millertime79
IS-IT--Management
Hi
After upgrading our Windows 2003 R1 Server to 2003 R2 we are now unable to create new gpo's or edit current ones.
I get the error message of Access Denied.
In the event log I am getting the following errors.
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 09/10/2007
Time: 2:04:32 PM
User: NT AUTHORITY\SYSTEM
Computer: GROUSE
Description:
Windows cannot access the file gpt.ini for GPO CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=MSS,DC=SD35,DC=BC,DC=CA. The file must be present at the location <\\MSS.SD35.BC.CA\sysvol\MSS.SD35.BC.CA\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini>. (The system cannot find the path specified. ). Group Policy processing aborted.
For more information, see Help and Support Center at
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 09/10/2007
Time: 2:04:32 PM
User: NT AUTHORITY\SYSTEM
Computer: GROUSE
Description:
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.
For more information, see Help and Support Center at
I have read some threads on similar issues but found non that can help me with this particular issue so it seems.
This server was until recently one of two DC's in the domain both 2003 R2 Servers.
I retired one of the servers from the DC role in an attempt to fix this issue in case the time stamp wasnt carrying over correctly.
The DC I retired was the second DC added to the domain so wasn't the schema.
I have checked that DNS is configured correctly.
If i click on start run and type in \\MSS.SD35.BC.CA\sysvol\MSS.SD35.BC.CA\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}
it opens the folder and I can see gpt.ini and the permissions appear to be correct.
I am getting no other errors on the server other than these errors.
This is my DHCP server aswell.
I also read a recormendation from another forum suggesting copying the Default GPO's for the Default Domain Policy and the Default Domain Controler Policy from a "NEW" R2 server, This fixed the problem for some people apparantley.
C:\Program Files\Support Tools>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : grouse
Primary Dns Suffix . . . . . . . : MSS.SD35.BC.CA
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : MSS.SD35.BC.CA
SD35.BC.CA
BC.CA
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-18-8B-1B-79-91
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.0.14
Subnet Mask . . . . . . . . . . . : 255.0.0.0
Default Gateway . . . . . . . . . : 10.0.0.1
DNS Servers . . . . . . . . . . . : 127.0.0.1
C:\Program Files\Support Tools>dcdiag
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\GROUSE
Starting test: Connectivity
......................... GROUSE passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\GROUSE
Starting test: Replications
......................... GROUSE passed test Replications
Starting test: NCSecDesc
......................... GROUSE passed test NCSecDesc
Starting test: NetLogons
......................... GROUSE passed test NetLogons
Starting test: Advertising
......................... GROUSE passed test Advertising
Starting test: KnowsOfRoleHolders
......................... GROUSE passed test KnowsOfRoleHolders
Starting test: RidManager
......................... GROUSE passed test RidManager
Starting test: MachineAccount
......................... GROUSE passed test MachineAccount
Starting test: Services
......................... GROUSE passed test Services
Starting test: ObjectsReplicated
......................... GROUSE passed test ObjectsReplicated
Starting test: frssysvol
......................... GROUSE passed test frssysvol
Starting test: frsevent
......................... GROUSE passed test frsevent
Starting test: kccevent
......................... GROUSE passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 09/13/2007 15:35:24
(Event String could not be retrieved)
......................... GROUSE failed test systemlog
Starting test: VerifyReferences
......................... GROUSE passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : MSS
Starting test: CrossRefValidation
......................... MSS passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... MSS passed test CheckSDRefDom
Running enterprise tests on : MSS.SD35.BC.CA
Starting test: Intersite
......................... MSS.SD35.BC.CA passed test Intersite
Starting test: FsmoCheck
......................... MSS.SD35.BC.CA passed test FsmoCheck
C:\Program Files\Support Tools>ipconfig /displaydns
Windows IP Configuration
crl.microsoft.com
----------------------------------------
Record Name . . . . . : crl.microsoft.com
Record Type . . . . . : 1
Time To Live . . . . : 1800
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 131.107.115.28
Record Name . . . . . : ns1.msft.net
Record Type . . . . . : 1
Time To Live . . . . : 1800
Data Length . . . . . : 4
Section . . . . . . . : Additional
A (Host) Record . . . : 207.68.160.190
Record Name . . . . . : ns2.msft.net
Record Type . . . . . : 1
Time To Live . . . . : 1800
Data Length . . . . . : 4
Section . . . . . . . : Additional
A (Host) Record . . . : 65.54.240.126
Record Name . . . . . : ns3.msft.net
Record Type . . . . . : 1
Time To Live . . . . : 1800
Data Length . . . . . : 4
Section . . . . . . . : Additional
A (Host) Record . . . : 213.199.161.77
Record Name . . . . . : ns4.msft.net
Record Type . . . . . : 1
Time To Live . . . . : 1800
Data Length . . . . . : 4
Section . . . . . . . : Additional
A (Host) Record . . . : 207.46.66.126
Record Name . . . . . : ns5.msft.net
Record Type . . . . . : 1
Time To Live . . . . : 1800
Data Length . . . . . : 4
Section . . . . . . . : Additional
A (Host) Record . . . : 65.55.238.126
1.0.0.127.in-addr.arpa
----------------------------------------
Record Name . . . . . : 1.0.0.127.in-addr.arpa.
