| Author | Messages | |
ktaczala
Posts:0
 | | 02/18/2009 10:27 AM |
| I have a customer that has Small Business Server 2003 SP2 installed. I'm
getting userenv errors in the app log 1030 and 1058.
When I try to open GPMC, I get a semaphore timeout, then it opens. I think
I have a corrupt Domain Password Policy. See Picture.
The other policies open up just fine. How can I fix this?
gpoimage.jpg
| | | |
| Darren
Posts:103
| | 02/18/2009 12:18 PM |
| Ken-
It looks like that GPMC can either not find or cannot read the contents of
the SYSVOL portion of the GPO. On your DC (assuming you only have one) can
you verify that under \\domain name\sysvol\domainname\policies, that there
is a folder name for the GUID of that GPO, that the folder has files in it
and that the permissions on the folder allow at least Authenticated Users
the ability to read it?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 7:21 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
I have a customer that has Small Business Server 2003 SP2 installed. I'm
getting userenv errors in the app log 1030 and 1058.
When I try to open GPMC, I get a semaphore timeout, then it opens. I think
I have a corrupt Domain Password Policy. See Picture.
The other policies open up just fine. How can I fix this?
| | | |
| ktaczala
Posts:0
| | 02/18/2009 12:28 PM |
| Yes the sysvol path, guid, all have the correct permissions. (all compared
to another server)
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:12 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
It looks like that GPMC can either not find or cannot read the contents of
the SYSVOL portion of the GPO. On your DC (assuming you only have one) can
you verify that under \\domain name\sysvol\domainname\policies, that there is
a folder name for the GUID of that GPO, that the folder has files in it and
that the permissions on the folder allow at least Authenticated Users the
ability to read it?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 7:21 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
I have a customer that has Small Business Server 2003 SP2 installed. I'm
getting userenv errors in the app log 1030 and 1058.
When I try to open GPMC, I get a semaphore timeout, then it opens. I think
I have a corrupt Domain Password Policy. See Picture.
The other policies open up just fine. How can I fix this?
| | | |
| Darren
Posts:103
| | 02/18/2009 12:50 PM |
| So is it only one machine where you see the errors? Also, when you drill
into the GUID-named folder, what do you see under the Machine folder?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 9:21 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Yes the sysvol path, guid, all have the correct permissions. (all compared
to another server)
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:12 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
It looks like that GPMC can either not find or cannot read the contents of
the SYSVOL portion of the GPO. On your DC (assuming you only have one) can
you verify that under \\domain name\sysvol\domainname\policies, that there
is a folder name for the GUID of that GPO, that the folder has files in it
and that the permissions on the folder allow at least Authenticated Users
the ability to read it?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 7:21 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
I have a customer that has Small Business Server 2003 SP2 installed. I'm
getting userenv errors in the app log 1030 and 1058.
When I try to open GPMC, I get a semaphore timeout, then it opens. I think
I have a corrupt Domain Password Policy. See Picture.
The other policies open up just fine. How can I fix this?
| | | |
| DarraghOShaughnessy
Posts:177
| | 02/18/2009 1:00 PM |
| semaphore timeout timeout sounds like IRPStackSize problem or the likes.
Is Symantec anti-virus running on the machine or any physical port
locking software such as secure waves sanctuary?
Regards,
Darragh O'Shaughnessy - I.T. Services Department
E-Mail: xxxxxxxxxxxxxxxx
Ext: 2562
DDI: 00353-17994028
Web Site: www.vhi.ie <http://www.vhi.ie/>
This e-mail and any files transmitted with it contain information which
may be confidential and which may also be privileged and is intended
solely for the use of the individual or entity to whom it is addressed.
Unless you are the intended recipient you may not copy or use it, or
disclose it to anyone else. Any opinions expressed are that of the
individual and not necessarily that of VHI Healthcare. If you have
received this e-mail in error please notify the sender by return. This
footnote also confirms that this e-mail message has been Swept for the
presence of computer viruses.
________________________________
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Ken Taczala
Sent: 18 February 2009 17:21
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Yes the sysvol path, guid, all have the correct permissions.
(all compared to another server)
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:12 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
It looks like that GPMC can either not find or cannot read the
contents of the SYSVOL portion of the GPO. On your DC (assuming you
only have one) can you verify that under \\domain
name\sysvol\domainname\policies, that there is a folder name for the
GUID of that GPO, that the folder has files in it and that the
permissions on the folder allow at least Authenticated Users the ability
to read it?
Darren
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 7:21 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
I have a customer that has Small Business Server 2003 SP2
installed. I'm getting userenv errors in the app log 1030 and 1058.
When I try to open GPMC, I get a semaphore timeout, then it
opens. I think I have a corrupt Domain Password Policy. See Picture.
