Jump to content

SUBIECTE NOI
« 1 / 5 »
RSS
Digi conectare 2 routere prin fir

Succesiune notar versus instanta ...

Montaj aer conditionat in balcon ...

Cont curent mulți valuta far...
 Sugestii plan casa

Experiente cu firme care cumpara ...

joc idem Half Life gratis

PC game stream catre Nvidia Shiel...
 Pompa de apa HEPU ?!

Vreau o masina electrica de tocat...

Cum ajunge remorca de tir inapoi ...

Alt "Utilizator nou" pe T...
 ULBS INFORMATICA

Index preturi

Boxa membrana tweeter infundata

Am nevoie de poze cu un curcubeu
 

Eventid 1030 & 1058 in Application Log:

- - - - -
  • Please log in to reply
29 replies to this topic

#1
Tyby

Tyby

    blue balls

  • Grup: Super Moderators
  • Posts: 15,390
  • Înscris: 29.11.2001
Environment: AD cu doua DC-uri si approx 30 clienti de diverse naturi (win 2k / XP majoritatea).

Primul DC: Windows 2003 Server SE (PDC)

Al doilea: Windows 2000 Server


De ceva timp (3 saptamani) am cele 2 erori (infratite) pe 2k3 Srv, in Application Log, la fiecare 5 minute:

Event Type:	Error
Event Source:	Userenv
Event Category:	None
Event ID:  1030
Date:  01.07.2005
Time:  14:42:49
User:  NT AUTHORITY\SYSTEM
Computer:	CICERO
Description:
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type:	Error
Event Source:	Userenv
Event Category:	None
Event ID:  1058
Date:  01.07.2005
Time:  14:42:49
User:  NT AUTHORITY\SYSTEM
Computer:	CICERO
Description:
Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domeniu,DC=ro. The file must be present at the location <\\domeniu.ro\sysvol\domeniu.ro\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. (Access is denied. ). Group Policy processing aborted. 

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

La gpupdate nu imi apare eroarea, daca lansez \\domeniu.ro\sysvol\domeniu.ro\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini mere OK, NU am nici o alta eroare in EventLog, pe nicaieri.

Pe Win2k nu am nimic straniu in EventLog ... Oricum, nu apar cele 2 minuni.

Am citit vreo cateva scenarii din linkurile (si follow-up-urile MS), dar nu prea s-a potrivit nimic.

Any ideea?

Thx.

#2
Tyby

Tyby

    blue balls

  • Grup: Super Moderators
  • Posts: 15,390
  • Înscris: 29.11.2001
Strange .... ultimul set e la 14:42, cand m-am logat eu pe TS pe DC, au trecut 15 minute de atunci si nu au mai aparut. Oricum, lista e impresionanta, si as vrea sa-i dau de cap ... Ca era destul de frumos eventlog-ul inainte!  :w00t:

#3
PreTXT

PreTXT

    Moderator

  • Grup: Senior Members
  • Posts: 2,053
  • Înscris: 09.01.2003
man, parca ai mai avut problema asta, nu  :huh:  .. si era ceva legat de DNS (parca era multihomed serverul, ca facea si routing) ... la fel e si acum ?

anyway, pe root-ul drive-ului de sysvol ai Everyone cu Read&Execute ?

#4
Tyby

Tyby

    blue balls

  • Grup: Super Moderators
  • Posts: 15,390
  • Înscris: 29.11.2001
Nu, problema a fost pe alta masina / domeniu.

Aici e diferita situatia ... nu face routing, doar DC & some Basic stuff (AV Server, some db server)

#5
PreTXT

PreTXT

    Moderator

  • Grup: Senior Members
  • Posts: 2,053
  • Înscris: 09.01.2003
cum e cu permisiunile alea ? uita-te si aici la lista de servicii care ar trebui sa fie pornita ca sa proceseze corect winlogon-ul.