Record Type . . . . . : 12
Time To Live . . . . : 0
Data Length . . . . . : 4
Section . . . . . . . : Answer
PTR Record . . . . . : localhost
vanderhoek
----------------------------------------
Record Name . . . . . : VANDERHOEK.MSS.SD35.BC.CA
Record Type . . . . . : 1
Time To Live . . . . : 190
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 10.0.2.57
208-01
----------------------------------------
Record Name . . . . . : 208-01.MSS.SD35.BC.CA
Record Type . . . . . : 1
Time To Live . . . . : 889
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 10.0.2.98
ns5.msft.net
----------------------------------------
Record Name . . . . . : ns5.msft.net
Record Type . . . . . : 1
Time To Live . . . . : 1800
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 65.55.238.126
secretary-3
----------------------------------------
Record Name . . . . . : SECRETARY-3.MSS.SD35.BC.CA
Record Type . . . . . : 1
Time To Live . . . . : 488
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 10.0.2.8
mail.sd35.bc.ca
----------------------------------------
Record Name . . . . . : mail.sd35.bc.ca
Record Type . . . . . : 1
Time To Live . . . . : 54697
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 142.33.220.205
ns3.msft.net
----------------------------------------
Record Name . . . . . : ns3.msft.net
Record Type . . . . . : 1
Time To Live . . . . : 1800
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 213.199.161.77
ns1.msft.net
----------------------------------------
Record Name . . . . . : ns1.msft.net
Record Type . . . . . : 1
Time To Live . . . . : 1800
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 207.68.160.190
ns4.msft.net
----------------------------------------
Record Name . . . . . : ns4.msft.net
Record Type . . . . . : 1
Time To Live . . . . : 1800
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 207.46.66.126
170f00f3-931b-4cfc-b2f3-73c47c82e667.
C:\Program Files\Support Tools>
I hope someone can help me with this issue.
Short of reinstalling the whole Domain I cannot see how to resolve this issue. THIS IS NOT AN OPTION!
Thanks for all your help
Derek
After upgrading our Windows 2003 R1 Server to 2003 R2 we are now unable to create new gpo's or edit current ones.
I get the error message of Access Denied.
In the event log I am getting the following errors.
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 09/10/2007
Time: 2:04:32 PM
User: NT AUTHORITY\SYSTEM
Computer: GROUSE
Description:
Windows cannot access the file gpt.ini for GPO CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=MSS,DC=SD35,DC=BC,DC=CA. The file must be present at the location <\\MSS.SD35.BC.CA\sysvol\MSS.SD35.BC.CA\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini>. (The system cannot find the path specified. ). Group Policy processing aborted.
For more information, see Help and Support Center at
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 09/10/2007
Time: 2:04:32 PM
User: NT AUTHORITY\SYSTEM
Computer: GROUSE
Description:
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.
For more information, see Help and Support Center at
I have read some threads on similar issues but found non that can help me with this particular issue so it seems.
This server was until recently one of two DC's in the domain both 2003 R2 Servers.
I retired one of the servers from the DC role in an attempt to fix this issue in case the time stamp wasnt carrying over correctly.
The DC I retired was the second DC added to the domain so wasn't the schema.
I have checked that DNS is configured correctly.
If i click on start run and type in \\MSS.SD35.BC.CA\sysvol\MSS.SD35.BC.CA\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}
it opens the folder and I can see gpt.ini and the permissions appear to be correct.
I am getting no other errors on the server other than these errors.
This is my DHCP server aswell.
I also read a recormendation from another forum suggesting copying the Default GPO's for the Default Domain Policy and the Default Domain Controler Policy from a "NEW" R2 server, This fixed the problem for some people apparantley.
