Random GPO problem

[edie209]

I have just noticed that I am having a random GPO problem. It seems that sometimes the GPO is not applying allowing the user full access to the pc they are logged on to. But if they log off and log on again it can apply the GPO as it should do.

I have two domain controllers one has two errors in event viewer
Event ID 13 and Edvent ID 2089 (warning)

On the second domain controllerI have 3 errors Event ID 1030, 1058 and 2089. I had these errors back around March time and cured them but there must be another reason for them to come back.

This second DC hosts Exchange. I have thought about demoting the exchange server, but I understand that this will break exchange.

 

[edie209]

After spending the morning looking into this error I have I think found the problem.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 11/09/2007
Time: 17:47:00
User: NT AUTHORITY\SYSTEM
Computer: I13-01
Description:
Windows cannot access the file gpt.ini for GPO cn={7AFFBCDB-7598-40C9-B18D-82D173A27C39},cn=policies,cn=system,DC=school,DC=lea,DC=sch,DC=uk. The file must be present at the location <\\school.lea.sch.uk\SysVol\\\school.lea.sch.uk\Policies\{7AFFBCDB-7598-40C9-B18D-82D173A27C39}\gpt.ini>. (Configuration information could not be read from the domain controller, either because the machine is unavailable, or access has been denied. ). Group Policy processing aborted.