RE: GPO Problem, WSUS the cause?



Hello U101440,

Thank you for posting in the SBS newsgroup.

I am sorry for the delay in responding due to weekend, thanks for the
understanding.

Please note the partner managed newsgroups are staffed weekdays by
Microsoft Support professionals. Our goal is to provide a one business day
response to all posts.

For time critical issues (not business down), we encourage you to contact
CSS directly for more immediate assistance:
International Support (non-US/Canada):
http://support.microsoft.com/common/international.aspx

US and Canada:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone

To continue working with me in the newsgroups, please see the following:

In order to narrow down the problem, please help to gather the following
information. In addition, please understand that if the problem is narrowed
down to a WSUS issue, you may need to also create a support instance in
WSUS newsgroup. Thanks for the understanding.

1. As for 1030 & 1058 errors, please kindly refer to the following
information:

842804 Group Policy processing does not work and events 1030 and 1058 are
logged in the Application log of a domain controller
http://support.microsoft.com/?id=842804

This problem may occur if the winlogon process tries to process group
policies before other components are running. The hotfix that this article
describes adds more logic to enhance the default behavior of winlogon and
of the workstation services.

However, there are several other scenarios that may also cause this
problem. Make sure that the following components are started and correctly
configured before you apply this hotfix:
o Netlogon and DFS services are started.
o Domain controllers have the read and apply rights to the Domain
Controllers Policy.
o NTFS file system permissions and share permissions are set correctly on
the Sysvol share.
o DNS entries are correct for the domain controllers.

2. Please also refer to the following KB article if it is the case:

Applying Group Policy causes Userenv errors and events to occur on your
computers that are running Windows Server 2003, Windows XP, or Windows 2000
http://support.microsoft.com/?id=887303

You cannot open file shares or Group Policy snap-ins when you disable SMB
signing for the Workstation or Server service on a domain controller
http://support.microsoft.com/?id=839499

3. Make sure that you can access and copy all the files from
\\domaincontroller\sysvol\domain\Policies on this XP computer successfully
and the \\domaincontroller\sysvol\domain\Policies\<Class ID>\gpt.ini file
is NOT missing.

If the issue persists, please help me collect the following information for
further analysis:

1. Please run 'eventvwr.exe' (without the quotation marks) on the
command prompt on the SBS 2003 Server and client computers, and check if
there are any error messages about this issue, then paste the full context
in your reply.

2. Gather the Group Policy result for a problematic client computer:

a. Click Start->Run, type GPMC.MSC and then click OK.

b. When the Group Policy Management console opens, right click on "Group
Policy Results" and choose "Group Policy Results Wizard".

c. Click Next.

d. Choose "Another computer" and then type one of the problematic computer
and click Next.

e. Click Next.

f. Click Next to start the progress.

g. Click Finsh.

h. The results should be generated and you can view it in GPMC. Then right
click the report node and choose Save Report. Save the report to a file and
then attach it in your reply.

I appreciate your time and cooperation. If anything is unclear, please feel
free to let me know. I am looking forward to hearing from you.

Have a nice day!

Best regards,

Nathan Liu (MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.





--------------------
>Thread-Topic: GPO Problem, WSUS the cause?
>thread-index: AcYdlCry1gMk3q8GS9qiFx3mVp7JqA==
>X-WBNR-Posting-Host: 84.19.231.70
>From: "=?Utf-8?B?dTEwMTQ0MA==?=" <u101440@xxxxxxxxxxxxxxxxxxxxxxxxx>
>Subject: GPO Problem, WSUS the cause?
>Date: Thu, 19 Jan 2006 23:36:03 -0800
>Lines: 20
>Message-ID: <4A16096B-73F6-4E3E-B4B4-3D8487651D50@xxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:238135
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>I'm having a problem with one of my GPOs. I'm getting the dredded 1030 &
1058
>errors on my workstations but I can traverse to the SYSVOL directory (and
>sub-folders) okay.
>
>During the trace of the fault I've found that it revolves around the GPO
>used to map my clients to the WSUS server. At the moment I have only
enabled
>the following parameters in the GPO:
>
>Configure Automatic Updates: 4 (Auto download and schedule the download)
>Specify intranet Microsoft update service location: http://sbsserv:8530
>
>The error in the GPO states that I do not have access to the gpt.ini file
>for this GPO. I've disbaled the original GPO and created a brand new one
only
>for it to fail as well. Must be something I'm missing.
>
>Can anyone shed some light on this one? Do I have the correct address? My
>clients are updating via WSUS and the registery on each WorkStation does
have
>the address within it and yet I get these errors on all my WorkStations.
>
>Any advice appreciated.
>

.



Relevant Pages

  • Re: My Documents redirect stopped working on one user profile.
    ... my understanding is that ALL DC's 'send out' Group Policy. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Expand OU you want to configure Folder Redirection and then ...
    (microsoft.public.windows.server.sbs)
  • RE: Users adding printers
    ... Where is a wonderful article on how to install a printer which is useful ... Deploying Printers to Users or Computers by using Group Policy Print ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Some PCs no longer picking up group policise set by SBS
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... >> I understand that the Group Policy does not being applied to some of your ... Do those problematic client workstations locate at the same OU ...
    (microsoft.public.windows.server.sbs)
  • Re: Intermittant GPO failure to apply
    ... Windows XP. ... If so, if you create a new group policy on SBS 2003 domain, does the issue ... Produced By Microsoft MimeOLE V6.00.3790.1830 ... |> Welcome to our SBS newsgroup. ...
    (microsoft.public.windows.server.sbs)
  • Re: extending data partitions & my documents redirection
    ... > Microsoft CSS Online Newsgroup Support ... > This newsgroup only focuses on SBS technical issues. ... >>> Document folders to the default shared for users on the Small Business ... Go to Group Policy Management\Forest\Domains\Yourdomain.local\Group ...
    (microsoft.public.windows.server.sbs)

Loading