The other policies open up just fine. How can I fix this?
| | | |
| ktaczala
Posts:0
| | 02/18/2009 1:40 PM |
| This is a Small Business Server 2003 only one server. The comparison I made
was another customers system.
See image for machine folder contents
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:44 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
So is it only one machine where you see the errors? Also, when you drill
into the GUID-named folder, what do you see under the Machine folder?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 9:21 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Yes the sysvol path, guid, all have the correct permissions. (all compared
to another server)
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:12 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
It looks like that GPMC can either not find or cannot read the contents of
the SYSVOL portion of the GPO. On your DC (assuming you only have one) can
you verify that under \\domain name\sysvol\domainname\policies, that there
is a folder name for the GUID of that GPO, that the folder has files in it
and that the permissions on the folder allow at least Authenticated Users
the ability to read it?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 7:21 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
I have a customer that has Small Business Server 2003 SP2 installed. I'm
getting userenv errors in the app log 1030 and 1058.
When I try to open GPMC, I get a semaphore timeout, then it opens. I think
I have a corrupt Domain Password Policy. See Picture.
The other policies open up just fine. How can I fix this?
| | | |
| Darren
Posts:103
| | 02/18/2009 1:53 PM |
| Ken-
At least on the surface, I don't see anything wrong with the contents of
that folder below, that would cause GPMC to report SYSVOL as being
unavailable. Are you able to edit the GPO (i.e. launch GP Editor)? If so,
you might want to just open the GP Editor on that GPO, make a small change,
apply it, then back it out, and see if that cleans up the issue.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 10:33 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
This is a Small Business Server 2003 only one server. The comparison I made
was another customers system.
See image for machine folder contents
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:44 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
So is it only one machine where you see the errors? Also, when you drill
into the GUID-named folder, what do you see under the Machine folder?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 9:21 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Yes the sysvol path, guid, all have the correct permissions. (all compared
to another server)
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:12 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
It looks like that GPMC can either not find or cannot read the contents of
the SYSVOL portion of the GPO. On your DC (assuming you only have one) can
you verify that under \\domain name\sysvol\domainname\policies, that there
is a folder name for the GUID of that GPO, that the folder has files in it
and that the permissions on the folder allow at least Authenticated Users
the ability to read it?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 7:21 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
I have a customer that has Small Business Server 2003 SP2 installed. I'm
getting userenv errors in the app log 1030 and 1058.
When I try to open GPMC, I get a semaphore timeout, then it opens. I think
I have a corrupt Domain Password Policy. See Picture.
The other policies open up just fine. How can I fix this?
| | | |
| ktaczala
Posts:0
| | 02/18/2009 2:08 PM |
| Unable to edit that particular policy.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 12:47 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
At least on the surface, I don't see anything wrong with the contents of
that folder below, that would cause GPMC to report SYSVOL as being
unavailable. Are you able to edit the GPO (i.e. launch GP Editor)? If so,
you might want to just open the GP Editor on that GPO, make a small change,
apply it, then back it out, and see if that cleans up the issue.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 10:33 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
This is a Small Business Server 2003 only one server. The comparison I made
was another customers system.
See image for machine folder contents
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:44 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
So is it only one machine where you see the errors? Also, when you drill
into the GUID-named folder, what do you see under the Machine folder?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 9:21 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Yes the sysvol path, guid, all have the correct permissions. (all compared
to another server)
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:12 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
It looks like that GPMC can either not find or cannot read the contents of
the SYSVOL portion of the GPO. On your DC (assuming you only have one) can
you verify that under \\domain name\sysvol\domainname\policies, that there
is a folder name for the GUID of that GPO, that the folder has files in it
and that the permissions on the folder allow at least Authenticated Users
the ability to read it?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 7:21 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
I have a customer that has Small Business Server 2003 SP2 installed. I'm
getting userenv errors in the app log 1030 and 1058.
When I try to open GPMC, I get a semaphore timeout, then it opens. I think
I have a corrupt Domain Password Policy. See Picture.
The other policies open up just fine. How can I fix this?
| | | |
| Darren
Posts:103
| | 02/18/2009 2:21 PM |
| Ok. Do you get that semaphore error on GP Editor as well? Can you backup the
GPO using GPMC backup? Also, not sure if you're comfortable with it, but can
you go into AD using AD Users or Computers or ADSIEdit and open the
GUID-named container for that GPO under CN=Policies,CN=System. Check that
the permissions on that container roughly correspond to the SYSVOL
permissions. Check that the attribute called gpcFileSysPath points to the
UNC path for the SYSVOL portion of the GPO. Let me know what you find.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 11:03 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Unable to edit that particular policy.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 12:47 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
At least on the surface, I don't see anything wrong with the contents of
that folder below, that would cause GPMC to report SYSVOL as being
unavailable. Are you able to edit the GPO (i.e. launch GP Editor)? If so,
you might want to just open the GP Editor on that GPO, make a small change,
apply it, then back it out, and see if that cleans up the issue.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 10:33 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
This is a Small Business Server 2003 only one server. The comparison I made
was another customers system.
