Group Policy Update fails with Userenv errors Event codes 1101 and 1030

[edward]

If you have having problems updating group policies, and have Event code ID's 1030 and 1101. (This may work with 1058 errors as well, but I have not had one of those) Something has changed the permissions on objects in the Active Directory. I am still looking for the cause, but the fix is to review the object path, using ADSIedit, found in error message 1101 (in the case below it is: OU=NTech,DC=ntechi,DC=com) I found that authenticated users had no permision to read the OU=NTech object. I added read permissions and the error went away.

Of course all the disclaimers about using adsiedit apply. :-)

If anyone notices what is changing the permissions, I would very much like to know.

Event Code ID 1030 States:
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Code 1101:

Windows cannot access the the object OU=NTech,DC=ntechi,DC=com in Active Directory. The access to the object may be denied. Group Policy processing aborted.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.