#6
Tyby

Tyby

    blue balls

  • Grup: Super Moderators
  • Posts: 15,390
  • Înscris: 29.11.2001
hmmm .. spooky ... cat stau logat pe masina (de fapt conectat, ca nu ma deloghez la terminarea sesiunii, ci doar ma deconectez) NU apar erorile respective ... Am fost delogat de test vreo 7 minute, au aparut iar 2 seturi ...

Am verificat drepturile ... stai asa, tel ...

#7
PreTXT

PreTXT

    Moderator

  • Grup: Senior Members
  • Posts: 2,053
  • Înscris: 09.01.2003
daca incerci sa deschizi gpo-ul asociat in ADUC, iti merge?

#8
Tyby

Tyby

    blue balls

  • Grup: Super Moderators
  • Posts: 15,390
  • Înscris: 29.11.2001
da ... se deschide cu Group Policy Management ...

#9
PreTXT

PreTXT

    Moderator

  • Grup: Senior Members
  • Posts: 2,053
  • Înscris: 09.01.2003
scuze de intarziere, dar am fost plecat ... mai exista problema?
daca da, ai cumva un serviciu care ruleaza sub alte credentials ?

#10
Tyby

Tyby

    blue balls

  • Grup: Super Moderators
  • Posts: 15,390
  • Înscris: 29.11.2001
se pare ca exista

Nu, nu am servicii care sa ruleze sub alte credentials.

#11
PreTXT

PreTXT

    Moderator

  • Grup: Senior Members
  • Posts: 2,053
  • Înscris: 09.01.2003
man, da-i si tu drumul la debugging pe user environment, poate logul spune mai multe ..

http://support.micro....com/kb/221833/

#12
Tyby

Tyby

    blue balls

  • Grup: Super Moderators
  • Posts: 15,390
  • Înscris: 29.11.2001
ok, bagat si apoi dat disconnected ... tin la curent cu ce apare ...

Repet: e foarte curios ca apare cand NU sunt conectat pe RDP ... In locatie nu am ajuns sa vad cum face pe consola ... dar daca intru pe consola cu /console din RDP, se comporta la fel ca in TS Normal Session.

Accesul era pe system drive (root) la Everyone null (am modificat in read+execute). Dar  e mult de atunci ....

#13
Tyby

Tyby

    blue balls

  • Grup: Super Moderators
  • Posts: 15,390
  • Înscris: 29.11.2001
am activat debug (LOGFILE & VERBOSE)... cam asta am obtinut pana acum - vezi attach ... io acum is prea batut pentru a mai da ochi prin el ... am vazut cateva chestii, da' nu stau sa le verific ... maine, la cafea probabil.

Attached File  eventid_userevnt_dbg_1.txt   206.4K   304 downloads

oricum, cam asta apare la fiecare 5 minute:

