| Author | Messages | |
dyelton
Posts:0
 | | 05/10/2007 7:51 AM |
| Hi all, before I give MS a call I thought I would see what you
guys had to say about my problem and hopefully keep me from calling MS. I’ve
been searching for the past couple of days on my problem but haven’t
found a fix yet, perhaps it is something I’m missing.
We have just one site with two Windows 2003 SP2 DC’s.
One DC as a clear application and system event log that shows no errors for
months on end but our secondary DC is chock full of Userenv 1030 and 1058
errors. When I turned on Userenv logging I noticed that the following
error was given:
USERENV(168.9c4) 07:08:56:255 GetGPOInfo: Local GPO's
gpt.ini is not accessible, assuming default state.
USERENV(168.9c4) 07:08:56:255 GetGPOInfo: Leaving with 1
At the end of the log it states the following:
USERENV(168.9c4) 07:08:56:412 LeaveCriticalPolicySection:
Critical section 0xb08 has been released.
USERENV(168.9c4) 07:08:56:412 ProcessGPOs: Computer Group Policy
has been applied.
USERENV(168.9c4) 07:08:56:427 ProcessGPOs: Leaving with 1.
USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx:
Entering with timeout 600000 and flags 0x0
USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx:
Machine critical section has been claimed. Handle = 0xb08
USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx:
Leaving successfully.
It seems that the Userenv 1030 and 1058 errors also show up on
clients (Windows XP SP2). I had thought that it may be a time sync issue
but I don’t think that is it now. I sync the primary DC with
time.windows.com and all clients are served by that time server as well through
DHCP.
One note that should be mentioned is when I reboot the primary
DC (the one without errors in the event logs) I can login immediately after
reboot it seems, but on my secondary DC (one with the errors) I have to wait a
couple of minutes else it tells me that the domain controller could not be
found. I have the GPO record enabled that says to wait for network before
processing group policy. Additionally the two DC’s are on identical
servers with the same network card drivers, etc.
I believe DNS has been setup correctly and external DNS
addresses are only mentioned in the forwarding sections for the two DC’s
(the two DC’s are also the two DNS servers for the domain).
Any ideas of what I could try next? | | | |
| neilruston1
Posts:0
| | 05/10/2007 8:03 AM |
| v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
I seem to remember that the following t.
shooting steps helped me in the past:
Ipconfig /flushdns
Dfsutil /spcflush
Dfsutil /pktflush
Execute the above on the offending DC.
neil
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On
Behalf Of Donavon Yelton
Sent: 10 May 2007 12:51
To: ActiveDir
Subject: [ActiveDir] Userenv 1030
& 1058 errors on just one DC
Hi all, before I
give MS a call I thought I would see what you guys had to say about my problem
and hopefully keep me from calling MS. I’ve been searching for the
past couple of days on my problem but haven’t found a fix yet, perhaps it
is something I’m missing.
We have just one
site with two Windows 2003 SP2 DC’s. One DC as a clear application
and system event log that shows no errors for months on end but our secondary
DC is chock full of Userenv 1030 and 1058 errors. When I turned on
Userenv logging I noticed that the following error was given:
USERENV(168.9c4)
07:08:56:255 GetGPOInfo: Local GPO's gpt.ini is not accessible, assuming
default state.
USERENV(168.9c4)
07:08:56:255 GetGPOInfo: Leaving with 1
At the end of the
log it states the following:
USERENV(168.9c4)
07:08:56:412 LeaveCriticalPolicySection: Critical section 0xb08 has been
released.
USERENV(168.9c4)
07:08:56:412 ProcessGPOs: Computer Group Policy has been applied.
USERENV(168.9c4)
07:08:56:427 ProcessGPOs: Leaving with 1.
USERENV(168.9c4)
07:08:56:427 EnterCriticalPolicySectionEx: Entering with timeout 600000 and
flags 0x0
USERENV(168.9c4)
07:08:56:427 EnterCriticalPolicySectionEx: Machine critical section has been claimed.
Handle = 0xb08
USERENV(168.9c4)
07:08:56:427 EnterCriticalPolicySectionEx: Leaving successfully.
It seems that the
Userenv 1030 and 1058 errors also show up on clients (Windows XP SP2). I
had thought that it may be a time sync issue but I don’t think that is it
now. I sync the primary DC with time.windows.com and all clients are
served by that time server as well through DHCP.
One note that should
be mentioned is when I reboot the primary DC (the one without errors in the
event logs) I can login immediately after reboot it seems, but on my secondary
DC (one with the errors) I have to wait a couple of minutes else it tells me
that the domain controller could not be found. I have the GPO record
enabled that says to wait for network before processing group policy.
Additionally the two DC’s are on identical servers with the same network
card drivers, etc.
I believe DNS has
been setup correctly and external DNS addresses are only mentioned in the
forwarding sections for the two DC’s (the two DC’s are also the two
DNS servers for the domain).
Any ideas of what I
could try next?
This e-mail and any attachments are confidential and intended solely
for the addressee and may also be privileged or exempt from disclosure
under applicable law. If you are not the addressee, or have received
this e-mail in error, please notify the sender immediately, delete it
from your system and do not copy, disclose or otherwise act upon any
part of this e-mail or its attachments
Internet communications are not guaranteed to be secure or virus-free
The Barclays Group does not accept responsibility for any loss arising
from unauthorised access to, or interference with, any Internet
communications by any third party, or from the transmission of any
viruses. Replies to this e-mail may be monitored by the Barclays Group
for operational or business reasons
Any opinion or other information in this e-mail or its attachments
that does not relate to the business of the Barclays Group is personal
to the sender and is not given or endorsed by the Barclays Group
Barclays Bank PLC.Registered in England and Wales (registered no. 1026167)
Registered Office: 1 Churchill Place, London E14 5HP, United Kingdom
Barclays Bank PLC is authorised and regulated by the Financial Services Authority. | | | |
| dyelton
Posts:0
| | 05/10/2007 8:07 AM |
| v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
Unfortunately the errors are still there on the next run of
gpupdate.
Donavon
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Ruston, Neil :
Barclays Wealth
Sent: Thursday, May 10, 2007 8:03 AM
To: ActiveDir
Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
I seem to remember that the following t. shooting steps helped me
in the past:
Ipconfig /flushdns
Dfsutil /spcflush
Dfsutil /pktflush
Execute the above on the offending DC.
neil
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Donavon Yelton
Sent: 10 May 2007 12:51
To: ActiveDir
Subject: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
Hi all, before I give MS a call I thought I would see what you
guys had to say about my problem and hopefully keep me from calling MS.