See image for machine folder contents
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:44 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
So is it only one machine where you see the errors? Also, when you drill
into the GUID-named folder, what do you see under the Machine folder?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 9:21 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Yes the sysvol path, guid, all have the correct permissions. (all compared
to another server)
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:12 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
It looks like that GPMC can either not find or cannot read the contents of
the SYSVOL portion of the GPO. On your DC (assuming you only have one) can
you verify that under \\domain name\sysvol\domainname\policies, that there
is a folder name for the GUID of that GPO, that the folder has files in it
and that the permissions on the folder allow at least Authenticated Users
the ability to read it?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 7:21 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
I have a customer that has Small Business Server 2003 SP2 installed. I'm
getting userenv errors in the app log 1030 and 1058.
When I try to open GPMC, I get a semaphore timeout, then it opens. I think
I have a corrupt Domain Password Policy. See Picture.
The other policies open up just fine. How can I fix this?
| | | |
| ktaczala
Posts:0
| | 02/18/2009 2:42 PM |
| All Settings seem to be correct in adsiedit. If I try to edit the policy I
get:
Then the editor opens but the tree has a red X
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 1:16 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ok. Do you get that semaphore error on GP Editor as well? Can you backup the
GPO using GPMC backup? Also, not sure if you're comfortable with it, but can
you go into AD using AD Users or Computers or ADSIEdit and open the
GUID-named container for that GPO under CN=Policies,CN=System. Check that
the permissions on that container roughly correspond to the SYSVOL
permissions. Check that the attribute called gpcFileSysPath points to the
UNC path for the SYSVOL portion of the GPO. Let me know what you find.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 11:03 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Unable to edit that particular policy.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 12:47 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
At least on the surface, I don't see anything wrong with the contents of
that folder below, that would cause GPMC to report SYSVOL as being
unavailable. Are you able to edit the GPO (i.e. launch GP Editor)? If so,
you might want to just open the GP Editor on that GPO, make a small change,
apply it, then back it out, and see if that cleans up the issue.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 10:33 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
This is a Small Business Server 2003 only one server. The comparison I made
was another customers system.
See image for machine folder contents
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:44 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
So is it only one machine where you see the errors? Also, when you drill
into the GUID-named folder, what do you see under the Machine folder?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 9:21 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Yes the sysvol path, guid, all have the correct permissions. (all compared
to another server)
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:12 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
It looks like that GPMC can either not find or cannot read the contents of
the SYSVOL portion of the GPO. On your DC (assuming you only have one) can
you verify that under \\domain name\sysvol\domainname\policies, that there
is a folder name for the GUID of that GPO, that the folder has files in it
and that the permissions on the folder allow at least Authenticated Users
the ability to read it?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 7:21 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
I have a customer that has Small Business Server 2003 SP2 installed. I'm
getting userenv errors in the app log 1030 and 1058.
When I try to open GPMC, I get a semaphore timeout, then it opens. I think
I have a corrupt Domain Password Policy. See Picture.
The other policies open up just fine. How can I fix this?
| | | |
| Darren
Posts:103
| | 02/18/2009 2:58 PM |
| OK. Running out of ideas. One more. Can you output the permissions on that
GPO? And post here? You can use dumpGPOInfo.wsf from the GPMC scripts or
even a screen shot from GPMC on the Delegation tab, if you can get to it.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 11:36 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
All Settings seem to be correct in adsiedit. If I try to edit the policy I
get:
Then the editor opens but the tree has a red X
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 1:16 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ok. Do you get that semaphore error on GP Editor as well? Can you backup the
GPO using GPMC backup? Also, not sure if you're comfortable with it, but can
you go into AD using AD Users or Computers or ADSIEdit and open the
GUID-named container for that GPO under CN=Policies,CN=System. Check that
the permissions on that container roughly correspond to the SYSVOL
permissions. Check that the attribute called gpcFileSysPath points to the
UNC path for the SYSVOL portion of the GPO. Let me know what you find.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 11:03 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Unable to edit that particular policy.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 12:47 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
At least on the surface, I don't see anything wrong with the contents of
that folder below, that would cause GPMC to report SYSVOL as being
unavailable. Are you able to edit the GPO (i.e. launch GP Editor)? If so,
you might want to just open the GP Editor on that GPO, make a small change,
apply it, then back it out, and see if that cleans up the issue.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 10:33 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
This is a Small Business Server 2003 only one server. The comparison I made
was another customers system.