USERENV(200.1084) 23:38:46:697 ProcessGPOs:
USERENV(200.1084) 23:38:46:697 ProcessGPOs:
USERENV(200.1084) 23:38:46:697 ProcessGPOs:  Starting computer Group Policy (Background) processing...
USERENV(200.1084) 23:38:46:697 ProcessGPOs:
USERENV(200.1084) 23:38:46:697 ProcessGPOs:
USERENV(200.1084) 23:38:46:697 EnterCriticalPolicySectionEx: Entering with timeout 600000 and flags 0x0
USERENV(200.1084) 23:38:46:697 EnterCriticalPolicySectionEx: Machine critical section has been claimed.  Handle = 0x78c
USERENV(200.1084) 23:38:46:697 EnterCriticalPolicySectionEx: Leaving successfully.
USERENV(200.1084) 23:38:46:713 ProcessGPOs:  Machine role is 3.
USERENV(200.1084) 23:38:46:713 PingComputer: Adapter speed 10000000 bps
USERENV(200.1084) 23:38:46:713 PingComputer:  First time:  0
USERENV(200.1084) 23:38:46:713 PingComputer:  Fast link.  Exiting.
USERENV(200.1084) 23:38:46:713 ProcessGPOs: network name is 
USERENV(200.1084) 23:38:46:713 ProcessGPOs:  User name is:  CN=CICERO,OU=Domain Controllers,DC=domeniu,DC=ro, Domain name is:  domeniu.ro
USERENV(200.1084) 23:38:46:713 ProcessGPOs: Domain controller is:  \\cicero.domeniu.ro  Domain DN is domeniu.ro
USERENV(200.1084) 23:38:46:728 ReadGPExtensions: Rsop entry point not found for dskquota.dll.
USERENV(200.1084) 23:38:46:728 ReadGPExtensions: Rsop entry point not found for gptext.dll.
USERENV(200.1084) 23:38:46:728 ReadGPExtensions: Rsop entry point not found for scecli.dll.
USERENV(200.1084) 23:38:46:728 ReadExtStatus: Reading Previous Status for extension {35378EAC-683F-11D2-A89A-00C04FBBCFA2}
USERENV(200.1084) 23:38:46:728 ReadExtStatus: Reading Previous Status for extension {0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}
USERENV(200.1084) 23:38:46:728 ReadExtStatus: Reading Previous Status for extension {25537BA6-77A8-11D2-9B6C-0000F8080861}
USERENV(200.1084) 23:38:46:728 ReadExtStatus: Reading Previous Status for extension {3610eda5-77ef-11d2-8dc5-00c04fa31a66}
USERENV(200.1084) 23:38:46:728 ReadExtStatus: Reading Previous Status for extension {426031c0-0b47-4852-b0ca-ac3d37bfcb39}
USERENV(200.1084) 23:38:46:744 ReadExtStatus: Reading Previous Status for extension {42B5FAAE-6536-11d2-AE5A-0000F87571E3}
USERENV(200.1084) 23:38:46:744 ReadExtStatus: Reading Previous Status for extension {827D319E-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(200.1084) 23:38:46:744 ReadStatus: Read Extension's Previous status successfully.
USERENV(200.1084) 23:38:46:744 ReadExtStatus: Reading Previous Status for extension {A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}
USERENV(200.1084) 23:38:46:744 ReadExtStatus: Reading Previous Status for extension {B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(200.1084) 23:38:46:744 ReadExtStatus: Reading Previous Status for extension {c6dc5466-785a-11d2-84d0-00c04fb169f7}
USERENV(200.1084) 23:38:46:744 ReadExtStatus: Reading Previous Status for extension {e437bc1c-aa7d-11d2-a382-00c04f991e27}
USERENV(200.1084) 23:38:46:760 ProcessGPOs: Calling GetGPOInfo for normal policy mode
USERENV(200.1084) 23:38:46:760 GetGPOInfo:  ********************************
USERENV(200.1084) 23:38:46:760 GetGPOInfo:  Entering...
USERENV(200.1084) 23:38:46:760 GetGPOInfo:  Server connection established.
USERENV(200.1084) 23:38:46:760 GetGPOInfo:  Bound successfully.
USERENV(200.1084) 23:38:46:775 SearchDSObject:  Searching <OU=Domain Controllers,DC=domeniu,DC=ro>
USERENV(200.1084) 23:38:46:775 SearchDSObject:  Found GPO(s):  <[LDAP://CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=domeniu,DC=ro;0]>
USERENV(200.1084) 23:38:46:775 ProcessGPO:  ==============================
USERENV(200.1084) 23:38:46:775 ProcessGPO:  Deferring search for <LDAP://CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=domeniu,DC=ro>
USERENV(200.1084) 23:38:46:791 SearchDSObject:  Searching <DC=domeniu,DC=ro>
USERENV(200.1084) 23:38:46:791 SearchDSObject:  Found GPO(s):  <[LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domeniu,DC=ro;0]>
USERENV(200.1084) 23:38:46:791 ProcessGPO:  ==============================
USERENV(200.1084) 23:38:46:791 ProcessGPO:  Deferring search for <LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domeniu,DC=ro>
USERENV(200.1084) 23:38:46:791 SearchDSObject:  Searching <CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domeniu,DC=ro>
USERENV(200.1084) 23:38:46:791 SearchDSObject:  No GPO(s) for this object.
USERENV(200.1084) 23:38:46:806 EvaluateDeferredGPOs:  Searching for GPOs in cn=policies,cn=system,DC=domeniu,DC=ro
USERENV(200.1084) 23:38:46:806 ProcessGPO:  ==============================
USERENV(200.1084) 23:38:46:806 ProcessGPO:  Searching <CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domeniu,DC=ro>
USERENV(200.1084) 23:38:46:806 ProcessGPO:  Machine has access to this GPO.
USERENV(200.1084) 23:38:46:806 ProcessGPO:  GPO passes the filter check.
USERENV(200.1084) 23:38:46:806 ProcessGPO:  Found functionality version of:  2


