RE: Userenv error 1030 cannot apply group policy Options

Hello Bob,

Thank you for posting here.

According to your description, I understand that you get event 1030 about
Userenv and the GPO does not apply correct. If I have misunderstood the
problem, please don't hesitate to let me know.

Based on my research, for event 1030, I suggest that we do the following
preliminary action plans:

1. On the SBS Server, go to command prompt, type the following command:
Dfsutil /pktflush
Dfsutil /purgemupcache

2. Check the SBS network configuration

On SBS server: (If 2 NIC installed)

External NIC:
IP: assigned by your ISP or your hardware router
Gateway: your ISP or your Hardware router IP
DNS: SBS INTERNAL NIC IP as the only entry

Internal NIC:
IP: Fixed IP
Gateway: None
DNS: SBS INTERNAL NIC IP as the only entry

3. Make sure that the TCP/IP NetBIOS Helper service is started on the SBS
Server. To verify that the TCP/IP NetBIOS Helper service is running on a
Windows Server 2003-based computer, follow these steps:
a. Click "Start", point to "Administrative Tools", and then click
"Services".
b. In the "Services" list, click "TCP/IP NetBIOS Helper". Verify that the
value under the "Status" column is "Started". Verify that the value under
the "Startup Type" column is "Automatic".

Note: Please also make sure that the Distributed File System service is
started.

If the "Status" or the "Startup Type" values are not correct, follow these
steps:
a) Right-click "TCP/IP NetBIOS Helper", and then click "Properties".
b) In the "Startup type" list, click "Automatic".
c) In the "Service status" area, if the service is not started, click
"Start".
d) Click "OK".

4. Since the problem (SBS restart) can be caused by various possibilities,
I strongly recommend you install last Antivirus software on SBS and all
clients and do a full scan on all of them.

5. Please install last service pack and update on SBS and all clients.

6. I suggest you refer to the following KB articles for more detailed
information:

Event 1030 and event 1058 may be logged, and you may not be able to start
the Group Policy snap-in on your Windows Small Business Server 2003 computer
http://support.microsoft.com/?id=888943

Group Policy processing does not work and events 1030 and 1058 are logged
in the Application log of a domain controller
http://support.microsoft.com/default.aspx?scid=kb;[LN];842804

Event ID 1053 and 1058 appear in the Application log after you upgrade to
Windows 2000 Server or Windows Server 2003 with Active Directory
http://support.microsoft.com/?id=883271

Meanwhile, for the 2 A records for the "(same as parent folder)", please
right-clicked on Forward Lookup Zones->SBS_name, and then selected Reload,
or delete the invalid record:

make sure that each computer can resolve the IP address of the domain. To
test this, run the command "ping domainname.local", where domainname.local
is the name of the domain that the computer is a member of. The computer
should try to ping the IP address of one of the domain controllers on the
network. If the computer cannot resolve this name, or if it tries to ping
the wrong IP address, make sure that the forward lookup zone for the domain
contains valid "(same as parent folder)" Host (A) records. To do so, follow
these steps:

1. On one of the internal DNS servers, click Start, point to Programs or
All Programs, point to Administrative Tools, and then click DNS.
2. Expand the server object, expand the Forward Lookup Zones folder, and
then click the forward lookup zone for the domain.
3. Look for Host (A) records with the name "(same as parent folder)".
4. If a Host (A) record with this name does not exist, use these steps to
create one:

1) On the Action menu, click New Host.
2) In the "IP address" text box, type the IP address of the domain
controller''s local network adapter.
3) Leave the Name box empty, click Create Associated PTR Record, and then
click Add Host.
4) When you receive the "(same as parent folder) is not a valid host name.
Are you sure you want to add this record?" message, click Yes.

5. If one or more "(same as parent folder)" Host (A) records contains an
invalid IP address, double-click the invalid record to change the IP
address, or delete the invalid record. To delete a record, right-click the
record, and then click Delete. If the DNS server is a domain controller
that is also a Routing and Remote Access server, see the following KB
article:

292822 Name resolution and connectivity issues on a Routing and Remote
Access Server that also runs DNS or WINS
http://support.microsoft.com/?id=292822

6. If you add, delete, or modify DNS records, run the command "ipconfig
/flushdns" on all affected computers.

If we cannot resolve the issue after we perform the above steps, please
kindly help me collect some information for further investigation:

1. Does this issue happen on all client computers?

2. What are editions of client computer and SBS?

3. Gather MPS report on client computer
I suggest you download and run the MPS Report tool from the following link
and then send the generated CAB file to my mailbox v-terliu@xxxxxxxxxxxxx
for further investigation so that we can find what the root cause is:

http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
15706/MPSRPT_NETWORK.EXE

