RE: USERENV error - Group Policy

Did you ever figure this out? I'm getting the same problem on a single
SBS2003 R2. 1030 and 1058 errors are logged every 5 minutes, and I can't
access the SYSVOL share via \\domain.local\SYSVOL but I CAN access via
\\server\SYSVOL.

of course, to make things worse this problem is intermitent and pops up and
goes away without me doing anything... adding to the frustration. I can't
make the problem appear either (like you can by running GPUPDATE)

I've tried all the KBs I can find about this. I suspect it's linked to FRS
and/or DFS.

"GiG" wrote:

Ah! I had high hopes for this thread! I almost thought it was going to solve
it for me! I have this exact same problem and its driving me nuts. This DC
isnt multi-homed and the DNS settings are OK. Only this machine is having
issues accessing GPOs. Argh!
--
GiG


"Nadia" wrote:

Ok, finally got it.

The offending server is a multihomed machine, and although the preferred DNS
server entries were set on 3 of the NIC's, one was set incorrectly (I must
have missed that first time round). They've now all been set correctly to
local DNS servers, and everything works fine with the correct permissions.

I'm assuming this requirement for local DNS servers rather than external
(internet) DNS servers is so that required services (for example Kerberos)
can find their way round active directory and dfs shares?

Thanks for all the help, I've kept the progress updated in this post as I
hope it will save someone else a headache looking for the answer! :)



"Nadia" wrote:

I'm getting the following error on two of my domain member

servers (both win2k3sp1):

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 6.12.2006
Time: 9:01:57
User: NT AUTHORITY\SYSTEM
Computer: RIVER03
Description:
Windows cannot access the file gpt.ini for GPO

CN={33B07064-3C8C-4337-BD6A-3425D3FB0B18},CN=Policies,CN=System,DC=river,DC=local.
The file must be present at the location
<\\river.local\SysVol\river.local\Policies\{33B07064-3C8C-4337-BD6A-3425D3FB0B18}\gpt.ini>. (Access is denied. ). Group Policy processing aborted.

I've checked numerous settings as follows:

- that the folder is actually accessible, and the file actually exists
- registry settings on these client machines pertaining to SMB signing:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters
enablesecuritysignature 1
requiresecuritysignature 0
- SMB signing group policy at
Computer Configuration/Windows Settings/Security Settings/Local
Policies/Security Options
- DNS settings
- Permissions on the SYSVOL share
- NetBIOS helper service


Everything appears to be in order, but I'm still getting the USERENV error
either every 1.5 hours or so, or when I force a GP update.

Please help!


.

Relevant Pages

  • Re: Cannot find server or DNS Error
    ... I have two dns servers that our centrally located in one location.....We ... Between the two locations a router and the router has also the ISP connection? ... Ethernet adapter Wireless Network Connection: ... To check your connection settings, click the Tools menu, and then ...
    (microsoft.public.windows.server.dns)
  • RE: USERENV error - Group Policy
    ... isnt multi-homed and the DNS settings are OK. ... local DNS servers, and everything works fine with the correct permissions. ... registry settings on these client machines pertaining to SMB signing: ... NetBIOS helper service ...
    (microsoft.public.windows.server.active_directory)
  • Re: 2003 AD DNS Issue
    ... Even if you choose forest wide it will only replicate to the Win2k3 ... but I'm not sure how many Win2k DNS servers you ... And by changing these settings at any time can ... > it was suppose to be set as a secondary zone so I changed ...
    (microsoft.public.windows.server.dns)
  • Re: DNS not working. Help!
    ... Open DNS, properties from Server, tab Forwarders, put in the DNS servers ... Restart DNS Server service. ... > then migrate the data and as much settings as possible, ... > The other issue but not really big one is with the user profile and ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Windows SBS 2003 SP1 /w ISA Server 2004
    ... Have you run the CEICW to configure your network settings? ... Are you able to open Group Policy snap-ins such as the Domain Controller ... Make sure that the antivirus is not scanning the sysvol folder. ...
    (microsoft.public.windows.server.sbs)