I’ve been searching for the past couple of days on my problem but haven’t found
a fix yet, perhaps it is something I’m missing.
We have just one site with two Windows 2003 SP2 DC’s. One
DC as a clear application and system event log that shows no errors for months
on end but our secondary DC is chock full of Userenv 1030 and 1058
errors. When I turned on Userenv logging I noticed that the following
error was given:
USERENV(168.9c4) 07:08:56:255 GetGPOInfo: Local GPO's
gpt.ini is not accessible, assuming default state.
USERENV(168.9c4) 07:08:56:255 GetGPOInfo: Leaving with 1
At the end of the log it states the following:
USERENV(168.9c4) 07:08:56:412 LeaveCriticalPolicySection:
Critical section 0xb08 has been released.
USERENV(168.9c4) 07:08:56:412 ProcessGPOs: Computer Group Policy
has been applied.
USERENV(168.9c4) 07:08:56:427 ProcessGPOs: Leaving with 1.
USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx:
Entering with timeout 600000 and flags 0x0
USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx: Machine
critical section has been claimed. Handle = 0xb08
USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx:
Leaving successfully.
It seems that the Userenv 1030 and 1058 errors also show up on
clients (Windows XP SP2). I had thought that it may be a time sync issue
but I don’t think that is it now. I sync the primary DC with
time.windows.com and all clients are served by that time server as well through
DHCP.
One note that should be mentioned is when I reboot the primary
DC (the one without errors in the event logs) I can login immediately after
reboot it seems, but on my secondary DC (one with the errors) I have to wait a
couple of minutes else it tells me that the domain controller could not be
found. I have the GPO record enabled that says to wait for network before
processing group policy. Additionally the two DC’s are on identical
servers with the same network card drivers, etc.
I believe DNS has been setup correctly and external DNS
addresses are only mentioned in the forwarding sections for the two DC’s (the
two DC’s are also the two DNS servers for the domain).
Any ideas of what I could try next?
This e-mail and any attachments are confidential and intended solely
for the addressee and may also be privileged or exempt from disclosure
under applicable law. If you are not the addressee, or have received
this e-mail in error, please notify the sender immediately, delete it
from your system and do not copy, disclose or otherwise act upon any
part of this e-mail or its attachments
Internet communications are not guaranteed to be secure or virus-free
The Barclays Group does not accept responsibility for any loss arising
from unauthorised access to, or interference with, any Internet
communications by any third party, or from the transmission of any
viruses. Replies to this e-mail may be monitored by the Barclays Group
for operational or business reasons
Any opinion or other information in this e-mail or its attachments
that does not relate to the business of the Barclays Group is personal
to the sender and is not given or endorsed by the Barclays Group
Barclays Bank PLC.Registered in England and Wales (registered no. 1026167)
Registered Office: 1 Churchill Place, London E14 5HP, United Kingdom
Barclays Bank PLC is authorised and regulated by the Financial Services
Authority. | | | |
| neilruston1
Posts:0
| | 05/10/2007 8:11 AM |
| v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
st1\:*{behavior:url(#default#ieooui) }
Various MS articles exist, including: http://support.microsoft.com/kb/842804
This mentions dfsutil /purgeMUPcache too
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On
Behalf Of Donavon Yelton
Sent: 10 May 2007 13:07
To: ActiveDir
Subject: RE: [ActiveDir] Userenv
1030 & 1058 errors on just one DC
Unfortunately the
errors are still there on the next run of gpupdate.
Donavon
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On
Behalf Of Ruston,
Neil : Barclays Wealth
Sent: Thursday, May 10, 2007 8:03
AM
To: ActiveDir
Subject: RE: [ActiveDir] Userenv
1030 & 1058 errors on just one DC
I seem to remember that the following t.
shooting steps helped me in the past:
Ipconfig /flushdns
Dfsutil /spcflush
Dfsutil /pktflush
Execute the above on the offending DC.
neil
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On
Behalf Of Donavon Yelton
Sent: 10 May 2007 12:51
To: ActiveDir
Subject: [ActiveDir] Userenv 1030
& 1058 errors on just one DC
Hi all, before I
give MS a call I thought I would see what you guys had to say about my problem
and hopefully keep me from calling MS. I’ve been searching for the
past couple of days on my problem but haven’t found a fix yet, perhaps it
is something I’m missing.
We have just one
site with two Windows 2003 SP2 DC’s. One DC as a clear application
and system event log that shows no errors for months on end but our secondary
DC is chock full of Userenv 1030 and 1058 errors. When I turned on
Userenv logging I noticed that the following error was given:
USERENV(168.9c4)
07:08:56:255 GetGPOInfo: Local GPO's gpt.ini is not accessible, assuming
default state.
USERENV(168.9c4)
07:08:56:255 GetGPOInfo: Leaving with 1
At the end of the
log it states the following:
USERENV(168.9c4)
07:08:56:412 LeaveCriticalPolicySection: Critical section 0xb08 has been
released.
USERENV(168.9c4)
07:08:56:412 ProcessGPOs: Computer Group Policy has been applied.
USERENV(168.9c4)
07:08:56:427 ProcessGPOs: Leaving with 1.
USERENV(168.9c4)
07:08:56:427 EnterCriticalPolicySectionEx: Entering with timeout 600000 and
flags 0x0
USERENV(168.9c4)
07:08:56:427 EnterCriticalPolicySectionEx: Machine critical section has been claimed.
Handle = 0xb08
USERENV(168.9c4)
07:08:56:427 EnterCriticalPolicySectionEx: Leaving successfully.
It seems that the
Userenv 1030 and 1058 errors also show up on clients (Windows XP SP2). I
had thought that it may be a time sync issue but I don’t think that is it
now. I sync the primary DC with time.windows.com and all clients are
served by that time server as well through DHCP.
One note that should
be mentioned is when I reboot the primary DC (the one without errors in the
event logs) I can login immediately after reboot it seems, but on my secondary
DC (one with the errors) I have to wait a couple of minutes else it tells me
that the domain controller could not be found. I have the GPO record
enabled that says to wait for network before processing group policy.
Additionally the two DC’s are on identical servers with the same network
card drivers, etc.
I believe DNS has
been setup correctly and external DNS addresses are only mentioned in the
forwarding sections for the two DC’s (the two DC’s are also the two
DNS servers for the domain).
