not to apply correct. ... startup script policy. ...
    (microsoft.public.windows.group_policy)
  • Re: EventID 1054 from Userenv for startup script
    ... The policy folder containing the ... I added Authenticated Users to script folder ACL with Read & Execute ... but it still didn't run at startup. ... It obviously gets group policy ...
    (microsoft.public.windows.group_policy)
  • Re: EventID 1054 from Userenv for startup script
    ... in the right window "Group policy Inheritance tab", ... Those two contain the requirement to "Wait for network before ... where the startup script did run but the deployment GPO would not. ...
    (microsoft.public.windows.group_policy)
  • Re: Deploy office 2003 to XP workstations
    ... Thats why I just posted the policy, ... XP works with a asynchronous startup behavior. ... The network driver starts to late. ... you can set "Run login scripts synchronously". ...
    (microsoft.public.windows.group_policy)
  • Re: Startup Delay after SP2
    ... i tried your suggestion, enabled the policy, rebooted, made no difference ... > Hi, Rich - ... > make sure the network is running on all cylinders before ... > computer startup and logon". ...
    (microsoft.public.windowsxp.network_web)