Group Policy Error
- From: Nicholas Moore <krobar@xxxxxxxxxxxxx>
- Date: Tue, 18 Apr 2006 12:36:29 -0500
I'm getting an error in the application event log.
Domain Controller 1
Source: Userenv
EventID: 1030
User: NT Authority\System
Description: Windows cannot query for the list of Group Policy objects.
Check the event log for possible messages previously logged by the policy
engine that describes the reason for this.
Source: Userenv
EventID: 1058
User: NT Authority\System
Description: Windows cannot access the file gpt.ini for GPO
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=***,DC=co
m. The file must be present at the location
<\\domainname.com\sysvol\domainname\Policies\{31B2F340-016D-11D2-945F-00C04F
B984F9}\gpt.ini>. (Access is denied). Group Policy processing aborted.
I found the policy in Group Policy Management. When I clicked on the policy
an error came up that said "The permissions for the GPO in the SYSVOL folder
are inconsistent with those in Active Directory. It is recommended that
these permissions be consistent. To change the SYSVOL permissions to those
in Active Directory, click OK. It gives a link for further information.
http://support.microsoft.com/default.aspx?scid=kb;en-us;828760
In there it suggests that SP1 get installed on the server. Which is already
installed.
These errors have been going on for about a month now. They appeared to be
happening back in 11/05 but they stopped. But are back now.
Database Server/ Terminal Server
Source: Userenv
EvenID: 1053
User: NT Authority\System
Description: Windows cannot determine the user or computer name. (An
internal error has occurred.). Group Policy processing aborted.
The error only seems to happen at night. This server is running Windows 2003
server Enterprise Edition in Terminal Services Application mode. With SQL
2000 running as well. It's had this error since 4/6/06, before that it was
showing the following error
Source: Userenv
EventID: 1053
User: NT Authority\System
Description: Windows cannot determine the user or computer name. (The system
detected a possible attempt to compromise security. Please ensure that you
can contact the server that authenticated you.). Group Policy processing
aborted.
That error showed in the event log from 4/3/06 to 4/5/06.
There are 2 domain controllers for this domain. The second domain controller
is not getting any of these errors at all. What should I try next.
.
- Follow-Ups:
- Re: Group Policy Error
- From: John Lockie
- Re: Group Policy Error
- Prev by Date: Re: Permissions resetting in Blocked Inheritance OU's
- Next by Date: Tracking Users
- Previous by thread: Local Profiles and Logins
- Next by thread: Re: Group Policy Error
- Index(es):
Relevant Pages
|