Any ideas of what I
could try next?
This e-mail and any attachments are confidential and intended solely
for the addressee and may also be privileged or exempt from disclosure
under applicable law. If you are not the addressee, or have received
this e-mail in error, please notify the sender immediately, delete it
from your system and do not copy, disclose or otherwise act upon any
part of this e-mail or its attachments
Internet communications are not guaranteed to be secure or virus-free
The Barclays Group does not accept responsibility for any loss arising
from unauthorised access to, or interference with, any Internet
communications by any third party, or from the transmission of any
viruses. Replies to this e-mail may be monitored by the Barclays Group
for operational or business reasons
Any opinion or other information in this e-mail or its attachments
that does not relate to the business of the Barclays Group is personal
to the sender and is not given or endorsed by the Barclays Group
Barclays Bank PLC.Registered in England
and Wales
(registered no. 1026167)
Registered Office: 1 Churchill Place, London
E14 5HP, United
Kingdom
Barclays Bank PLC is authorised and regulated by the Financial Services
Authority.
This e-mail and any attachments are confidential and intended solely
for the addressee and may also be privileged or exempt from disclosure
under applicable law. If you are not the addressee, or have received
this e-mail in error, please notify the sender immediately, delete it
from your system and do not copy, disclose or otherwise act upon any
part of this e-mail or its attachments
Internet communications are not guaranteed to be secure or virus-free
The Barclays Group does not accept responsibility for any loss arising
from unauthorised access to, or interference with, any Internet
communications by any third party, or from the transmission of any
viruses. Replies to this e-mail may be monitored by the Barclays Group
for operational or business reasons
Any opinion or other information in this e-mail or its attachments
that does not relate to the business of the Barclays Group is personal
to the sender and is not given or endorsed by the Barclays Group
Barclays Bank PLC.Registered in England and Wales (registered no. 1026167)
Registered Office: 1 Churchill Place, London E14 5HP, United Kingdom
Barclays Bank PLC is authorised and regulated by the Financial Services Authority. | | | |
| dyelton
Posts:0
| | 05/10/2007 11:26 AM |
| v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
It seems that running dfsutil /PurgeMupCache works (at least so
far) but the kb article states it is only a temporary solution and that the
hotfix should be applied. I called MS to obtain the hotfix but was told that
it doesn’t apply to SP2 of Win2k3. So now I appear to have a temporary fix but
no long-term solution available. At least I don’t reboot DC’s very often so it
isn’t a huge deal I suppose. I’ll keep an eye on it to see if it shows any more
1030 and 1058 userenv errors in the logs but they should have showed back up by
now if that temporary fix didn’t work.
Thanks for all the help, but if anyone has a more permanent
solution to try (short of the hotfix mentioned in this kb article since I’m
using SP2 and it apparently doesn’t apply according to MS) I would be grateful!
Donavon
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Ruston, Neil :
Barclays Wealth
Sent: Thursday, May 10, 2007 8:12 AM
To: ActiveDir
Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
Various MS articles exist, including: http://support.microsoft.com/kb/842804
This mentions dfsutil /purgeMUPcache too
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Donavon Yelton
Sent: 10 May 2007 13:07
To: ActiveDir
Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
Unfortunately the errors are still there on the next run of
gpupdate.
Donavon
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Ruston, Neil :
Barclays Wealth
Sent: Thursday, May 10, 2007 8:03 AM
To: ActiveDir
Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
I seem to remember that the following t. shooting steps helped me
in the past:
Ipconfig /flushdns
Dfsutil /spcflush
Dfsutil /pktflush
Execute the above on the offending DC.
neil
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Donavon Yelton
Sent: 10 May 2007 12:51
To: ActiveDir
Subject: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
Hi all, before I give MS a call I thought I would see what you
guys had to say about my problem and hopefully keep me from calling MS.
I’ve been searching for the past couple of days on my problem but haven’t found
a fix yet, perhaps it is something I’m missing.
We have just one site with two Windows 2003 SP2 DC’s. One
DC as a clear application and system event log that shows no errors for months
on end but our secondary DC is chock full of Userenv 1030 and 1058
errors. When I turned on Userenv logging I noticed that the following
error was given:
USERENV(168.9c4) 07:08:56:255 GetGPOInfo: Local GPO's
gpt.ini is not accessible, assuming default state.
USERENV(168.9c4) 07:08:56:255 GetGPOInfo: Leaving with 1
At the end of the log it states the following:
USERENV(168.9c4) 07:08:56:412 LeaveCriticalPolicySection:
Critical section 0xb08 has been released.
USERENV(168.9c4) 07:08:56:412 ProcessGPOs: Computer Group Policy
has been applied.
USERENV(168.9c4) 07:08:56:427 ProcessGPOs: Leaving with 1.
USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx:
Entering with timeout 600000 and flags 0x0
USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx:
Machine critical section has been claimed. Handle = 0xb08
USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx:
Leaving successfully.
It seems that the Userenv 1030 and 1058 errors also show up on
clients (Windows XP SP2). I had thought that it may be a time sync issue
but I don’t think that is it now. I sync the primary DC with
time.windows.com and all clients are served by that time server as well through
DHCP.
One note that should be mentioned is when I reboot the primary
DC (the one without errors in the event logs) I can login immediately after
reboot it seems, but on my secondary DC (one with the errors) I have to wait a
couple of minutes else it tells me that the domain controller could not be
found. I have the GPO record enabled that says to wait for network before
processing group policy. Additionally the two DC’s are on identical
servers with the same network card drivers, etc.
I believe DNS has been setup correctly and external DNS
addresses are only mentioned in the forwarding sections for the two DC’s (the
two DC’s are also the two DNS servers for the domain).
Any ideas of what I could try next?
This e-mail and any attachments are confidential and intended solely
for the addressee and may also be privileged or exempt from disclosure
under applicable law. If you are not the addressee, or have received
this e-mail in error, please notify the sender immediately, delete it
from your system and do not copy, disclose or otherwise act upon any
part of this e-mail or its attachments
Internet communications are not guaranteed to be secure or virus-free
The Barclays Group does not accept responsibility for any loss arising
from unauthorised access to, or interference with, any Internet
communications by any third party, or from the transmission of any
viruses. Replies to this e-mail may be monitored by the Barclays Group
for operational or business reasons
Any opinion or other information in this e-mail or its attachments
that does not relate to the business of the Barclays Group is personal
to the sender and is not given or endorsed by the Barclays Group
Barclays Bank PLC.Registered in England and Wales (registered no. 1026167)
Registered Office: 1 Churchill Place, London E14 5HP, United Kingdom
Barclays Bank PLC is authorised and regulated by the Financial Services
Authority.