USERENV(200.1084) 23:38:46:822 ProcessGPO:  Found file system path of:  <\\domeniu.ro\sysvol\domeniu.ro\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(200.1084) 23:38:46:853 ProcessGPO:  Couldn't find the group policy template file <\\domeniu.ro\sysvol\domeniu.ro\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>, error = 0x5.
USERENV(200.1084) 23:38:46:853 ProcessGPO:  ==============================
USERENV(200.1084) 23:38:46:853 EvalList:  ProcessGPO failed
USERENV(200.1084) 23:38:46:853 GetGPOInfo:  EvaluateDeferredGPOs failed. Exiting
USERENV(200.1084) 23:38:46:853 GetGPOInfo:  Leaving with 0
USERENV(200.1084) 23:38:46:869 GetGPOInfo:  ********************************
USERENV(200.1084) 23:38:46:869 ProcessGPOs: GetGPOInfo failed.


USERENV(200.1084) 23:38:46:869 ProcessGPOs: No WMI logging done in this policy cycle.
USERENV(200.1084) 23:38:46:869 ProcessGPOs: Processing failed with error 5.
USERENV(200.1084) 23:38:46:869 LeaveCriticalPolicySection: Critical section 0x78c has been released.
USERENV(200.1084) 23:38:46:869 ProcessGPOs: Computer Group Policy has been applied.
USERENV(200.1084) 23:38:46:869 ProcessGPOs: Leaving with 0.
USERENV(200.1084) 23:38:46:869 EnterCriticalPolicySectionEx: Entering with timeout 600000 and flags 0x0
USERENV(200.1084) 23:38:46:885 EnterCriticalPolicySectionEx: Machine critical section has been claimed.  Handle = 0x78c
USERENV(200.1084) 23:38:46:885 EnterCriticalPolicySectionEx: Leaving successfully.
USERENV(200.1084) 23:38:46:885 LeaveCriticalPolicySection: Critical section 0x78c has been released.
USERENV(200.1084) 23:38:46:885 GPOThread:  Next refresh will happen in 5 minutes

am lasat intentionat niste spatii in codul de mai sus ...

Edited by Tyby, 06 July 2005 - 23:42.


#14
PreTXT

PreTXT

    Moderator

  • Grup: Senior Members
  • Posts: 2,053
  • Înscris: 09.01.2003
ce permisiuni ai aici:
\\domeniu.ro\sysvol\domeniu.ro\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini ?

ruleaza si un dcdiag si vezi ce raporteaza (parca totusi tot a DNS imi miroase) ...

#15
Tyby

Tyby

    blue balls

  • Grup: Super Moderators
  • Posts: 15,390
  • Înscris: 29.11.2001
drepturi pe gpt.ini:

Domain Admins: full
SYSTEM: full
Auth users: read / read & execute
Enterpr DCs: read / read & execute
Auth users: read / read & execute
Users: read / read & execute

DCDIAG curat-curatel (rulat cu optiunile default / verbose)

#16
PreTXT

PreTXT

    Moderator

  • Grup: Senior Members
  • Posts: 2,053
  • Înscris: 09.01.2003

Quote

Domain controllers have the read and apply rights to the Domain Controllers Policy.

ce zice GPMC-ul ?

si apropo de permisiuni:

