Windows cannot access the file gpt.ini for GPO

[krthompson11]

We upgraded all of the domain controllers in our forest to Windows 2003 in the last year. I recently went in to apply a group policy to block the install window for IE7 using their administrative template. The policy only seems to be applying to have of the child domain controllers.

I ran a query on all of my domain controllers to see where it was working and where it wasn't. I am getting the error below on various different group policies:

Windows cannot access the file gpt.ini for GPO CN={D25FE004-C698-4097-BB39-0E3ACD0BC90E},CN=Policies,CN=System,DC=DEN,DC=TVG,DC=LOCAL. The file must be present at the location <\\DEN.TVG.LOCAL\SysVol\DEN.TVG.LOCAL\Policies\{D25FE004-C698-4097-BB39-0E3ACD0BC90E}\gpt.ini>. (Access is denied. ). Group Policy processing aborted.

DFS and TCP/IP NetBIOS Helper is started on all of the servers.

Query Results
Forest Domain - Works on both DCs
Child Domain 1 - Works on both DCs
Child Domain 2 - Works on one DC but not the other DC
Child Domain 3 - Does not work on either DC

I found the following help document, but I'm not sure how to make this change, nor am I excited about messing in the ADSIedit mmc if I don't have to. Has anyone run into this problem and successfully fixed it? I'm pretty sure things are corrupt from upgrading to 2003, but I just don't know how to fix it.

 

[krthompson11]

Sorry. This is the fix I found...

http://support.microsoft.com/kb/896983/

 

[krthompson11]

I found this article that might shed some light on my problem...

http://support.microsoft.com/kb/839499

When I get to step 11, I cannot open the Domain Controller Security Policy.

Help! Not sure what to do from here.

 

[Blutch]

you will have to reset your default domain controller policy. It seems it is corrupt...

dcgpofix /targetC
enter Y when prompted

Hope this helps.