RE: USERENV Even 1030 error on Member Server



Hello Jared,

Thank you for posting in the SBS newsgroup.

According to your description, I understand that you received the error
message "Event Source: Userenv, Event ID: 1030" on the Windows 2003
Enterprise-based Member Server. If I have misunderstood your concern,
please don't hesitate to let me know.

To troubleshoot this issue, please perform the following questions and
steps:

1. This behavior occurs if the SMB signing settings for the Workstation
service and for the Server service contradict each other. When you
configure the domain controller in this way, the Workstation service on the
domain controller cannot connect to the domain controller's Sysvol share.
Therefore, you cannot start Group Policy snap-ins. Also, if SMB signing
policies are set by the default domain controller security policy, the
problem affects all the domain controllers on the network. Therefore, Group
Policy replication in the Active Directory directory service will fail, and
you will not be able to edit Group Policy to undo these settings.

To resolve this behavior, please refer to the below KB article:

839499 You cannot open file shares or Group Policy snap-ins when you
disable SMB signing for the Workstation or Server service on a domain
controller
http://support.microsoft.com/?id=839499

2. Please do the last windows update to the Windows 2003 Enterprise-based
Member Server.

3. Please check if the DNS Forward Lookup Zone for the Windows 2003
Enterprise-based Member Server has Dynamic Updates set to No. If so, please
enable Dynamic updates and disjoin/rejoin the Windows 2003 member server.

Additionally, you may refer to the following KB article:

832215 You receive event ID 1097 and event ID 1030 error events when you
http://support.microsoft.com/?id=832215

888943 Event 1030 and event 1058 may be logged, and you may not be able to
http://support.microsoft.com/?id=888943

I'm looking forward to your update. If you have any questions or concerns,
please do not hesitate to let me know. I am always happy to be of further
assistance.

Best regards,

Nathan Liu (MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>From: jaredea <blah@xxxxxxxx>
>Subject: USERENV Even 1030 error on Member Server
>Date: Wed, 22 Jun 2005 20:28:23 -0600
>Message-ID: <ov6kb112l40634dpjmbacg6bs7gecheb0f@xxxxxxx>
>X-Newsreader: Forte Agent 2.0/32.652
>MIME-Version: 1.0
>Content-Type: text/plain; charset=us-ascii
>Content-Transfer-Encoding: 7bit
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: prolook.dsl.xmission.com 166.70.40.67
>Lines: 1
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:129610
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>SERVER: WINDOWS SBS 2003 PREMIUM W/SP1
>MEMBER SERVER: WINDOWS 2003 SERVER ENTERPRISE W/SP1
>
>
>I'm getting errors with the USERENV...I had a similar problem on one
>of the XP Clients (userenv and netlogon errors link in this newsgroup
>that has turned into a conversation about security and posting
>ipconfig's)...but, i was able to fix it by changing the nic card...
>
>This problem has been far harder to fix on the member server...i've
>swapped about 5 different network cards through the puppy...
>
>I'm not getting the same errors as the XP Client (the NETLOGON error),
>just the userenv error which states:
>
>Event Type: Error
>Event Source: Userenv
>Event Category: None
>Event ID: 1030
>Date: 6/22/2005
>Time: 8:18:41 PM
>User: PLS2\administrator
>Computer: PRODEVSVR
>Description:
>Windows cannot query for the list of Group Policy objects. Check the
>event log for possible messages previously logged by the policy engine
>that describes the reason for this.
>
>
>I also get the following when i type RSOP.MSC in the RUN and click on
>the User Configuration (which has a red X on it) > PROPERTIES > Error
>Information:
>
>"Wednesday, June 22, 2005 7:06:15 PM
>
>Group Policy Infrastructure failed due to the error listed below.
>Overlapped I/O operation is in progress.
>
>Note: Due to the GP Core failure, none of the other Group Policy
>components processed their policy. Consequently, status information
>for the other components is not available.
>Additional Information:
>Windows cannot query for the list of Group Policy objects. Check the
>event log for possible messages previously logged by the policy engine
>that describes the reason for this."
>
>=============
>=============
>
> I've tried everything i've been able to get my hands on to see if i
>can fix this problem...all the error fixing items from microsoft i
>believe as well as EventID.net...
>
>This is driving me absolutly crazy...i've spent WAY too much time on
>trying to fix this and because several of the fixes need to be done on
>the SBS 2003 server as well as the member server i need to wait until
>everyone leaves...
>
>I feel like i'm just missing something simple...i know DNS is working
>- i can ping/nslookup, etc...i've changed cables, changed the switch,
>etc...
>
>any and all help would be appreciated...
>
>jared
>

.



Relevant Pages

  • Errors IN 2003
    ... windows 2000 domain. ... Windows cannot query for the list of Group Policy ... from Performance registry is the first DWORD in Data ... the 2003 server is a member server not a DC. ...
    (microsoft.public.windows.server.setup)
  • Re: applying settings to clients forcefully
    ... Yes it's member server of the infrasoft.lan domain and i am not using any terminal services of that machine, nor it's configured as terminal server. ... > Windows 2000 IP Configuration ... > Microsoft Windows Operating System Group Policy Result tool ...
    (microsoft.public.win2000.group_policy)
  • Re: What is best method for locking down WS
    ... You CAN remotely push out group policy for windows 2000 and XP, ... > have Active Directory we cannot control gpo's at the member server for all ... > are only allowed to access public folder on Member Server. ...
    (microsoft.public.win2000.security)
  • Re: Viewing Local Security Policy on Windows 2003 Member Server?
    ... Maybe I am doing this wrong, but I start MMC, Add-In Group Policy Object ... Editor, specify Local Machine, and Add. ... *local* security policy on a Windows 2003 member server. ... Windows 2000 secpol.msc used to show you both the local and effective ...
    (microsoft.public.windows.group_policy)
  • Re: GPO Not updating Version numer Mismatch
    ... Can you see the gpttmpl.inf file getting updated in SYSVOL on the PDCe when you make the change from the member server? ... if you make a change to another policy area in that GPO while on the member server (like Admin. ... Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at http://www.sdmsoftware.com/products.php ...
    (microsoft.public.windows.group_policy)