See image for machine folder contents
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:44 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
So is it only one machine where you see the errors? Also, when you drill
into the GUID-named folder, what do you see under the Machine folder?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 9:21 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Yes the sysvol path, guid, all have the correct permissions. (all compared
to another server)
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:12 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
It looks like that GPMC can either not find or cannot read the contents of
the SYSVOL portion of the GPO. On your DC (assuming you only have one) can
you verify that under \\domain name\sysvol\domainname\policies, that there
is a folder name for the GUID of that GPO, that the folder has files in it
and that the permissions on the folder allow at least Authenticated Users
the ability to read it?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 7:21 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
I have a customer that has Small Business Server 2003 SP2 installed. I'm
getting userenv errors in the app log 1030 and 1058.
When I try to open GPMC, I get a semaphore timeout, then it opens. I think
I have a corrupt Domain Password Policy. See Picture.
The other policies open up just fine. How can I fix this?
| | | |
| ktaczala
Posts:0
| | 02/18/2009 3:46 PM |
| Ok here's a screen shot of the delegation tab
The dumpgpoinfo.wsf script just came back to a command prompt. No printout
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 1:52 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
OK. Running out of ideas. One more. Can you output the permissions on that
GPO? And post here? You can use dumpGPOInfo.wsf from the GPMC scripts or even
a screen shot from GPMC on the Delegation tab, if you can get to it.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 11:36 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
All Settings seem to be correct in adsiedit. If I try to edit the policy I
get:
Then the editor opens but the tree has a red X
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 1:16 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ok. Do you get that semaphore error on GP Editor as well? Can you backup the
GPO using GPMC backup? Also, not sure if you're comfortable with it, but can
you go into AD using AD Users or Computers or ADSIEdit and open the
GUID-named container for that GPO under CN=Policies,CN=System. Check that the
permissions on that container roughly correspond to the SYSVOL permissions.
Check that the attribute called gpcFileSysPath points to the UNC path for the
SYSVOL portion of the GPO. Let me know what you find.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 11:03 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Unable to edit that particular policy.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 12:47 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
At least on the surface, I don't see anything wrong with the contents of that
folder below, that would cause GPMC to report SYSVOL as being unavailable.
Are you able to edit the GPO (i.e. launch GP Editor)? If so, you might want
to just open the GP Editor on that GPO, make a small change, apply it, then
back it out, and see if that cleans up the issue.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 10:33 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
This is a Small Business Server 2003 only one server. The comparison I made
was another customers system.
See image for machine folder contents
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:44 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
So is it only one machine where you see the errors? Also, when you drill into
the GUID-named folder, what do you see under the Machine folder?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 9:21 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Yes the sysvol path, guid, all have the correct permissions. (all compared
to another server)
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:12 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
It looks like that GPMC can either not find or cannot read the contents of
the SYSVOL portion of the GPO. On your DC (assuming you only have one) can
you verify that under \\domain name\sysvol\domainname\policies, that there is
a folder name for the GUID of that GPO, that the folder has files in it and
that the permissions on the folder allow at least Authenticated Users the
ability to read it?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 7:21 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
I have a customer that has Small Business Server 2003 SP2 installed. I'm
getting userenv errors in the app log 1030 and 1058.
When I try to open GPMC, I get a semaphore timeout, then it opens. I think
I have a corrupt Domain Password Policy. See Picture.
The other policies open up just fine. How can I fix this?
| | | |
| jeromelcruz
Posts:123
| | 02/18/2009 3:55 PM |
| Ken... if you were not there already... go down to the Group Policy Objects node in the GPMC (near the bottom). Look for your GPO there and click on it there in the left-hand pane. If there are SYSVOL permission issues, it'll prompt you to 'correct' them.
Jerry Cruz | Group Policies Product Manager | Windows Infrastructure Architecture | CNO | Boeing IT
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 12:42 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ok here's a screen shot of the delegation tab
[cid:image001.png@01C991C7.83D1BD50]
The dumpgpoinfo.wsf script just came back to a command prompt. No printout
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 1:52 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
OK. Running out of ideas. One more. Can you output the permissions on that GPO? And post here? You can use dumpGPOInfo.wsf from the GPMC scripts or even a screen shot from GPMC on the Delegation tab, if you can get to it.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 11:36 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
All Settings seem to be correct in adsiedit. If I try to edit the policy I get:
[cid:image002.png@01C991C7.83D1BD50]
Then the editor opens but the tree has a red X
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 1:16 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ok. Do you get that semaphore error on GP Editor as well? Can you backup the GPO using GPMC backup? Also, not sure if you're comfortable with it, but can you go into AD using AD Users or Computers or ADSIEdit and open the GUID-named container for that GPO under CN=Policies,CN=System. Check that the permissions on that container roughly correspond to the SYSVOL permissions. Check that the attribute called gpcFileSysPath points to the UNC path for the SYSVOL portion of the GPO. Let me know what you find.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 11:03 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Unable to edit that particular policy.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 12:47 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
At least on the surface, I don't see anything wrong with the contents of that folder below, that would cause GPMC to report SYSVOL as being unavailable. Are you able to edit the GPO (i.e. launch GP Editor)? If so, you might want to just open the GP Editor on that GPO, make a small change, apply it, then back it out, and see if that cleans up the issue.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 10:33 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
This is a Small Business Server 2003 only one server. The comparison I made was another customers system.
