Event ID: 1058 and 1030 because of DFS

[chicagotech]

Whenever a user login our TS, the follwoing events logged in the Event Viewer.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 4/24/2012
Time: 5:20:32 PM
User: mydomain\blin
Computer: SERVER2
Description:
Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=mydomain,DC=com. The file must be present at the location <\\mydomain.com\sysvol\mydomain.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. (Configuration information could not be read from the domain controller, either because the machine is unavailable, or access has been denied. ). Group Policy processing aborted.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 4/24/2012
Time: 5:20:32 PM
User: mydomain\blin
Computer: SERVER2
Description:
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.

How do you fix it?


--------------------------------------------------------------------------------

[chicagotech]

1. What’s the symptom of issue except for the event?
2. What have you done before the issue happen?

Based on my experience, in general, we need follow the KBs below to handle such issue:

Userenv errors occur and events are logged after you apply Group Policy to computers that are running Windows Server 2003, Windows XP, or Windows 2000
http://support.microsoft.com/kb/887303

There are eight aspects needed to be checked.

Error message when you try to apply a policy setting to Windows Server 2003-based domain controllers and to other domain clients: "Configuration information could not be read from the domain controller"
http://support.microsoft.com/kb/935918

And, the KBs below:

http://support.microsoft.com/kb/842804
http://support.microsoft.com/kb/888943

Best regards

Steven Zhu
Partner Online Technical Community

[chicagotech]

1. When these errors occur, we cannot edit Group Policy. However, we are able to open and edit Group Policy from second DC.

2. We just added second DC to our Windows 2003 domain one week ago.

3. TS users login without any issues..

4. We verified the TCP/IP NetBIOS Helper service, the Net Logon service, and the Remote Procedure Call (RPC) service are started on all computers.

Make sure that Distributed File System (DFS) is enabled on all computers.
Examine the contents and the permissions of the Sysvol folder.
Make sure that the Bypass traverse checking right is granted to the required groups.

5. We did run the dfsutil /purgemupcache command.


--------------------------------------------------------------------------------

[chicagotech]

Actually, the link you provided fixes the problem. The problem is DFS was setup maunal and didn't run. Aftre start DFS, it works without any errors. Thank you very much.
--------------------------------------------------------------------------------