GPO doesn't get processed - USERENV 1030 trouble

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



This error is driving me crazy!

I have a small LAN consisting of XP SP2 PCs and a W2003 SBS Server. If
I log in as a specific user, my GPO settings do not get applied.
Instead I get a 1030 USERENV error on the XP machine (Windows cannot
query for the list of Group Policy objects. A message that describes
the reason for this was previously logged by the policy engine.) which
may or may not be accompanied by a 40961 SPNEGO error (The Security
System could not establish a secured connection with the server
ldap/poseidon.xxxx.local/xxxxxx.local@xxxxxxxxxxxx No authentication
protocol was available.)

If I logon as one of the other users the GP gets applied successfully
and none of the above errors occur. I have deleted the offending
profile from the local PC (not a roaming profile) and logged on as the
"trouble" user. The errors did not occur for the first 2 - 3 days and
GP applied OK, but suddenly they have made a re-appearance. Because
deleting the profile (and together all settings, mailboxes etc) is not
practical I haven't tried the same trick again.

I've also seen this error occur on the SBS machines, but the Event Log
on mine is clear. This is clearly a profile driven problem, but I
cannot figure out the reason.

Any help is greatly appreciated!

.



Relevant Pages

  • RE: Windows Explorer not responding
    ... Can you stop Windows Explorer process in task manager? ... Since this issue occurs start from installing a Printer on SBS Server. ... Create another new user profile to test ... click Hardware Profiles. ...
    (microsoft.public.windows.server.sbs)
  • RE: offline files for other computers
    ... SBS server and overwrite the old profiles in server side. ... Roaming Profiles is to make you have same desktop and other work ... Double-click your roam profile, change profile type from Roaming profile ... Open the Properties dialog box for your account by right-clicking the ...
    (microsoft.public.windows.server.sbs)
  • RE: R D C minimised windows / programs etc do not display on botto
    ... The SBS server as the domain controller should ... Use the Taskbar Repair Tool Plus! ... companies that are independent of Microsoft. ... You can rename old user profile and create a new one to test this ...
    (microsoft.public.windows.server.sbs)
  • Re: Awareness of Nottales scale relativity work
    ... reason :-) ... the rotation profile of thin disk galaxies ... understand the nuts and bolts of elliptical integrals that were first ... passed through a symbolic math package. ...
    (sci.physics.research)
  • Re: Use the Additional DC when PDC is down
    ... I have known users who have used the sysvol as a replication point, ... you mentioned I wouldn't recommend it and that is the reason I didn't in my ... > I also have 2 dcs in my home lan with a profile share on one and want ...
    (microsoft.public.win2000.active_directory)