C:\Program Files\Support Tools>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : grouse
Primary Dns Suffix . . . . . . . : MSS.SD35.BC.CA
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : MSS.SD35.BC.CA
SD35.BC.CA
BC.CA
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-18-8B-1B-79-91
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.0.14
Subnet Mask . . . . . . . . . . . : 255.0.0.0
Default Gateway . . . . . . . . . : 10.0.0.1
DNS Servers . . . . . . . . . . . : 127.0.0.1
C:\Program Files\Support Tools>dcdiag
Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\GROUSE
Starting test: Connectivity
......................... GROUSE passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\GROUSE
Starting test: Replications
......................... GROUSE passed test Replications
Starting test: NCSecDesc
......................... GROUSE passed test NCSecDesc
Starting test: NetLogons
......................... GROUSE passed test NetLogons
Starting test: Advertising
......................... GROUSE passed test Advertising
Starting test: KnowsOfRoleHolders
......................... GROUSE passed test KnowsOfRoleHolders
Starting test: RidManager
......................... GROUSE passed test RidManager
Starting test: MachineAccount
......................... GROUSE passed test MachineAccount
Starting test: Services
......................... GROUSE passed test Services
Starting test: ObjectsReplicated
......................... GROUSE passed test ObjectsReplicated
Starting test: frssysvol
......................... GROUSE passed test frssysvol
Starting test: frsevent
......................... GROUSE passed test frsevent
Starting test: kccevent
......................... GROUSE passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x00000457
Time Generated: 09/13/2007 15:35:24
(Event String could not be retrieved)
......................... GROUSE failed test systemlog
Starting test: VerifyReferences
......................... GROUSE passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : MSS
Starting test: CrossRefValidation
......................... MSS passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... MSS passed test CheckSDRefDom
Running enterprise tests on : MSS.SD35.BC.CA
Starting test: Intersite
......................... MSS.SD35.BC.CA passed test Intersite
Starting test: FsmoCheck
......................... MSS.SD35.BC.CA passed test FsmoCheck
C:\Program Files\Support Tools>ipconfig /displaydns
Windows IP Configuration
crl.microsoft.com
----------------------------------------
Record Name . . . . . : crl.microsoft.com
Record Type . . . . . : 1
Time To Live . . . . : 1800
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 131.107.115.28
Record Name . . . . . : ns1.msft.net
Record Type . . . . . : 1
Time To Live . . . . : 1800
Data Length . . . . . : 4
Section . . . . . . . : Additional
A (Host) Record . . . : 207.68.160.190
Record Name . . . . . : ns2.msft.net
Record Type . . . . . : 1
Time To Live . . . . : 1800
Data Length . . . . . : 4
Section . . . . . . . : Additional
A (Host) Record . . . : 65.54.240.126
Record Name . . . . . : ns3.msft.net
Record Type . . . . . : 1
Time To Live . . . . : 1800
Data Length . . . . . : 4
Section . . . . . . . : Additional
A (Host) Record . . . : 213.199.161.77
Record Name . . . . . : ns4.msft.net
Record Type . . . . . : 1
Time To Live . . . . : 1800
Data Length . . . . . : 4
Section . . . . . . . : Additional
A (Host) Record . . . : 207.46.66.126
Record Name . . . . . : ns5.msft.net
Record Type . . . . . : 1
Time To Live . . . . : 1800
Data Length . . . . . : 4
Section . . . . . . . : Additional
A (Host) Record . . . : 65.55.238.126
1.0.0.127.in-addr.arpa
----------------------------------------
Record Name . . . . . : 1.0.0.127.in-addr.arpa.
Record Type . . . . . : 12
Time To Live . . . . : 0
Data Length . . . . . : 4
Section . . . . . . . : Answer
PTR Record . . . . . : localhost
vanderhoek
----------------------------------------
Record Name . . . . . : VANDERHOEK.MSS.SD35.BC.CA
Record Type . . . . . : 1
Time To Live . . . . : 190
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 10.0.2.57
208-01
----------------------------------------
Record Name . . . . . : 208-01.MSS.SD35.BC.CA
Record Type . . . . . : 1
Time To Live . . . . : 889
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 10.0.2.98
ns5.msft.net
----------------------------------------
Record Name . . . . . : ns5.msft.net
Record Type . . . . . : 1
Time To Live . . . . : 1800
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 65.55.238.126
secretary-3
----------------------------------------
Record Name . . . . . : SECRETARY-3.MSS.SD35.BC.CA
Record Type . . . . . : 1
Time To Live . . . . : 488
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 10.0.2.8
mail.sd35.bc.ca
----------------------------------------
Record Name . . . . . : mail.sd35.bc.ca
Record Type . . . . . : 1
Time To Live . . . . : 54697
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 142.33.220.205
ns3.msft.net
----------------------------------------
Record Name . . . . . : ns3.msft.net
Record Type . . . . . : 1
Time To Live . . . . : 1800
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 213.199.161.77
ns1.msft.net
----------------------------------------
Record Name . . . . . : ns1.msft.net
Record Type . . . . . : 1
Time To Live . . . . : 1800
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 207.68.160.190
ns4.msft.net
----------------------------------------
Record Name . . . . . : ns4.msft.net
Record Type . . . . . : 1
Time To Live . . . . : 1800
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 207.46.66.126
170f00f3-931b-4cfc-b2f3-73c47c82e667.
C:\Program Files\Support Tools>
I hope someone can help me with this issue.
Short of reinstalling the whole Domain I cannot see how to resolve this issue. THIS IS NOT AN OPTION!
Thanks for all your help
Derek
