Group Policy Error



I'm getting an error in the application event log.
Domain Controller 1

Source: Userenv
EventID: 1030
User: NT Authority\System

Description: Windows cannot query for the list of Group Policy objects.
Check the event log for possible messages previously logged by the policy
engine that describes the reason for this.

Source: Userenv
EventID: 1058
User: NT Authority\System

Description: Windows cannot access the file gpt.ini for GPO
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=***,DC=co
m. The file must be present at the location
<\\domainname.com\sysvol\domainname\Policies\{31B2F340-016D-11D2-945F-00C04F
B984F9}\gpt.ini>. (Access is denied). Group Policy processing aborted.

I found the policy in Group Policy Management. When I clicked on the policy
an error came up that said "The permissions for the GPO in the SYSVOL folder
are inconsistent with those in Active Directory. It is recommended that
these permissions be consistent. To change the SYSVOL permissions to those
in Active Directory, click OK. It gives a link for further information.
http://support.microsoft.com/default.aspx?scid=kb;en-us;828760

In there it suggests that SP1 get installed on the server. Which is already
installed.

These errors have been going on for about a month now. They appeared to be
happening back in 11/05 but they stopped. But are back now.

Database Server/ Terminal Server

Source: Userenv
EvenID: 1053
User: NT Authority\System

Description: Windows cannot determine the user or computer name. (An
internal error has occurred.). Group Policy processing aborted.

The error only seems to happen at night. This server is running Windows 2003
server Enterprise Edition in Terminal Services Application mode. With SQL
2000 running as well. It's had this error since 4/6/06, before that it was
showing the following error
Source: Userenv
EventID: 1053
User: NT Authority\System

Description: Windows cannot determine the user or computer name. (The system
detected a possible attempt to compromise security. Please ensure that you
can contact the server that authenticated you.). Group Policy processing
aborted.

That error showed in the event log from 4/3/06 to 4/5/06.

There are 2 domain controllers for this domain. The second domain controller
is not getting any of these errors at all. What should I try next.

.



Relevant Pages

  • Site-tosite VPN Issue
    ... Windows Server 2003 domain controller ... Mixture of PCs running Windows 2000 Profressional with SP3 and Windows XP ... the VPN to the Windows Server 2003 domain controller. ... 12.7MB file from the server to the client PC. ...
    (microsoft.public.windows.server.networking)
  • Windows Server 2003 upgrade Group Policy and DFS problems - SMB Signing
    ... domains to Windows Server 2003. ... Windows cannot query for the list of Group Policy objects. ... it is all to do with the fact that under Windows Server ... Because the 'Microsoft network server: ...
    (microsoft.public.win2000.group_policy)
  • Re: How do you all manage employee workstations? Looking for sugge
    ... 314886 Some Issues to Consider If Windows XP Users Have Roaming Profiles ... Folder Redirection is a User group policy. ... client computer will be saved in one server box. ...
    (microsoft.public.windows.server.sbs)
  • RE: Internet Connection Wizard failing at Firewall Config and Secu
    ... You can use the Dcdiag.exe (Domain Controller Diagnostic Tool) included ... in Windows Support Tools to verify the AD status. ... Windows Server 2003 Active Directory Diagnostics, ...
    (microsoft.public.windows.server.sbs)
  • Re: How do you all manage employee workstations? Looking for suggestio
    ... 314886 Some Issues to Consider If Windows XP Users Have Roaming Profiles ... Folder Redirection is a User group policy. ... client computer will be saved in one server box. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)