RE: DC Policy

Hi,

Thanks for posting here.

From your post, my understanding on this issue is: you find the Userenv
error 1030 on the server. If I am off base, please feel free to let me know.

According to my research, the Event 1030 issue might be caused by many
factors from various root causes. I therefore would appreciate it if you
could help gather some information so we can further analyze the issue.

Run the following command on one domain controller to check all the GPOs:

Gpotool.exe /verbose > c:\GPOtool.log

HINT: To download the GPOTOOL utility, please visit the following MS
website:
http://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-
96ee-b18c4790cffd&DisplayLang=en

Please send the GPOtool.log to me at v-stezhu@xxxxxxxxxxxxx with the
subject of this post.

Below is a general guideline to troubleshoot this Event 1030 issue. Please
let me know whether all the steps have already been conducted or not.

1. Check the DNS settings and network properties on the servers and client
computers

2. Check the SMB signing settings on the client computers.

3. Make sure that the TCP/IP NetBIOS Helper service is started on all
computers

4. Make sure that Distributed File System (DFS) is enabled on all computers

5. Check the contents and the permissions of the Sysvol folder.

6. Run GPOTool.exes to check all the GPOs on DCs.

7. Run the "dfsutil /PurgeMupCache" command.

Related KB Articles:
========
839499 You cannot open file shares or Group Policy snap-ins when you
disable SMB signing for the Workstation or Server service on a domain
controller
http://support.microsoft.com/?id=839499

834649 Client computers record Event ID 1030 and Event ID 1058 when DFS is
not started on a Windows 2000-based domain contro
http://support.microsoft.com/?id=834649

842804 Group Policy processing does not work and events 1030 and 1058 are
logged in the Application log of a domain controller
http://support.microsoft.com/?id=842804

Thanks and have a nice day.

Best Regards,

Steven Zhu
MCSE
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
======================================================
PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were
updated on February 14, 2006.? Please complete a re-registration process
by entering the secure code mmpng06 when prompted. Once you have
entered the secure code mmpng06, you will be able to update your profile
and access the partner newsgroups.
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
======================================================







.

Relevant Pages

  • Re: The name could not be resolved
    ... On a domain controller, ... question, and check Exchange General to see what server they're on, and you ... >> Its possible that the Global Catalog server that Outlook is hitting to ... Connect via Active Directory Users and Computers and connect ...
    (microsoft.public.exchange.admin)
  • Re: error code is 80004005 and error code 1603
    ... I would like to have the logs on Site Server to check the issue, ... PLEASE NOTE the newsgroup SECURE CODE and PASSWORD will be updated at 9:00 ... Newsgroups: microsoft.public.sms.admin ... I checked your suggestion on 5 computers but on reg keys that you ...
    (microsoft.public.sms.admin)
  • Re: "DNS name does not exist."(error code 0x0000232B RCODE_NAME_ERROR)
    ... Here is a little of what is happening with the server. ... of my network of three computers. ... The following error occurred when DNS was queried for the service ... The DNS SRV records required to locate a domain controller for the ...
    (microsoft.public.windows.server.active_directory)
  • Re: IS Active Directory a part of a Domain Controller or independent ?
    ... A Domain Controller ist a Server which can authorize Users an Computers ... for the managers and give the Group "Manager" fullcontrol on this Folder. ...
    (microsoft.public.windowsxp.network_web)
  • Re: NT domain and 2000 domain - strange problem.
    ... need dns [AD domain controller only]to find a domain controller in their domain while ... NT/W9X computers still rely on wins to find a domain controller, ... server you are shutting down provides some networking service to computers in the W2K ... Policy and logon events in the Local Security Policy of servers providing shares. ...
    (microsoft.public.win2000.networking)