See image for machine folder contents
[cid:image003.png@01C991C7.83D1BD50]
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:44 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
So is it only one machine where you see the errors? Also, when you drill into the GUID-named folder, what do you see under the Machine folder?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 9:21 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Yes the sysvol path, guid, all have the correct permissions. (all compared to another server)
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:12 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
It looks like that GPMC can either not find or cannot read the contents of the SYSVOL portion of the GPO. On your DC (assuming you only have one) can you verify that under \\domain name\sysvol\domainname\policies, that there is a folder name for the GUID of that GPO, that the folder has files in it and that the permissions on the folder allow at least Authenticated Users the ability to read it?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 7:21 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
I have a customer that has Small Business Server 2003 SP2 installed. I'm getting userenv errors in the app log 1030 and 1058.
When I try to open GPMC, I get a semaphore timeout, then it opens. I think I have a corrupt Domain Password Policy. See Picture.
The other policies open up just fine. How can I fix this?
| | | |
| Darren
Posts:103
| | 02/18/2009 4:01 PM |
| OK. I see nothing obviously wrong with this GPO (at least from the
information you've sent so far). Have you tried rebooting this DC? A corrupt
GP setting should not show the entire SYSVOL as being unavailable. It would
likely cause some errors when the GPO is opened, but you're not even getting
that far. If a reboot of the DC does not help, then you might want to delete
and recreate this GPO. It may be possible to salvage some of the settings
files within the existing GPO, though its not a simple process to walk
through. I think the value of that would depend upon how many settings you
have in the GPO and whether you have documented them or backed up the GPO
previously.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 12:42 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ok here's a screen shot of the delegation tab
The dumpgpoinfo.wsf script just came back to a command prompt. No printout
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 1:52 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
OK. Running out of ideas. One more. Can you output the permissions on that
GPO? And post here? You can use dumpGPOInfo.wsf from the GPMC scripts or
even a screen shot from GPMC on the Delegation tab, if you can get to it.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 11:36 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
All Settings seem to be correct in adsiedit. If I try to edit the policy I
get:
Then the editor opens but the tree has a red X
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 1:16 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ok. Do you get that semaphore error on GP Editor as well? Can you backup the
GPO using GPMC backup? Also, not sure if you're comfortable with it, but can
you go into AD using AD Users or Computers or ADSIEdit and open the
GUID-named container for that GPO under CN=Policies,CN=System. Check that
the permissions on that container roughly correspond to the SYSVOL
permissions. Check that the attribute called gpcFileSysPath points to the
UNC path for the SYSVOL portion of the GPO. Let me know what you find.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 11:03 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Unable to edit that particular policy.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 12:47 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
At least on the surface, I don't see anything wrong with the contents of
that folder below, that would cause GPMC to report SYSVOL as being
unavailable. Are you able to edit the GPO (i.e. launch GP Editor)? If so,
you might want to just open the GP Editor on that GPO, make a small change,
apply it, then back it out, and see if that cleans up the issue.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 10:33 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
This is a Small Business Server 2003 only one server. The comparison I made
was another customers system.
See image for machine folder contents
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:44 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
So is it only one machine where you see the errors? Also, when you drill
into the GUID-named folder, what do you see under the Machine folder?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 9:21 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Yes the sysvol path, guid, all have the correct permissions. (all compared
to another server)
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:12 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
It looks like that GPMC can either not find or cannot read the contents of
the SYSVOL portion of the GPO. On your DC (assuming you only have one) can
you verify that under \\domain name\sysvol\domainname\policies, that there
is a folder name for the GUID of that GPO, that the folder has files in it
and that the permissions on the folder allow at least Authenticated Users
the ability to read it?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 7:21 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
I have a customer that has Small Business Server 2003 SP2 installed. I'm
getting userenv errors in the app log 1030 and 1058.
When I try to open GPMC, I get a semaphore timeout, then it opens. I think
I have a corrupt Domain Password Policy. See Picture.
The other policies open up just fine. How can I fix this?
| | | |
| dougdelaney
Posts:43
| | 02/18/2009 4:11 PM |
| make sure the "server" service is running on the DC.
Doug Delaney
Infrastructure Specialist - Integration Engineering-GM
EDS, an HP company
GM Desktop Engineering
985 W. Entrance Dr. 2150
Auburn Hills, MI 48326
Lab: +1 248-365-9187
Tel: +1 248 754-7917
Pg: +1 248 870-0306
Mobile: +1 248 210-4973
E-mail: xxxxxxxxxxxxxxxx <mailto xxxxxxxxxxxxxxxx>
We deliver on our commitments
so you can deliver on yours.
