RE: DNS Issues causing 1030 and 1058 errors

HI Mdube,

Welcome to SBS newsgroup.

Issue description:
=============

I understand that sometime you will encounter the 1030 and 1058 error on
SBS domain.

Analyzing and suggestion:
=============

Although you have tried many of the suggestion you refer to, please also
try my steps below, it is also important to our troubleshooting:

1. Examine the DNS settings and network properties on the servers and
client computers, make sure that there is only one DNS entries in the
TCP/IP properties, it need to point to the SBS internal NIC. Add the ISP
DNS server as forward DNS server when run CEICW. Refer to the KB article
below for more information:

825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

2. Examine the Server Message Block signing settings on the client
computers. You can refer to the KB article below for SMB signing:
3. Make sure that the Remote Procedure Call (RPC) service are started on
all computers.
4. Examine the contents and the permissions of the Sysvol folder. Make sure
that the domain administrator local system services and network services
have full control permission.

5. 8. Run the dfsutil /purgemupcache command.
6. We have some known issue on that NICs, You can refer to the KB article
below to disable the media sense on your Intel NIC to see if the issue can
be cleared.

326152 PRB: Cannot Connect to Domain Controller and Cannot Apply Group
Policy
http://support.microsoft.com/?id=326152

239924 How to disable Media Sense for TCP/IP in Windows
http://support.microsoft.com/?id=239924


More info:
============

887303 Applying Group Policy causes Userenv errors and events to occur on
your
http://support.microsoft.com/?id=887303

842804:Group Policy processing does not work and events 1030 and 1058 are
http://support.microsoft.com/?id=842804


I appreciate your understanding on this issue, please feel free to post
back the results. I am glad to be of further assistance.



Best regards,

Charles Yang (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: "mdube" <mattdube@xxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: DNS Issues causing 1030 and 1058 errors
| Date: 29 Nov 2005 09:45:55 -0800
| Organization: http://groups.google.com
| Lines: 90
| Message-ID: <1133286355.732675.80770@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| NNTP-Posting-Host: 66.178.235.66
| Mime-Version: 1.0
| Content-Type: text/plain; charset="iso-8859-1"
| X-Trace: posting.google.com 1133286360 24839 127.0.0.1 (29 Nov 2005
17:46:00 GMT)
| X-Complaints-To: groups-abuse@xxxxxxxxxx
| NNTP-Posting-Date: Tue, 29 Nov 2005 17:46:00 +0000 (UTC)
| User-Agent: G2/0.2
| X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
rv:1.7.12) Gecko/20050915 Firefox/1.0.7,gzip(gfe),gzip(gfe)
| Complaints-To: groups-abuse@xxxxxxxxxx
| Injection-Info: g14g2000cwa.googlegroups.com; posting-host=66.178.235.66;
| posting-account=IkO48g0AAABV_7kfJ_M938uwc3QkgZjY
| Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!border2.nntp.dca.giganews.com!border1.nntp.dca.giganews.com!nntp.gigan
ews.com!postnews.google.com!g14g2000cwa.googlegroups.com!not-for-mail
| Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:226391
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hello,
|
| On our SBS 2k3 server, we get two errors in the event log. I believe
| the server was once error-free but the problems have been going on for
| as far back as the event log goes (a month and a half). I have copied
| the errors below and detailed the symptoms and troubleshooting. Please
| help!
|
| Event Type: Error
| Event Source: Userenv
| Event Category: None
| Event ID: 1030
| Date: 11/29/2005
| Time: 10:48:24 AM
| User: NT AUTHORITY\SYSTEM
| Computer: COMPANY-DC1
| Description:
| Windows cannot query for the list of Group Policy objects. Check the
| event log for possible messages previously logged by the policy engine
| that describes the reason for this.
|
| For more information, see Help and Support Center at
| http://go.microsoft.com/fwlink/events.asp.
|
| Event Type: Error
| Event Source: Userenv
| Event Category: None
| Event ID: 1058
| Date: 11/29/2005
| Time: 10:48:24 AM
| User: NT AUTHORITY\SYSTEM
| Computer: COMPANY-DC1
| Description:
| Windows cannot access the file gpt.ini for GPO
|
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=companyna
me,DC=local.
| The file must be present at the location
|
<\\companyname.local\sysvol\companyname.local\Policies\{31B2F340-016D-11D2-9
45F-00C04FB984F9}\gpt.ini>.
| (Configuration information could not be read from the domain
| controller, either because the machine is unavailable, or access has
| been denied. ). Group Policy processing aborted.
|
| For more information, see Help and Support Center at
| http://go.microsoft.com/fwlink/events.asp.
|
| Despite these errors, group policies do take affect, probably because
| these errors do not occur continually, but only when the DNS is in a
| "bad state" or something like that. When DNS is "bad," these errors
| occur every 5 minutes. Internet access, file sharing, printing,
| logins, Exchange, etc. are unaffected. The errors stop when I ipconfig
| /flushdns at the server console, which has lead me to believe the
| problem is DNS related. The errors begin reoccuring in the system
| event log randomly between 20 mins and 4 hrs later.
|
| Additional problems:
| NETDIAG fails on DNS test with the following errors:
| [WARNING] DNS entries for this DC are not registered correctly on DNS
| Server [10.x.x.x]. Please wait 30 minutes for DNS server replication.
| [FAILED] No DNS servers have DNS entries for this DC registered.
| All other tests pass, and the 10.x.x.x ip address is the listed is the
| ip address of the server.
|
| The \\companyname.local\sysvol share in unaccessable when the machine
| is in the "bad dns" state, even from the server console.
| \\servername\sysvol is accessable, however.
|
| Users who try to view permissions on shared files are not able to
| resolve SIDs into names without using /flushdns on their workstations.
|
| Troubleshooting steps already done:
| Verified server is configured correctly according to KB 816587 and KB
| 816106 (SRV RR records, global catalog, etc), and everything checks out
| okay.
| TCP Netbios Helper, DNS Client, and DNS Server services are all
| automatic and started.
| Netbios is enabled for both NICs.
| SYSVOL share does appear when 'net shares' is run.
| DCDIAG passes all tests except the few it skips.
| DFS appears to be running, but there are no shares in DFS manager (we
| don't use DFS other than what is used by default)
|
| Considerations:
| This server is the only server on the network, and it handles Active
| Directory, DC and netlogon stuff, DNS, DHCP, file serving, Exchange,
| and RRAS
| The server is multi-homed (2 network cards), one internal (to switch
| and network) and one external (to ISP-provided router)
|
| Thanks so much for help.
| -Matt
|
|

.

Relevant Pages
Loading