This e-mail and any attachments are confidential and intended solely
for the addressee and may also be privileged or exempt from disclosure
under applicable law. If you are not the addressee, or have received
this e-mail in error, please notify the sender immediately, delete it
from your system and do not copy, disclose or otherwise act upon any
part of this e-mail or its attachments
Internet communications are not guaranteed to be secure or virus-free
The Barclays Group does not accept responsibility for any loss arising
from unauthorised access to, or interference with, any Internet
communications by any third party, or from the transmission of any
viruses. Replies to this e-mail may be monitored by the Barclays Group
for operational or business reasons
Any opinion or other information in this e-mail or its attachments
that does not relate to the business of the Barclays Group is personal
to the sender and is not given or endorsed by the Barclays Group
Barclays Bank PLC.Registered in England and Wales (registered no. 1026167)
Registered Office: 1 Churchill Place, London E14 5HP, United Kingdom
Barclays Bank PLC is authorised and regulated by the Financial Services
Authority. | | | |
| uyousuf
Posts:0
| | 05/10/2007 11:38 AM |
| v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
Occasionally I have found that running “control keymgr.dll
“ in run, and deleting any saved domain passwords helps, however that
usually is a case on a client XP machine rather than DC.
Also, if you run the gpupdate /force from command line, does the
1030/1058 still show up in event viewer? What is the text of the two errors?
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Donavon Yelton
Sent: Thursday, May 10, 2007 11:27 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
It seems that running dfsutil /PurgeMupCache works (at least so
far) but the kb article states it is only a temporary solution and that the
hotfix should be applied. I called MS to obtain the hotfix but was told
that it doesn’t apply to SP2 of Win2k3. So now I appear to have a
temporary fix but no long-term solution available. At least I don’t
reboot DC’s very often so it isn’t a huge deal I suppose.
I’ll keep an eye on it to see if it shows any more 1030 and 1058 userenv
errors in the logs but they should have showed back up by now if that temporary
fix didn’t work.
Thanks for all the help, but if anyone has a more permanent
solution to try (short of the hotfix mentioned in this kb article since
I’m using SP2 and it apparently doesn’t apply according to MS) I
would be grateful!
Donavon
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Ruston, Neil :
Barclays Wealth
Sent: Thursday, May 10, 2007 8:12 AM
To: ActiveDir
Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
Various MS articles exist, including: http://support.microsoft.com/kb/842804
This mentions dfsutil /purgeMUPcache too
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Donavon Yelton
Sent: 10 May 2007 13:07
To: ActiveDir
Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
Unfortunately the errors are still there on the next run of
gpupdate.
Donavon
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Ruston, Neil :
Barclays Wealth
Sent: Thursday, May 10, 2007 8:03 AM
To: ActiveDir
Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
I seem to remember that the following t. shooting steps helped me
in the past:
Ipconfig /flushdns
Dfsutil /spcflush
Dfsutil /pktflush
Execute the above on the offending DC.
neil
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org]
On Behalf Of Donavon Yelton
Sent: 10 May 2007 12:51
To: ActiveDir
Subject: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
Hi all, before I give MS a call I thought I would see what you
guys had to say about my problem and hopefully keep me from calling MS.
I’ve been searching for the past couple of days on my problem but
haven’t found a fix yet, perhaps it is something I’m missing.
We have just one site with two Windows 2003 SP2
DC’s. One DC as a clear application and system event log that shows
no errors for months on end but our secondary DC is chock full of Userenv 1030
and 1058 errors. When I turned on Userenv logging I noticed that the
following error was given:
USERENV(168.9c4) 07:08:56:255 GetGPOInfo: Local GPO's
gpt.ini is not accessible, assuming default state.
USERENV(168.9c4) 07:08:56:255 GetGPOInfo: Leaving with 1
At the end of the log it states the following:
USERENV(168.9c4) 07:08:56:412 LeaveCriticalPolicySection:
Critical section 0xb08 has been released.
USERENV(168.9c4) 07:08:56:412 ProcessGPOs: Computer Group Policy
has been applied.
USERENV(168.9c4) 07:08:56:427 ProcessGPOs: Leaving with 1.
USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx:
Entering with timeout 600000 and flags 0x0
USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx:
Machine critical section has been claimed. Handle = 0xb08
USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx:
Leaving successfully.
It seems that the Userenv 1030 and 1058 errors also show up on
clients (Windows XP SP2). I had thought that it may be a time sync issue
but I don’t think that is it now. I sync the primary DC with
time.windows.com and all clients are served by that time server as well through
DHCP.
One note that should be mentioned is when I reboot the primary
DC (the one without errors in the event logs) I can login immediately after
reboot it seems, but on my secondary DC (one with the errors) I have to wait a
couple of minutes else it tells me that the domain controller could not be
found. I have the GPO record enabled that says to wait for network before
processing group policy. Additionally the two DC’s are on identical
servers with the same network card drivers, etc.
I believe DNS has been setup correctly and external DNS
addresses are only mentioned in the forwarding sections for the two DC’s
(the two DC’s are also the two DNS servers for the domain).
Any ideas of what I could try next?
This e-mail and any attachments are confidential and intended solely
for the addressee and may also be privileged or exempt from disclosure
under applicable law. If you are not the addressee, or have received
this e-mail in error, please notify the sender immediately, delete it
from your system and do not copy, disclose or otherwise act upon any
part of this e-mail or its attachments
Internet communications are not guaranteed to be secure or virus-free
The Barclays Group does not accept responsibility for any loss arising
from unauthorised access to, or interference with, any Internet
communications by any third party, or from the transmission of any
viruses. Replies to this e-mail may be monitored by the Barclays Group
for operational or business reasons
Any opinion or other information in this e-mail or its attachments
that does not relate to the business of the Barclays Group is personal
to the sender and is not given or endorsed by the Barclays Group
Barclays Bank PLC.Registered in England and Wales (registered no. 1026167)
Registered Office: 1 Churchill Place, London E14 5HP, United Kingdom
Barclays Bank PLC is authorised and regulated by the Financial Services
Authority.