________________________________
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Cruz, Jerome L
Sent: Wednesday, February 18, 2009 3:51 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken... if you were not there already... go down to the Group
Policy Objects node in the GPMC (near the bottom). Look for your GPO
there and click on it there in the left-hand pane. If there are SYSVOL
permission issues, it'll prompt you to 'correct' them.
Jerry Cruz | Group Policies Product Manager | Windows
Infrastructure Architecture | CNO | Boeing IT
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 12:42 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ok here's a screen shot of the delegation tab
The dumpgpoinfo.wsf script just came back to a command prompt.
No printout
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 1:52 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
OK. Running out of ideas. One more. Can you output the
permissions on that GPO? And post here? You can use dumpGPOInfo.wsf from
the GPMC scripts or even a screen shot from GPMC on the Delegation tab,
if you can get to it.
Darren
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 11:36 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
All Settings seem to be correct in adsiedit. If I try to edit
the policy I get:
Then the editor opens but the tree has a red X
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 1:16 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ok. Do you get that semaphore error on GP Editor as well? Can
you backup the GPO using GPMC backup? Also, not sure if you're
comfortable with it, but can you go into AD using AD Users or Computers
or ADSIEdit and open the GUID-named container for that GPO under
CN=Policies,CN=System. Check that the permissions on that container
roughly correspond to the SYSVOL permissions. Check that the attribute
called gpcFileSysPath points to the UNC path for the SYSVOL portion of
the GPO. Let me know what you find.
Darren
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 11:03 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Unable to edit that particular policy.
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 12:47 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
At least on the surface, I don't see anything wrong with the
contents of that folder below, that would cause GPMC to report SYSVOL as
being unavailable. Are you able to edit the GPO (i.e. launch GP Editor)?
If so, you might want to just open the GP Editor on that GPO, make a
small change, apply it, then back it out, and see if that cleans up the
issue.
Darren
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 10:33 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
This is a Small Business Server 2003 only one server. The
comparison I made was another customers system.
See image for machine folder contents
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:44 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
So is it only one machine where you see the errors? Also, when
you drill into the GUID-named folder, what do you see under the Machine
folder?
Darren
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 9:21 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Yes the sysvol path, guid, all have the correct permissions.
(all compared to another server)
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:12 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
It looks like that GPMC can either not find or cannot read the
contents of the SYSVOL portion of the GPO. On your DC (assuming you
only have one) can you verify that under \\domain
name\sysvol\domainname\policies, that there is a folder name for the
GUID of that GPO, that the folder has files in it and that the
permissions on the folder allow at least Authenticated Users the ability
to read it?
Darren
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 7:21 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
I have a customer that has Small Business Server 2003 SP2
installed. I'm getting userenv errors in the app log 1030 and 1058.
When I try to open GPMC, I get a semaphore timeout, then it
opens. I think I have a corrupt Domain Password Policy. See Picture.
The other policies open up just fine. How can I fix this?
| | | |
| ktaczala
Posts:0
| | 02/18/2009 4:17 PM |
| Reboot has not helped, I can open up all the other policies and make changes
with no issues, that sysvol unavailable is only on this one policy. I have
been doing all the changes under Group policy object, not domain.local(same
problem with the policy under domain.local. However all the domain.local
policies are linked to the group policy object policies. If I delete the
Small Business Server Domain Password Policy, do I need to delete from both
lists?
Do I need to delete the folder/guid? Does that get recreated? There's
nothing to important in this policy that I can't setup again. I appreciate
your assistance Darren.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 2:56 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
OK. I see nothing obviously wrong with this GPO (at least from the
information you've sent so far). Have you tried rebooting this DC? A corrupt
GP setting should not show the entire SYSVOL as being unavailable. It would
likely cause some errors when the GPO is opened, but you're not even getting
that far. If a reboot of the DC does not help, then you might want to delete
and recreate this GPO. It may be possible to salvage some of the settings
files within the existing GPO, though its not a simple process to walk
through. I think the value of that would depend upon how many settings you
have in the GPO and whether you have documented them or backed up the GPO
previously.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 12:42 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ok here's a screen shot of the delegation tab
The dumpgpoinfo.wsf script just came back to a command prompt. No printout
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 1:52 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
OK. Running out of ideas. One more. Can you output the permissions on that
GPO? And post here? You can use dumpGPOInfo.wsf from the GPMC scripts or even
a screen shot from GPMC on the Delegation tab, if you can get to it.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 11:36 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
All Settings seem to be correct in adsiedit. If I try to edit the policy I
get:
Then the editor opens but the tree has a red X
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 1:16 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ok. Do you get that semaphore error on GP Editor as well? Can you backup the
GPO using GPMC backup? Also, not sure if you're comfortable with it, but can
you go into AD using AD Users or Computers or ADSIEdit and open the
GUID-named container for that GPO under CN=Policies,CN=System. Check that the
permissions on that container roughly correspond to the SYSVOL permissions.
