Event ID 1058 The processing of Group Policy failed. Windows attem

[Prakashkumaar]

I have a strange issue with our Group Policy

My setup is as follows

Windows 2003 Active Directory
Windows 2008 Member Server to the AD
Terminal Server Installed on Windows 2008 Server
GPMC Installed and Managed from Windows 2008 server
I have created couple of GPO and everything was working fine. In recent days
we encountered the issue of getting the following error from the Event log of
Windows 2008 server.

The processing of Group Policy failed. Windows attempted to read the file
\\domain.com\SysVol\domain.com\Policies\{7A2EA692-8C20-4FA4-8C5B-1122CC2598FF}\gpt.ini
from a domain controller and was not successful. Group Policy settings may
not be applied until this event is resolved. This issue may be transient and
could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain
controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.

When this error occurs users are not getting the GPO settings (i.e. GPO
doesn't get applied). If I try to go to the folder
\\domain.com\SysVol\domain.com\Policies there I could not see the folder
{7A2EA692-8C20-4FA4-8C5B-1122CC2598FF}. But at the same time if I check it
from my AD server the folders are exist. I really don't know what is
happening there. All I find a solution to make it visible that folder is from
Windows 2008 server I just copy the any of the existing GPO and paste it with
default permissions. The moment copy of the GPO has been created I could see
the folder {7A2EA692-8C20-4FA4-8C5B-1122CC2598FF} visible. Then everything
works fine back.usres are getting their GPO settings applied. But then this
is a temporary solution. After some time again I am getting the same error
back and doing the same steps to make the folders visible back.

Did anybody encounter this issue?

Managing the Windows 2003 domain GPO from a Windows 2008 GPMC is making any
issue? I also give a try installing GPMC on AD server and I don't see any
improvement on this issue.

Any help would be appreciated.

Thanks
Prakash

[Florian Frommherz [MVP]]

Howdie!

Prakashkumaar wrote:
> When this error occurs users are not getting the GPO settings (i.e. GPO
> doesn't get applied). If I try to go to the folder
> \\domain.com\SysVol\domain.com\Policies there I could not see the folder
> {7A2EA692-8C20-4FA4-8C5B-1122CC2598FF}. But at the same time if I check it
> from my AD server the folders are exist. I really don't know what is
> happening there. All I find a solution to make it visible that folder is from
> Windows 2008 server I just copy the any of the existing GPO and paste it with
> default permissions. The moment copy of the GPO has been created I could see
> the folder {7A2EA692-8C20-4FA4-8C5B-1122CC2598FF} visible. Then everything
> works fine back.usres are getting their GPO settings applied. But then this
> is a temporary solution. After some time again I am getting the same error
> back and doing the same steps to make the folders visible back.

I guess I'm not getting your issue -- are you saying that from a client
machine you cannot access the Policies\{7A2EA...} folder as it is not
there and from the Windows Server 2008 server, you can? When trying your
temporary solution, you simply copy an other policy folder and rename it
to the {7A2EA..} name?

Have you checked the three points the event suggests (replication, FRS
errors, DNS)? Are the multiple domain controllers in this domain? Does
the Windows Server 2008 DC have multiple network interfaces?

cheers,

Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste

[Prakashkumaar]

The GPO has only user configuration settings. There is no computer computer
configuration. All the clients have this error. DNS settings are set correct
and basic nslookup functions are seems to be working fine.

Thanks
Prakash

"Darren Mar-Elia" wrote:

> I think the better question is, has anyone not had this issue? :). Prakash,
> this is a very common error. It can indicate any number of problems.
> Essentially the "client" processing GP (in this case your 2008 server)
> cannot read the contents of the GPO in question from the SYSVOL share of the
> DC its using to process policy. This could be caused by FRS replication
> problems with SYSVOL, with DNS issues on the client, or with some other
> network stack issue at the client. In order to narrow the problem, is this
> happening for just computer-specific GP processing on the 2008 server or
> both computer and user? Do any other clients have this error?
>
> Darren
>
> --
> Darren Mar-Elia
> MS-MVP-Windows Server--Group Policy
>
> *******************************
> Secure and configure your Windows desktops accurately every time without
> having to learn or install new technology.
> Find out more about Desktop Policy Manager at
> http://www.sdmsoftware.com/desktop_management
> *******************************
> "Prakashkumaar" <Prakas...@discussions.microsoft.com> wrote in message
> news:9FCEE5CC-1A52-4D65...@microsoft.com...

[Prakashkumaar]

I think you misunderstood my setup.

My domain is running on Windows 2003 R2 and not on the Windows 2008
Windows 2008 is member server to the domain and installed with Terminal
services. My users are just RDP to windows 2008 server in order to access the
application installed on it.

I don't see the three points suggested in event logs are making any sense as
I could manage to get rid out of this error just by copy and paste the any
existing GPO.

Do we need to anything on the Windows 2008 member server in order to access
the folders under \\domain.com\sysvol\domain.com\polices ? I really get
confused as this issue is that I'm not able to access that folder. Those
folders get disappeared and can be make it visible just by copy and paste the
GPO.

Thanks
Prakash

[Sacko]

"Prakashkumaar" wrote:

I'm with you on this one.

Same issue. Single 2008 server w/2 Vista Clients. 1058 errors show up. I'm
unable to access the netlogon share locally from the server. (using the UNC
name \\server1) I reboot the server, everything is fine for a while.