RE: Event ID 1065 & 1030

Hi Travis,

Thank you for posting here.

I recommend you to try the User Profile Hive Cleanup utility on the problematic clients and servers; then
check whether the problem persists.

User Profile Hive Cleanup Service
http://www.microsoft.com/downloads/details.aspx?FamilyID=1b286e6d-8912-4e18-b570-42470e2f3582
&displaylang=en

If it persists, I recommend you to post the problem to another thread to keep this one clean.

Thank you for your understanding and we look forward to working with you here again.

Bill Peng
MCSE 2000, MCDBA
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so that others may learn and
benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>Thread-Topic: Event ID 1065 & 1030
>thread-index: AcVB2wd0i8nUzOA2RGyB3cBSJvga+Q==
>X-WBNR-Posting-Host: 63.161.157.6
>From: "=?Utf-8?B?VHJhdmlzIFdhbGxhY2U=?=" <TravisWallace@xxxxxxxxxxxxxxxxxxxxxxxxx>
>References: <4E1469E1-B19F-4951-A4A5-0F4F4A29F4D0@xxxxxxxxxxxxx> <Gvc2t2XQFHA.3012
@TK2MSFTNGXA02.phx.gbl>
>Subject: RE: Event ID 1065 & 1030
>Date: Fri, 15 Apr 2005 09:49:02 -0700
>Lines: 118
>Message-ID: <3DF904CE-B768-473D-A29A-8D7C0098ACB5@xxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:163015
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Bill and Chris,
>
>I am having the exact same errors on all of my workstations. I followed
>Bill's directions, and it did not stop the errors (at least for me). The
>policy that is causing my problems is the SBS Windows Firewall policy. I have
>even turned it off using GPMC, and the 1065 error is still showing up with
>it's GUID.
>This may or may not mean anything, but I also tried running Group Policy
>Results from GPMC and am getting "Access Denied" messages, no mater which
>workstation I try to run it on. All of this I am doing from the server,
>logged in as a Domain Admin.
>
>Please let me know if any other information would be helpful in solving this
>issue, as I would like to resolve it. Thanks in advance.
>"Bill Peng [MSFT]" wrote:
>
>> Hi Chris,
>>
>> Thank you for posting here.
>>
>> To isolate the root cause of the issue, please let me know whether this problem happen on another
computer with the same domain admin
>> account logged in. What about another domain admin account on the same member computer?
>>
>> Then, please follow these steps to check whether you have appropriate permission for the GPO.
>>
>> 1. Open GPMC.
>> 2. Go to Forest/Domains/Domain.ext/Group Policy Objects.
>> 3. Click the first GPO (by default, the "Default Domain Controllers Policy") and click Details in the right
pane.
>> 4. Check whether the "Unique ID" for this GPO is "{7C8F81B4-4C45-428E-940E-5C1CEB47A6F8}".
>> 5. Repeat step 3 and 4 to figure out which GPO caused the problem.
>> 6. Then, select the GPO and click Delegation tab in the right pane.
>> 7. Click Advanced button and make sure that you have the "Read" and "Apply Group Policy" permission.
>>
>> [Note] Please double-check that you're a member of the "Domain Admins" group.
>>
>> I hope the above info helps and I look forward to your update.
>>
>> Bill Peng
>> MCSE 2000, MCDBA
>> Microsoft CSS Online Newsgroup Support
>>
>> Get Secure! - www.microsoft.com/security
>> =====================================================
>> When responding to posts, please "Reply to Group" via your newsreader so that others may learn and
benefit from your issue.
>> =====================================================
>> This posting is provided "AS IS" with no warranties, and confers no rights.
>>
>>
>> --------------------
>> >Thread-Topic: Event ID 1065 & 1030
>> >thread-index: AcVBFD7xtSTovi6ORA+Q+yzINhbMgA==
>> >X-WBNR-Posting-Host: 68.16.148.11
>> >From: "=?Utf-8?B?Q2hyaXMgTmFnbGU=?=" <ChrisNagle@xxxxxxxxxxxxxxxxxxxxxxxxx>
>> >Subject: Event ID 1065 & 1030
>> >Date: Thu, 14 Apr 2005 10:06:06 -0700
>> >Lines: 42
>> >Message-ID: <4E1469E1-B19F-4951-A4A5-0F4F4A29F4D0@xxxxxxxxxxxxx>
>> >MIME-Version: 1.0
>> >Content-Type: text/plain;
>> > charset="Utf-8"
>> >Content-Transfer-Encoding: 7bit
>> >X-Newsreader: Microsoft CDO for Windows 2000
>> >Content-Class: urn:content-classes:message
>> >Importance: normal
>> >Priority: normal
>> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>> >Newsgroups: microsoft.public.windows.server.sbs
>> >Path: TK2MSFTNGXA01.phx.gbl
>> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:111240
>> >NNTP-Posting-Host: tk2msftngxa03.phx.gbl 10.40.2.157
>> >X-Tomcat-NG: microsoft.public.windows.server.sbs
>> >
>> >I am receiving the folloowing two errors.
>> >
>> >Event Type: Error
>> >Event Source: Userenv
>> >Event Category: None
>> >Event ID: 1065
>> >Date: 4/14/2005
>> >Time: 12:53:48 PM
>> >User: NT AUTHORITY\SYSTEM
>> >Computer: TECH
>> >Description:
>> >Windows cannot perform filter check for Group Policy object
>> >CN={7C8F81B4-4C45-428E-940E-5C1CEB47A6F8},CN=Policies,CN=System,DC=cartac,DC=local. Group
Policy processing aborted.
>> >
>> >and
>> >
>> >Event Type: Error
>> >Event Source: Userenv
>> >Event Category: None
>> >Event ID: 1030
>> >Date: 4/14/2005
>> >Time: 12:53:48 PM
>> >User: NT AUTHORITY\SYSTEM
>> >Computer: TECH
>> >Description:
>> >Windows cannot query for the list of Group Policy objects. A message that
>> >describes the reason for this was previously logged by the policy engine.
>> >
>> >I realized this when I could manage another computer on the domain but I
>> >could not look at the Event logs from another computer on the domain. I get
>> >an Access Denied error. My account is the Domain admin account. I also have
>> >noticed that this only occurs on my computer.
>> >
>> >I have deleted the my profile/reconnected to the domain (using
>> >http://server/connectcomputer). Everything went fine. In fact I can do almost
>> >everthing else (traverse the domain/connect to shares, etc.)
>> >
>> >Any Ideas?
>> >
>> >
>> >P.S. My machine is XP SP2 on a SBS2003 and ISA 2000 domain
>> >
>> >
>>
>>
>>
>


.