This e-mail and any attachments are confidential and intended solely
for the addressee and may also be privileged or exempt from disclosure
under applicable law. If you are not the addressee, or have received
this e-mail in error, please notify the sender immediately, delete it
from your system and do not copy, disclose or otherwise act upon any
part of this e-mail or its attachments
Internet communications are not guaranteed to be secure or virus-free
The Barclays Group does not accept responsibility for any loss arising
from unauthorised access to, or interference with, any Internet
communications by any third party, or from the transmission of any
viruses. Replies to this e-mail may be monitored by the Barclays Group
for operational or business reasons
Any opinion or other information in this e-mail or its attachments
that does not relate to the business of the Barclays Group is personal
to the sender and is not given or endorsed by the Barclays Group
Barclays Bank PLC.Registered in England and Wales (registered no. 1026167)
Registered Office: 1 Churchill Place, London E14 5HP, United Kingdom
Barclays Bank PLC is authorised and regulated by the Financial Services
Authority. | | | |
| dyelton
Posts:0
| | 05/10/2007 11:47 AM |
| v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
If I do a gpupdate /force the errors do NOT show up in the event
log, it only shows when the system does it automatically or when I manually run
gpupdate.
1030 Error:
Windows cannot query for the list of Group Policy objects.
Check the event log for possible messages previously logged by the policy
engine that describes the reason for this.
1030 Error:
Windows cannot access the file gpt.ini for GPO
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=carpenter,DC=local.
The file must be present at the location
<\\carpenter.local\sysvol\carpenter.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>.
(Access is denied. ). Group Policy processing aborted.
Thanks,
Donavon
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Umer Yousuf
Sent: Thursday, May 10, 2007 11:38 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
Occasionally I have found that running “control keymgr.dll “ in
run, and deleting any saved domain passwords helps, however that usually is a
case on a client XP machine rather than DC.
Also, if you run the gpupdate /force from command line, does the
1030/1058 still show up in event viewer? What is the text of the two errors?
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Donavon Yelton
Sent: Thursday, May 10, 2007 11:27 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
It seems that running dfsutil /PurgeMupCache works (at least so
far) but the kb article states it is only a temporary solution and that the
hotfix should be applied. I called MS to obtain the hotfix but was told
that it doesn’t apply to SP2 of Win2k3. So now I appear to have a
temporary fix but no long-term solution available. At least I don’t
reboot DC’s very often so it isn’t a huge deal I suppose. I’ll keep an
eye on it to see if it shows any more 1030 and 1058 userenv errors in the logs
but they should have showed back up by now if that temporary fix didn’t work.
Thanks for all the help, but if anyone has a more permanent
solution to try (short of the hotfix mentioned in this kb article since I’m
using SP2 and it apparently doesn’t apply according to MS) I would be grateful!
Donavon
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Ruston, Neil :
Barclays Wealth
Sent: Thursday, May 10, 2007 8:12 AM
To: ActiveDir
Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
Various MS articles exist, including: http://support.microsoft.com/kb/842804
This mentions dfsutil /purgeMUPcache too
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Donavon Yelton
Sent: 10 May 2007 13:07
To: ActiveDir
Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
Unfortunately the errors are still there on the next run of
gpupdate.
Donavon
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Ruston, Neil :
Barclays Wealth
Sent: Thursday, May 10, 2007 8:03 AM
To: ActiveDir
Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
I seem to remember that the following t. shooting steps helped me
in the past:
Ipconfig /flushdns
Dfsutil /spcflush
Dfsutil /pktflush
Execute the above on the offending DC.
neil
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Donavon Yelton
Sent: 10 May 2007 12:51
To: ActiveDir
Subject: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
Hi all, before I give MS a call I thought I would see what you
guys had to say about my problem and hopefully keep me from calling MS.
I’ve been searching for the past couple of days on my problem but haven’t found
a fix yet, perhaps it is something I’m missing.
We have just one site with two Windows 2003 SP2 DC’s. One
DC as a clear application and system event log that shows no errors for months
on end but our secondary DC is chock full of Userenv 1030 and 1058
errors. When I turned on Userenv logging I noticed that the following
error was given:
USERENV(168.9c4) 07:08:56:255 GetGPOInfo: Local GPO's
gpt.ini is not accessible, assuming default state.
USERENV(168.9c4) 07:08:56:255 GetGPOInfo: Leaving with 1
At the end of the log it states the following:
USERENV(168.9c4) 07:08:56:412 LeaveCriticalPolicySection:
Critical section 0xb08 has been released.
USERENV(168.9c4) 07:08:56:412 ProcessGPOs: Computer Group Policy
has been applied.
USERENV(168.9c4) 07:08:56:427 ProcessGPOs: Leaving with 1.
USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx:
Entering with timeout 600000 and flags 0x0
USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx: Machine
critical section has been claimed. Handle = 0xb08
USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx:
Leaving successfully.
It seems that the Userenv 1030 and 1058 errors also show up on
clients (Windows XP SP2). I had thought that it may be a time sync issue
but I don’t think that is it now. I sync the primary DC with
time.windows.com and all clients are served by that time server as well through
DHCP.
One note that should be mentioned is when I reboot the primary DC
(the one without errors in the event logs) I can login immediately after reboot
it seems, but on my secondary DC (one with the errors) I have to wait a couple
of minutes else it tells me that the domain controller could not be
found. I have the GPO record enabled that says to wait for network before
processing group policy. Additionally the two DC’s are on identical
servers with the same network card drivers, etc.
I believe DNS has been setup correctly and external DNS
addresses are only mentioned in the forwarding sections for the two DC’s (the
two DC’s are also the two DNS servers for the domain).
Any ideas of what I could try next?
This e-mail and any attachments are confidential and intended solely
for the addressee and may also be privileged or exempt from disclosure
under applicable law. If you are not the addressee, or have received
this e-mail in error, please notify the sender immediately, delete it
from your system and do not copy, disclose or otherwise act upon any
part of this e-mail or its attachments
Internet communications are not guaranteed to be secure or virus-free
The Barclays Group does not accept responsibility for any loss arising
from unauthorised access to, or interference with, any Internet
communications by any third party, or from the transmission of any
viruses. Replies to this e-mail may be monitored by the Barclays Group
for operational or business reasons
Any opinion or other information in this e-mail or its attachments
that does not relate to the business of the Barclays Group is personal
to the sender and is not given or endorsed by the Barclays Group
Barclays Bank PLC.Registered in England and Wales (registered no. 1026167)
Registered Office: 1 Churchill Place, London E14 5HP, United Kingdom
Barclays Bank PLC is authorised and regulated by the Financial Services
Authority.
This e-mail and any attachments are confidential and intended solely
for the addressee and may also be privileged or exempt from disclosure
under applicable law. If you are not the addressee, or have received
this e-mail in error, please notify the sender immediately, delete it
from your system and do not copy, disclose or otherwise act upon any
part of this e-mail or its attachments
Internet communications are not guaranteed to be secure or virus-free
The Barclays Group does not accept responsibility for any loss arising
from unauthorised access to, or interference with, any Internet
communications by any third party, or from the transmission of any
viruses. Replies to this e-mail may be monitored by the Barclays Group
for operational or business reasons
Any opinion or other information in this e-mail or its attachments
that does not relate to the business of the Barclays Group is personal
to the sender and is not given or endorsed by the Barclays Group
Barclays Bank PLC.Registered in England and Wales (registered no. 1026167)
Registered Office: 1 Churchill Place, London E14 5HP, United Kingdom
Barclays Bank PLC is authorised and regulated by the Financial Services
Authority. | | | |
| adwulf
Posts:106
| | 05/12/2007 10:59 AM |
| What are the effective permissions on
\\carpenter.local\sysvol\carpenter.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini
?
I saw one case where admins couldn't be bothered to wait for
replication of policies, and copied them over manually - but didn't
end up with quite the right permissions on the files.
On 10/05/07, Donavon Yelton wrote:
>
>
>
>
> If I do a gpupdate /force the errors do NOT show up in the event log, it
> only shows when the system does it automatically or when I manually run
> gpupdate.
>
>
>
> 1030 Error:
>
> Windows cannot query for the list of Group Policy objects. Check the event
> log for possible messages previously logged by the policy engine that
> describes the reason for this.
>
>
>
> 1030 Error:
>
> Windows cannot access the file gpt.ini for GPO
> CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=carpenter,DC=local.
> The file must be present at the location
> .
> (Access is denied. ). Group Policy processing aborted.
>
>
>
> Thanks,
>
> Donavon
>
>
>
>
>
>
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> Umer Yousuf
> Sent: Thursday, May 10, 2007 11:38 AM
>
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
>
>
>
>
> Occasionally I have found that running "control keymgr.dll " in run, and
> deleting any saved domain passwords helps, however that usually is a case on
> a client XP machine rather than DC.
>
>
>
> Also, if you run the gpupdate /force from command line, does the 1030/1058
> still show up in event viewer? What is the text of the two errors?
>
>
>
>
>
>
>
>
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> Donavon Yelton
> Sent: Thursday, May 10, 2007 11:27 AM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
>
>
>
> It seems that running dfsutil /PurgeMupCache works (at least so far) but the
> kb article states it is only a temporary solution and that the hotfix should
> be applied. I called MS to obtain the hotfix but was told that it doesn't
> apply to SP2 of Win2k3. So now I appear to have a temporary fix but no
> long-term solution available. At least I don't reboot DC's very often so it
> isn't a huge deal I suppose. I'll keep an eye on it to see if it shows any
> more 1030 and 1058 userenv errors in the logs but they should have showed
> back up by now if that temporary fix didn't work.
>
>
>
> Thanks for all the help, but if anyone has a more permanent solution to try
> (short of the hotfix mentioned in this kb article since I'm using SP2 and it
> apparently doesn't apply according to MS) I would be grateful!
>
>
>
> Donavon
>
>
>
>
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> Ruston, Neil : Barclays Wealth
> Sent: Thursday, May 10, 2007 8:12 AM
> To: ActiveDir
> Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
>
>
>
> Various MS articles exist, including:
> http://support.microsoft.com/kb/842804
>
>
>
>
> This mentions dfsutil /purgeMUPcache too
>
> ________________________________
>
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> Donavon Yelton
> Sent: 10 May 2007 13:07
> To: ActiveDir
> Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
>
>
>
> Unfortunately the errors are still there on the next run of gpupdate.
>
>
>
> Donavon
>
>
>
>
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> Ruston, Neil : Barclays Wealth
> Sent: Thursday, May 10, 2007 8:03 AM
> To: ActiveDir
> Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
>
>
>
> I seem to remember that the following t. shooting steps helped me in the
> past:
>
>
>
> Ipconfig /flushdns
>
> Dfsutil /spcflush
>
> Dfsutil /pktflush
>
>
>
> Execute the above on the offending DC.
>
>
>
>
> neil
>
> ________________________________
>
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> Donavon Yelton
> Sent: 10 May 2007 12:51
> To: ActiveDir
> Subject: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
>
>
>
> Hi all, before I give MS a call I thought I would see what you guys had to
> say about my problem and hopefully keep me from calling MS. I've been
> searching for the past couple of days on my problem but haven't found a fix
> yet, perhaps it is something I'm missing.
>
>
>
> We have just one site with two Windows 2003 SP2 DC's. One DC as a clear
> application and system event log that shows no errors for months on end but
> our secondary DC is chock full of Userenv 1030 and 1058 errors. When I
> turned on Userenv logging I noticed that the following error was given:
>
>
>
> USERENV(168.9c4) 07:08:56:255 GetGPOInfo: Local GPO's gpt.ini is not
> accessible, assuming default state.
>
> USERENV(168.9c4) 07:08:56:255 GetGPOInfo: Leaving with 1
>
>
>
> At the end of the log it states the following:
>
>
>
> USERENV(168.9c4) 07:08:56:412 LeaveCriticalPolicySection: Critical section
> 0xb08 has been released.
>
> USERENV(168.9c4) 07:08:56:412 ProcessGPOs: Computer Group Policy has been
> applied.
>
> USERENV(168.9c4) 07:08:56:427 ProcessGPOs: Leaving with 1.
>
> USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx: Entering with
> timeout 600000 and flags 0x0
>
> USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx: Machine critical
> section has been claimed. Handle = 0xb08
>
> USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx: Leaving
> successfully.
>
>
>
> It seems that the Userenv 1030 and 1058 errors also show up on clients
> (Windows XP SP2). I had thought that it may be a time sync issue but I
> don't think that is it now. I sync the primary DC with time.windows.com and
> all clients are served by that time server as well through DHCP.
>
>
>
> One note that should be mentioned is when I reboot the primary DC (the one
> without errors in the event logs) I can login immediately after reboot it
> seems, but on my secondary DC (one with the errors) I have to wait a couple
> of minutes else it tells me that the domain controller could not be found.