Check that the attribute called gpcFileSysPath points to the UNC path for the
SYSVOL portion of the GPO. Let me know what you find.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 11:03 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Unable to edit that particular policy.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 12:47 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
At least on the surface, I don't see anything wrong with the contents of that
folder below, that would cause GPMC to report SYSVOL as being unavailable.
Are you able to edit the GPO (i.e. launch GP Editor)? If so, you might want
to just open the GP Editor on that GPO, make a small change, apply it, then
back it out, and see if that cleans up the issue.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 10:33 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
This is a Small Business Server 2003 only one server. The comparison I made
was another customers system.
See image for machine folder contents
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:44 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
So is it only one machine where you see the errors? Also, when you drill into
the GUID-named folder, what do you see under the Machine folder?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 9:21 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Yes the sysvol path, guid, all have the correct permissions. (all compared
to another server)
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:12 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
It looks like that GPMC can either not find or cannot read the contents of
the SYSVOL portion of the GPO. On your DC (assuming you only have one) can
you verify that under \\domain name\sysvol\domainname\policies, that there is
a folder name for the GUID of that GPO, that the folder has files in it and
that the permissions on the folder allow at least Authenticated Users the
ability to read it?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 7:21 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
I have a customer that has Small Business Server 2003 SP2 installed. I'm
getting userenv errors in the app log 1030 and 1058.
When I try to open GPMC, I get a semaphore timeout, then it opens. I think
I have a corrupt Domain Password Policy. See Picture.
The other policies open up just fine. How can I fix this?
| | | |
| ktaczala
Posts:0
| | 02/18/2009 4:24 PM |
| I found the Problem, Now I have to find out why. TCP/IP NetBIOS Helper
service was not started, although it was set to automatic. Once I started
that the policy opened up just fine.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On
Behalf Of Delaney, Doug
Sent: Wednesday, February 18, 2009 3:04 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
make sure the "server" service is running on the DC.
Doug Delaney
Infrastructure Specialist - Integration Engineering-GM
EDS, an HP company
GM Desktop Engineering
985 W. Entrance Dr. 2150
Auburn Hills, MI 48326
Lab: +1 248-365-9187
Tel: +1 248 754-7917
Pg: +1 248 870-0306
Mobile: +1 248 210-4973
E-mail: xxxxxxxxxxxxxxxx <mailtoxxxxxxxxxxxxxxxx>
We deliver on our commitments
so you can deliver on yours.
________________________________
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Cruz, Jerome L
Sent: Wednesday, February 18, 2009 3:51 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken... if you were not there already... go down to the Group Policy
Objects node in the GPMC (near the bottom). Look for your GPO there and click
on it there in the left-hand pane. If there are SYSVOL permission issues,
it'll prompt you to 'correct' them.
Jerry Cruz | Group Policies Product Manager | Windows Infrastructure
Architecture | CNO | Boeing IT
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 12:42 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ok here's a screen shot of the delegation tab
The dumpgpoinfo.wsf script just came back to a command prompt. No
printout
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 1:52 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
OK. Running out of ideas. One more. Can you output the permissions on
that GPO? And post here? You can use dumpGPOInfo.wsf from the GPMC scripts or
even a screen shot from GPMC on the Delegation tab, if you can get to it.
Darren
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 11:36 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
All Settings seem to be correct in adsiedit. If I try to edit the
policy I get:
Then the editor opens but the tree has a red X
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 1:16 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ok. Do you get that semaphore error on GP Editor as well? Can you
backup the GPO using GPMC backup? Also, not sure if you're comfortable with
it, but can you go into AD using AD Users or Computers or ADSIEdit and open
the GUID-named container for that GPO under CN=Policies,CN=System. Check that
the permissions on that container roughly correspond to the SYSVOL
permissions. Check that the attribute called gpcFileSysPath points to the UNC
path for the SYSVOL portion of the GPO. Let me know what you find.
Darren
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 11:03 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Unable to edit that particular policy.
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 12:47 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
At least on the surface, I don't see anything wrong with the contents
of that folder below, that would cause GPMC to report SYSVOL as being
unavailable. Are you able to edit the GPO (i.e. launch GP Editor)? If so, you
might want to just open the GP Editor on that GPO, make a small change, apply
it, then back it out, and see if that cleans up the issue.
Darren
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 10:33 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
This is a Small Business Server 2003 only one server. The comparison
I made was another customers system.
See image for machine folder contents
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:44 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
So is it only one machine where you see the errors? Also, when you
drill into the GUID-named folder, what do you see under the Machine folder?
