Our domain controller kept spitting out Event ID 1030 & 1058 in the event log. In our previous post I was able to solve this problem but only temporarily.
So another look a the two Event IDs shows:
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 7/27/2009
Time: 9:12:15 AM
User: NT AUTHORITY\SYSTEM
Computer: domain controller
Description:
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 7/27/2009
Time: 9:12:15 AM
User: NT AUTHORITY\SYSTEM
Computer: domain controller
Description:
Windows cannot access the file gpt.ini for GPO cn={A68A6FBD-86AC-4260-A81C-BF3AEF46ED16},cn=policies,cn=system,DC=domain,DC=org. The file must be present at the location <\\domain\SysVol\domain\Policies\{A68A6FBD-86AC-4260-A81C-BF3AEF46ED16}\gpt.ini>. (Access is denied. ). Group Policy processing aborted.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event ID 1030 & 1058 come together as a pair at the same time. It is with Event ID 1058 that gives us more information that shows there is a permission issue with the gpt.ini file in the SysVol folder of the particular domain controller.
Upon looking at the permissions everything looks fine.
To fix this problem:
- Within the server causing the problem – Open the Command Prompt.
- Type in dfsutil /PurgeMupCache (more info on dfsutil)
- Monitor the event log
After completing the command, Event ID 1030 & 1058 stopped showing in the event log.
Related posts:
