2003 server GPO events 1030 ja 1058

Event ID virheet ja varoitukset
eero
Site Admin
Viestit: 329
Liittynyt: 07 Marras 2007 20:17

2003 server GPO events 1030 ja 1058

Viesti Kirjoittaja eero »

Viiden minuutin välein toistuu virheet 1030 ja 1058

A Windows Server 2003-based computer may stop responding when it is resumed from standby and events 1030 and 1058 are logged in the application log of a domain controller

When you resume a Windows Server 2003-based computer from standby, the computer may stop responding. You may also see the "Applying Personal Settings" message box for up to an hour before the desktop appears.

Typically, when you resume a Windows Server 2003-based computer from standby, the computer is locked. Therefore, you must log on to the computer before you can access the desktop. However, when this problem occurs, the computer is not locked, and the Windows Server 2003 logon screen does not appear.

Additionally, the following event messages may be logged in the application event log on the domain controller after you restart the Windows Server 2003-based computer:
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Description: Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domain,DC=com. The file must be present at the location <\\domain\sysvol\domain\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. (Access is denied. ). Group Policy processing aborted. For more information, see Help and Support Center at http://support.microsoft.com.
or
Description: Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domain,DC=com. The file must be present at the location <\\domain\sysvol\domain\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. (The network path was not found. ).

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Description: Windows cannot query for the list of Group Policy objects. A message that describes the reason for this was previously logged by the policy engine. For more information, see Help and Support Center at http://support.microsoft.com.
When you turn on user environment (Userenv) logging, domain Distributed File System (DFS) services may not work after the computer resumes from standby. Additionally, you may receive messages that resemble the following messages in the %SystemRoot%\Debug\UserMode\Userenv.log file.

Note For information about how to turn on Userenv logging, see the Microsoft Knowledge Base article that is referenced in the "References" section.
USERENV(1d8.a84) 21:52:58:718 EvaluateDeferredGPOs: Searching for GPOs in cn=policies,cn=system,DC=domain,DC=local
USERENV(1d8.a84) 21:52:58:718 ProcessGPO: Searching <CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domain,DC=local>
USERENV(1d8.a84) 21:52:58:718 ProcessGPO: Machine has access to this GPO.
USERENV(1d8.a84) 21:52:58:718 ProcessGPO: GPO passes the filter check.
USERENV(1d8.a84) 21:52:58:718 ProcessGPO: Found functionality version of: 2
USERENV(1d8.a84) 21:52:58:718 ProcessGPO: Found file system path of: <\\domain.local\sysvol\domain.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(1d8.a84) 21:52:58:734 ProcessGPO: Couldn't find the group policy template file <\\domain.local\sysvol\domain.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>, error = 0x5.

This problem may occur if the Winlogon process tries to process group policies before other components are running. The service pack that this article describes adds logic to improve the default behavior of the Winlogon process and of the workstation services.

However, there are several other scenarios that may cause this problem. Make sure that the following components are started and that they are configured correctly before you apply this service pack:
- Netlogon and DFS services are started.
- Domain controllers have the read and apply rights to the Domain Controllers Policy.
- NTFS file system permissions and share permissions are set correctly on the Sysvol share.
- DNS entries are correct for the domain controllers.

After you have applied this service pack, follow these steps:
Click Start, click Run, type regedit in the Open box, and then click OK.
In Registry Editor, locate the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
If the WaitForNetwork entry is missing, you must add the entry. To do this, follow these steps:
Right-click the Winlogon subkey, click New, and then click Dword Value.
In the Value name box, type WaitForNetwork.
Right-click WaitForNetwork, and then click Modify.
In the Edit DWORD Value dialog box, in the Value Data box, type 1, and then click OK.
Close Registry Editor.
Back to the top
Workaround
To temporarily work around this issue, you can run the Dfsutil.exe file that is included in Windows Server 2003 Support Tools. You can install Windows Server 2003 Support Tools in two ways. You can run \\Support\Tolls\Suptools.msi from the Windows Server 2003 CD-ROM. Or, you can extract the support tools directly from the \\Support\Tools\Support.cab file. To run the Dfsutil.exe file, follow these steps:
Click Start, click Run, type cmd, and then click OK.
At the command prompt, type dfsutil /PurgeMupCache, and then press ENTER.