Darren
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 9:21 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Yes the sysvol path, guid, all have the correct permissions. (all
compared to another server)
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:12 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
It looks like that GPMC can either not find or cannot read the
contents of the SYSVOL portion of the GPO. On your DC (assuming you only
have one) can you verify that under \\domain name\sysvol\domainname\policies,
that there is a folder name for the GUID of that GPO, that the folder has
files in it and that the permissions on the folder allow at least
Authenticated Users the ability to read it?
Darren
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 7:21 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
I have a customer that has Small Business Server 2003 SP2 installed.
I'm getting userenv errors in the app log 1030 and 1058.
When I try to open GPMC, I get a semaphore timeout, then it opens.
I think I have a corrupt Domain Password Policy. See Picture.
The other policies open up just fine. How can I fix this?
| | | |
| Darren
Posts:103
| | 02/18/2009 4:51 PM |
| Fascinating! And now it makes complete sense. That service is used by
Windows to resolve DFS names (e.g. \\domain\sysvol) to NetBIOS names
\\DC1\sysvol). I've seen GP Processing fail when that service is stopped but
I've not seen the effect in GPMC that you were seeing, but it totally makes
sense! Thanks for reporting back Ken. I think we all learned something
today!
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 1:20 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
I found the Problem, Now I have to find out why. TCP/IP NetBIOS Helper
service was not started, although it was set to automatic. Once I started
that the policy opened up just fine.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Delaney, Doug
Sent: Wednesday, February 18, 2009 3:04 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
make sure the "server" service is running on the DC.
Doug Delaney
Infrastructure Specialist - Integration Engineering-GM
EDS, an HP company
GM Desktop Engineering
985 W. Entrance Dr. 2150
Auburn Hills, MI 48326
Lab: +1 248-365-9187
Tel: +1 248 754-7917
Pg: +1 248 870-0306
Mobile: +1 248 210-4973
E-mail: <mailtoxxxxxxxxxxxxxxxx> xxxxxxxxxxxxxxxx
We deliver on our commitments
so you can deliver on yours.
_____
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Cruz, Jerome L
Sent: Wednesday, February 18, 2009 3:51 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken. if you were not there already. go down to the Group Policy Objects node
in the GPMC (near the bottom). Look for your GPO there and click on it there
in the left-hand pane. If there are SYSVOL permission issues, it'll prompt
you to 'correct' them.
Jerry Cruz | Group Policies Product Manager | Windows Infrastructure
Architecture | CNO | Boeing IT
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 12:42 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ok here's a screen shot of the delegation tab
The dumpgpoinfo.wsf script just came back to a command prompt. No printout
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 1:52 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
OK. Running out of ideas. One more. Can you output the permissions on that
GPO? And post here? You can use dumpGPOInfo.wsf from the GPMC scripts or
even a screen shot from GPMC on the Delegation tab, if you can get to it.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 11:36 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
All Settings seem to be correct in adsiedit. If I try to edit the policy I
get:
Then the editor opens but the tree has a red X
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 1:16 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ok. Do you get that semaphore error on GP Editor as well? Can you backup the
GPO using GPMC backup? Also, not sure if you're comfortable with it, but can
you go into AD using AD Users or Computers or ADSIEdit and open the
GUID-named container for that GPO under CN=Policies,CN=System. Check that
the permissions on that container roughly correspond to the SYSVOL
permissions. Check that the attribute called gpcFileSysPath points to the
UNC path for the SYSVOL portion of the GPO. Let me know what you find.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 11:03 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Unable to edit that particular policy.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 12:47 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
At least on the surface, I don't see anything wrong with the contents of
that folder below, that would cause GPMC to report SYSVOL as being
unavailable. Are you able to edit the GPO (i.e. launch GP Editor)? If so,
you might want to just open the GP Editor on that GPO, make a small change,
apply it, then back it out, and see if that cleans up the issue.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 10:33 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
This is a Small Business Server 2003 only one server. The comparison I made
was another customers system.
See image for machine folder contents
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:44 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
So is it only one machine where you see the errors? Also, when you drill
into the GUID-named folder, what do you see under the Machine folder?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 9:21 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Yes the sysvol path, guid, all have the correct permissions. (all compared
to another server)
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, February 18, 2009 11:12 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
Ken-
It looks like that GPMC can either not find or cannot read the contents of
the SYSVOL portion of the GPO. On your DC (assuming you only have one) can
you verify that under \\domain name\sysvol\domainname\policies, that there
is a folder name for the GUID of that GPO, that the folder has files in it
and that the permissions on the folder allow at least Authenticated Users
the ability to read it?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Ken Taczala
Sent: Wednesday, February 18, 2009 7:21 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Event Errors 1030 & 1058 Corrupt GPO?
I have a customer that has Small Business Server 2003 SP2 installed. I'm
getting userenv errors in the app log 1030 and 1058.
When I try to open GPMC, I get a semaphore timeout, then it opens. I think
I have a corrupt Domain Password Policy. See Picture.
The other policies open up just fine. How can I fix this?
| | | |
|
|