RE: GPO problems



Hi Simon

Thank you for posting in SBS newsgroup.

I am sorry for the delayed response due to weekend. Please understand that
the newsgroups are staffed weekdays by Microsoft Support professionals to
answer your systems and applications questions. Your understanding is
greatly appreciated!

>From the description, I understand you got error message when you added
some change to the GP for proxy settings and you received the event 1030.
If I have misunderstood your concerns, please do not hesitate to let me
know.

Based on my experience, this issue may be caused by the following problem:

1. DNS settings and network properties on the server and client computers.
For example: DNS Server address is not configured correctly on the affected
computer.
2. This issue may occur if SMB signing is enabled.
3. Server Message Block signing settings on the client computers.
4. The TCP/IP NetBIOS Helper service, the Net Logon service, and the Remote
Procedure Call (RPC) service are not started on all computers.
5. Distributed File System (DFS) service is not enabled on all computers.
6. The contents and the permissions of the Sysvol folder.
7. The Bypass traverse checking right is not granted to the required groups.
8. The domain controllers are in a journal wrap state.
9. Run the dfsutil /purgemupcache command.

To check the issue, I suggest that you firstly check if the internal DNS
Service of SBS is configured to be the DNS server on the problematic client
computer.

Then please disable the SMB signing. For detailed steps, please refer to:

839499 You cannot open file shares or Group Policy snap-ins when you disable
http://support.microsoft.com/?id=839499

To check the other settings, please refer to the steps in the following
article:

887303 Applying Group Policy causes Userenv errors and events to occur on
your
http://support.microsoft.com/?id=887303

842804 Group Policy processing does not work and events 1030 and 1058 are
http://support.microsoft.com/?id=842804

888943 Event 1030 and event 1058 may be logged, and you may not be able to
http://support.microsoft.com/?id=888943

314494 Group policies are not applied the way you expect; "Event ID 1058"
and
http://support.microsoft.com/?id=314494

We can also try to disable the Windows Firewall on the problematic
computers to see if it helps.

In addition, please make sure you have configured SBS as following:

1. Leave the Default Gateway of the internal NIC blank.
2. Configure both the internal NIC and the external NIC to use the internal
DNS Service as the DNS Server.
3. On the DNS Server, create the DNS Forwarder to forward the external DNS
resolution requests to the ISP's DNS server. See:

323380 How to configure DNS for Internet access in Windows Server 2003
http://support.microsoft.com/?id=323380

4. Strictly followed the instructions in the KB article below to run CEICW:

825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

If the problem still persists, please help me collect the following
information:

1. Are there any other error messages on event log?
2. Does the issue occur on windows XP SP2 only or other edition?
3. Get the Ipconfig/all result on problematic clients and SBS.
4. Get the Userenv.log and send it to me at v-crinal@xxxxxxxxxxxxxx

If you have any questions or concerns related to this issue, please do let
me know.

I appreciate your time and look forward to hearing from you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Newbie" <newbie@xxxxxxxxxxx>
| Subject: GPO problems
| Date: Fri, 2 Dec 2005 22:29:18 -0500
|| Newsgroups: microsoft.public.windows.server.sbs
| |
| Hi,
|
| I recently added some changed to the GP for proxy settings, I can't get
the
| information to some computers and I'm getting the following error in the
| userenv.log:
|
| USERENV(260.c78) 22:27:02:564 ProcessGPOs: GetNetworkName failed with
10091.
| USERENV(260.d34) 22:27:02:596 ProcessGPOs: GetGPOInfo failed.
| USERENV(260.c78) 22:27:03:908 SetRegistryValue: DeleteAllvalues finished
for
| SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit.
| bRegOpSuccess = TRUE, bLoggingOk = TRUE.
|
| In Event Viewer, I get this:
|
| Event Type: Error
| Event Source: Userenv
| Event Category: None
| Event ID: 1030
| Date: 02-Dec-2005
| Time: 10:24:59 PM
| User: DOMAIN\Simon
| Computer: SERVER1
| Description:
| Windows cannot query for the list of Group Policy objects. A message that
| describes the reason for this was previously logged by the policy engine.
|
| For more information, see Help and Support Center at
| http://go.microsoft.com/fwlink/events.asp.
|
| Please let me know how I can troubleshoot this? I'm running SBS 2003 SP1.
|
| Thanks,
| Simon
|
|
|

.



Relevant Pages

  • Re: Problem with connect computer wizard
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Please double-check the default application pool in IIS. ...
    (microsoft.public.windows.server.sbs)
  • RE: Fax monitor incoming + outgoing calls?
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... When opening a new thread via the web interface, we recommend you check the ...
    (microsoft.public.windows.server.sbs)
  • Re: pop & smtp
    ... Please change the users apply to the SBS Internet Access rule ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Please help me collect ISA info and firewall log for analyze. ...
    (microsoft.public.windows.server.sbs)
  • Re: DNS and email problem
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... our remote outgoing mail server as discussed, Comcast ...
    (microsoft.public.windows.server.sbs)
  • RE: fax not sending
    ... Thanks for updates. ... it did not relate to any problem on your fax or SBS side. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)

Loading