> I have the GPO record enabled that says to wait for network before
> processing group policy. Additionally the two DC's are on identical servers
> with the same network card drivers, etc.
>
>
>
> I believe DNS has been setup correctly and external DNS addresses are only
> mentioned in the forwarding sections for the two DC's (the two DC's are also
> the two DNS servers for the domain).
>
>
>
> Any ideas of what I could try next?
>
>
> This e-mail and any attachments are confidential and intended solely
> for the addressee and may also be privileged or exempt from disclosure
> under applicable law. If you are not the addressee, or have received
> this e-mail in error, please notify the sender immediately, delete it
> from your system and do not copy, disclose or otherwise act upon any
> part of this e-mail or its attachments
>
> Internet communications are not guaranteed to be secure or virus-free
> The Barclays Group does not accept responsibility for any loss arising
> from unauthorised access to, or interference with, any Internet
> communications by any third party, or from the transmission of any
> viruses. Replies to this e-mail may be monitored by the Barclays Group
> for operational or business reasons
>
> Any opinion or other information in this e-mail or its attachments
> that does not relate to the business of the Barclays Group is personal
> to the sender and is not given or endorsed by the Barclays Group
> Barclays Bank PLC.Registered in England and Wales (registered no. 1026167)
> Registered Office: 1 Churchill Place, London E14 5HP, United Kingdom
>
> Barclays Bank PLC is authorised and regulated by the Financial Services
> Authority.
>
>
> This e-mail and any attachments are confidential and intended solely
> for the addressee and may also be privileged or exempt from disclosure
> under applicable law. If you are not the addressee, or have received
> this e-mail in error, please notify the sender immediately, delete it
> from your system and do not copy, disclose or otherwise act upon any
> part of this e-mail or its attachments
>
> Internet communications are not guaranteed to be secure or virus-free
> The Barclays Group does not accept responsibility for any loss arising
> from unauthorised access to, or interference with, any Internet
> communications by any third party, or from the transmission of any
> viruses. Replies to this e-mail may be monitored by the Barclays Group
> for operational or business reasons
>
> Any opinion or other information in this e-mail or its attachments
> that does not relate to the business of the Barclays Group is personal
> to the sender and is not given or endorsed by the Barclays Group
> Barclays Bank PLC.Registered in England and Wales (registered no. 1026167)
> Registered Office: 1 Churchill Place, London E14 5HP, United Kingdom
>
> Barclays Bank PLC is authorised and regulated by the Financial Services
> Authority.
--
AdamT
"Pay peanuts, expect chimps."
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx | | | |
| dyelton
Posts:0
| | 05/14/2007 7:48 AM |
| For what group(s)?
Thanks
-----Original Message-----
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of AdamT
Sent: Saturday, May 12, 2007 11:00 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
What are the effective permissions on
\\carpenter.local\sysvol\carpenter.local\Policies\{31B2F340-016D-11D2-94
5F-00C04FB984F9}\gpt.ini
?
I saw one case where admins couldn't be bothered to wait for
replication of policies, and copied them over manually - but didn't
end up with quite the right permissions on the files.
On 10/05/07, Donavon Yelton wrote:
>
>
>
>
> If I do a gpupdate /force the errors do NOT show up in the event log,
it
> only shows when the system does it automatically or when I manually
run
> gpupdate.
>
>
>
> 1030 Error:
>
> Windows cannot query for the list of Group Policy objects. Check the
event
> log for possible messages previously logged by the policy engine that
> describes the reason for this.
>
>
>
> 1030 Error:
>
> Windows cannot access the file gpt.ini for GPO
>
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=carpe
nter,DC=local.
> The file must be present at the location
>
.
> (Access is denied. ). Group Policy processing aborted.
>
>
>
> Thanks,
>
> Donavon
>
>
>
>
>
>
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> Umer Yousuf
> Sent: Thursday, May 10, 2007 11:38 AM
>
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
>
>
>
>
> Occasionally I have found that running "control keymgr.dll " in run,
and
> deleting any saved domain passwords helps, however that usually is a
case on
> a client XP machine rather than DC.
>
>
>
> Also, if you run the gpupdate /force from command line, does the
1030/1058
> still show up in event viewer? What is the text of the two errors?
>
>
>
>
>
>
>
>
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> Donavon Yelton
> Sent: Thursday, May 10, 2007 11:27 AM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
>
>
>
> It seems that running dfsutil /PurgeMupCache works (at least so far)
but the
> kb article states it is only a temporary solution and that the hotfix
should
> be applied. I called MS to obtain the hotfix but was told that it
doesn't
> apply to SP2 of Win2k3. So now I appear to have a temporary fix but
no
> long-term solution available. At least I don't reboot DC's very often
so it
> isn't a huge deal I suppose. I'll keep an eye on it to see if it
shows any
> more 1030 and 1058 userenv errors in the logs but they should have
showed
> back up by now if that temporary fix didn't work.
>
>
>
> Thanks for all the help, but if anyone has a more permanent solution
to try
> (short of the hotfix mentioned in this kb article since I'm using SP2
and it
> apparently doesn't apply according to MS) I would be grateful!
>
>
>
> Donavon
>
>
>
>
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> Ruston, Neil : Barclays Wealth
> Sent: Thursday, May 10, 2007 8:12 AM
> To: ActiveDir
> Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
>
>
>
> Various MS articles exist, including:
> http://support.microsoft.com/kb/842804
>
>
>
>
> This mentions dfsutil /purgeMUPcache too
>
> ________________________________
>
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> Donavon Yelton
> Sent: 10 May 2007 13:07
> To: ActiveDir
> Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
>
>
>
> Unfortunately the errors are still there on the next run of gpupdate.
>
>
>
> Donavon
>
>
>
>
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> Ruston, Neil : Barclays Wealth
> Sent: Thursday, May 10, 2007 8:03 AM
> To: ActiveDir
> Subject: RE: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
>
>
>
> I seem to remember that the following t. shooting steps helped me in
the
> past:
>
>
>
> Ipconfig /flushdns
>
> Dfsutil /spcflush
>
> Dfsutil /pktflush
>
>
>
> Execute the above on the offending DC.
>
>
>
>
> neil
>
> ________________________________
>
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> Donavon Yelton
> Sent: 10 May 2007 12:51
> To: ActiveDir
> Subject: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
>
>
>
> Hi all, before I give MS a call I thought I would see what you guys
had to
> say about my problem and hopefully keep me from calling MS. I've been
> searching for the past couple of days on my problem but haven't found
a fix
> yet, perhaps it is something I'm missing.