Overview of the Microsoft Configuration Capture Utility (MPS_REPORTS)
http://support.microsoft.com/default.aspx?scid=kb;en-us;818742

If you have any questions please do not hesitate to let me know. I am glad
to be of assistance.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: bob.smith.0182@xxxxxxxxx
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: Userenv error 1030 cannot apply group policy Options
| Date: Mon, 25 Jun 2007 17:02:39 -0700
| Organization: http://groups.google.com
| Lines: 34
| Message-ID: <1182816159.232907.17220@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| NNTP-Posting-Host: 220.245.180.131
| Mime-Version: 1.0
| Content-Type: text/plain; charset="iso-8859-1"
| X-Trace: posting.google.com 1182816159 11196 127.0.0.1 (26 Jun 2007
00:02:39 GMT)
| X-Complaints-To: groups-abuse@xxxxxxxxxx
| NNTP-Posting-Date: Tue, 26 Jun 2007 00:02:39 +0000 (UTC)
| User-Agent: G2/1.0
| X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;
..NET CLR 1.1.4322; .NET CLR 2.0.50727),gzip(gfe),gzip(gfe)
| X-HTTP-Via: 1.1 bri-nxg-pr2.tpgi.com.au:3128 (squid/2.5.STABLE12)
| Complaints-To: groups-abuse@xxxxxxxxxx
| Injection-Info: z28g2000prd.googlegroups.com;
posting-host=220.245.180.131;
| posting-account=wFYR4gwAAAA4F5_mBx7TA-uugU3cdUOR
| Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS01.phx.gbl!msrtrans!
msrn-in!newshub.sdsu.edu!postnews.google.com!z28g2000prd.googlegroups.com!no
t-for-mail
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:46218
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi All,
|
| After following the instructions on Kevin's blog (http://msmvps.com/
| blogs/kwsupport/archive/2006/12/29/clearing-up-event-id-1030.aspx) and
| applied the Reg patch to a client to test, Event Viewer SceCli reports
| that the "Security policy in the Group policy objects has been applied
| successfully." HOWEVER, I have a GPO that contains settings in
| Internet Explorer Maintenance that utilises Content Ratings service in
| IE to block use of certain websites not to be used in company time
| (i.e. like myspace etc). That does not seem to be loading, along with
| a host of other GPO's. Any idea as to why this would be happening?
|
| After that i proceeded to run through the Microsoft document again (KB
| 887303) and when I was running through DNS I recieved a potentially
| suspect error:
|
| Our IP Address scheme is 150.1.1.x (Server is also DHCP etc)
| Therefore, Server IP address is a manually configured (Static IP) at
| 150.1.1.1
| All clients are then leased IP addresses from 150.1.1.x on the DHCP
| Server.
|
| When i was in the Forward Lookup Zone\Domain.Local\, i found two (same
| as parent folder) Host (A), DNS Records that pointed to two different
| IP Addresses, one of them 150.1.1.1 (Our Server and should be right
| according to the KB Doc), but the other one came up as 150.1.1.0 both
| of the FQDN's pointed to our Domain.
|
| Should this be right? otherwise what could be the problem?
|
| Thanks a lot for your help.
|
| Any ideas why? Thx
|
|

.

Relevant Pages

  • RE: Fax monitor incoming + outgoing calls?
    ... problem between the client computer and the SBS server. ... Client is using the internal IP address of the SBS server as the ... To the folder redirection GPO issue: ...
    (microsoft.public.windows.server.sbs)
  • Re: DNS Issue
    ... DHCP server and DHCP client services are stopped and disabled on the server. ... DNS: same as SBS NIC IP with public DNS as secondary -- removed public DNS ...
    (microsoft.public.windows.server.sbs)
  • RE: (Very) Slow browsing server shares - Net Work Monitor shows ca
    ... If this issue happen only when browse shared folders on SBS from one XP ... client computer, this will be a client side error. ... click to check the "Hide All Microsoft Services" ... Digitally sign communications (if server ...
    (microsoft.public.windows.server.sbs)
  • RE: No Client or Server Desktop Access Through RWW SBS 2003 SP2
    ... internal client Remote Desktop via RWW. ... Please perform the steps on the SBS and internal client computers: ... Click Remote tab, tick Enable Remote Desktop on this computer ... On the SBS server, click Start, click Run, type "regedit" (without the ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS2003 - Cannot restore GPO following Article 888943
    ... As to the second DNS setting, the system worked quite well prior to ... forwarders on the SBS server DNS. ... >another installation of SBS 2003? ... >This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
Loading