>
>
>
> We have just one site with two Windows 2003 SP2 DC's. One DC as a
clear
> application and system event log that shows no errors for months on
end but
> our secondary DC is chock full of Userenv 1030 and 1058 errors. When
I
> turned on Userenv logging I noticed that the following error was
given:
>
>
>
> USERENV(168.9c4) 07:08:56:255 GetGPOInfo: Local GPO's gpt.ini is not
> accessible, assuming default state.
>
> USERENV(168.9c4) 07:08:56:255 GetGPOInfo: Leaving with 1
>
>
>
> At the end of the log it states the following:
>
>
>
> USERENV(168.9c4) 07:08:56:412 LeaveCriticalPolicySection: Critical
section
> 0xb08 has been released.
>
> USERENV(168.9c4) 07:08:56:412 ProcessGPOs: Computer Group Policy has
been
> applied.
>
> USERENV(168.9c4) 07:08:56:427 ProcessGPOs: Leaving with 1.
>
> USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx: Entering
with
> timeout 600000 and flags 0x0
>
> USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx: Machine
critical
> section has been claimed. Handle = 0xb08
>
> USERENV(168.9c4) 07:08:56:427 EnterCriticalPolicySectionEx: Leaving
> successfully.
>
>
>
> It seems that the Userenv 1030 and 1058 errors also show up on clients
> (Windows XP SP2). I had thought that it may be a time sync issue but
I
> don't think that is it now. I sync the primary DC with
time.windows.com and
> all clients are served by that time server as well through DHCP.
>
>
>
> One note that should be mentioned is when I reboot the primary DC (the
one
> without errors in the event logs) I can login immediately after reboot
it
> seems, but on my secondary DC (one with the errors) I have to wait a
couple
> of minutes else it tells me that the domain controller could not be
found.
> I have the GPO record enabled that says to wait for network before
> processing group policy. Additionally the two DC's are on identical
servers
> with the same network card drivers, etc.
>
>
>
> I believe DNS has been setup correctly and external DNS addresses are
only
> mentioned in the forwarding sections for the two DC's (the two DC's
are also
> the two DNS servers for the domain).
>
>
>
> Any ideas of what I could try next?
>
>
> This e-mail and any attachments are confidential and intended solely
> for the addressee and may also be privileged or exempt from
disclosure
> under applicable law. If you are not the addressee, or have received
> this e-mail in error, please notify the sender immediately, delete it
> from your system and do not copy, disclose or otherwise act upon any
> part of this e-mail or its attachments
>
> Internet communications are not guaranteed to be secure or virus-free
> The Barclays Group does not accept responsibility for any loss
arising
> from unauthorised access to, or interference with, any Internet
> communications by any third party, or from the transmission of any
> viruses. Replies to this e-mail may be monitored by the Barclays
Group
> for operational or business reasons
>
> Any opinion or other information in this e-mail or its attachments
> that does not relate to the business of the Barclays Group is
personal
> to the sender and is not given or endorsed by the Barclays Group
> Barclays Bank PLC.Registered in England and Wales (registered no.
1026167)
> Registered Office: 1 Churchill Place, London E14 5HP, United Kingdom
>
> Barclays Bank PLC is authorised and regulated by the Financial
Services
> Authority.
>
>
> This e-mail and any attachments are confidential and intended solely
> for the addressee and may also be privileged or exempt from
disclosure
> under applicable law. If you are not the addressee, or have received
> this e-mail in error, please notify the sender immediately, delete it
> from your system and do not copy, disclose or otherwise act upon any
> part of this e-mail or its attachments
>
> Internet communications are not guaranteed to be secure or virus-free
> The Barclays Group does not accept responsibility for any loss
arising
> from unauthorised access to, or interference with, any Internet
> communications by any third party, or from the transmission of any
> viruses. Replies to this e-mail may be monitored by the Barclays
Group
> for operational or business reasons
>
> Any opinion or other information in this e-mail or its attachments
> that does not relate to the business of the Barclays Group is
personal
> to the sender and is not given or endorsed by the Barclays Group
> Barclays Bank PLC.Registered in England and Wales (registered no.
1026167)
> Registered Office: 1 Churchill Place, London E14 5HP, United Kingdom
>
> Barclays Bank PLC is authorised and regulated by the Financial
Services
> Authority.
--
AdamT
"Pay peanuts, expect chimps."
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx | | | |
| adwulf
Posts:106
| | 05/14/2007 8:02 AM |
| Authenticated Users, IIRC.
On 14/05/07, Donavon Yelton wrote:
> For what group(s)?
>
> Thanks
>
> -----Original Message-----
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of AdamT
> Sent: Saturday, May 12, 2007 11:00 AM
> To: ActiveDir@mail.activedir.org
> Subject: Re: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
>
> What are the effective permissions on
> \\carpenter.local\sysvol\carpenter.local\Policies\{31B2F340-016D-11D2-94
> 5F-00C04FB984F9}\gpt.ini
> ?
>
> I saw one case where admins couldn't be bothered to wait for
> replication of policies, and copied them over manually - but didn't
> end up with quite the right permissions on the files.
>
--
AdamT
"Pay peanuts, expect chimps."
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx | | | |
| dyelton
Posts:0
| | 05/14/2007 8:25 AM |
| The following attributes are checked for the following group...
-| Authenticated Users |-
Traverse Folder / Execute File
List Folder / Read Data
Read Attributes
Read Extended Attributes
Read Permissions
Thanks
-----Original Message-----
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of AdamT
Sent: Monday, May 14, 2007 8:02 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
Authenticated Users, IIRC.
On 14/05/07, Donavon Yelton wrote:
> For what group(s)?
>
> Thanks
>
> -----Original Message-----
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of AdamT
> Sent: Saturday, May 12, 2007 11:00 AM
> To: ActiveDir@mail.activedir.org
> Subject: Re: [ActiveDir] Userenv 1030 & 1058 errors on just one DC
>
> What are the effective permissions on
>
\\carpenter.local\sysvol\carpenter.local\Policies\{31B2F340-016D-11D2-94
> 5F-00C04FB984F9}\gpt.ini
> ?
>
> I saw one case where admins couldn't be bothered to wait for
> replication of policies, and copied them over manually - but didn't
> end up with quite the right permissions on the files.
>
--
AdamT
"Pay peanuts, expect chimps."
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx | | | |
|
|