Quote

Windows Server 2003
1. Set the folder security permissions. To do this, follow these steps:
a.  In Windows Explorer, right-click the %SystemRoot%\Windows\Sysvol folder, and then click Properties.
b.  On the Security tab, click Advanced, click to clear the Allow inheritable permissions from parent to propagate to this object check box, and then click OK. Make sure that the security settings match the following settings, and then click OK:
Administrators: Full Control
Authenticated Users: Read, Read & Execute, and List Folder Contents
Creator Owner: Nothing selected
Server Operators: Read, Read & Execute, and List Folder Contents
System: Full Control
c.  Right-click the %SystemRoot%\Windows\Sysvol\Sysvol folder, and then click Properties.
d.  On the Security tab, click Advanced, click to clear the Allow inheritable permissions from parent to propagate to this object check box, and then click OK two times.
e.  Right-click the %SystemRoot%\Winnt\Sysvol\Sysvol\domain folder, and then click Properties.
f.  On the Security tab, click Advanced, click to clear the Allow inheritable permissions from parent to propagate to this object check box, and then click OK two times.
g.  Right-click the %SystemRoot%\Winnt\Sysvol\Sysvol\domain\Policies folder, and then click Properties.
h.  On the Security tab, click Advanced, click to clear the Allow inheritable permissions from parent to propagate to this object check box, and then click OK. Make sure that the security settings match the following settings, and then click OK:
Administrators: Full Control
Authenticated Users: Read, Read & Execute, and List Folder Contents
Creator Owner: Nothing selected
Group Policy Creator Owners: Read, Read & Execute, List Folder Contents, Modify, and Write
Server Operators: Read, Read & Execute, and List Folder Contents
System: Full Control
i.  For each file or folder that is located in the %SystemRoot%\Winnt\Sysvol\Sysvol\domain\Policies folder, right-click the file or folder, and then click Properties.
j.  On the Security tab, click Advanced, click to select the Allow inheritable permissions from parent to propagate to this object check box, and then click OK two times.
2. Open Active Directory Users and Computers. To do this, click Start, click All Programs, and then click Administrative Tools.
3. Expand Active Directory Users and Computers, expand the domain name, right-click Domain Controllers, and then click Properties.
4. On the Group Policy tab, click Default Domain Controllers Policy, and then click Edit.

Note The Edit button is not available if the Group Policy Management Console is installed. In this scenario, click Open to start the Group Policy Management Console, expand domain name, expand Domain Controllers, right-click Default Domain Controllers Policy, and then click Edit.

For additional information about the Group Policy Management Console, visit the following Microsoft Web site:
http://www.microsoft...mc/default.mspx
5. Expand the following folders:
Computer Configuration
Windows Settings
Security Settings
Local Policies
6. Click User Rights Assignment, and then double-click Bypass traverse checking. The following default settings should be present:
Authenticated Users
Everyone
Administrators
To add these groups if they are not present, click Add User or Group, and then click Browse.
7. Click Start, click Run, type gpupdate, and then click OK.
8. Verify that the sysvol share permissions are set correctly, as follows:
Administrators = Full Control
Authenticated Users = Full Control
Everyone = Read
Note If this procedure does not resolve the issue, or if you have problems accessing the Global Policy, examine the binding order on the server to make sure the internal network adaptor is first in the binding order list. To examine the binding order, follow these steps:
1. Right-click My Network Places, and then click Properties.
2. On the Advanced menu, click Advanced Settings.
3. In the Connections box, make sure that the internal network adaptor is listed first. If it is not, use the arrows to move it to the top of the list.

nu ma injura pentru atatea verificari, dar sunt in pana de idei ;) ...

#17
Tyby

Tyby

    blue balls

  • Grup: Super Moderators
  • Posts: 15,390
  • Înscris: 29.11.2001
mda, si eu ... le "procesez" acum ...

Thx!

#18
Tyby

Tyby

    blue balls

  • Grup: Super Moderators
  • Posts: 15,390
  • Înscris: 29.11.2001
asa ... pana acum:

Quote

e.  Right-click the %SystemRoot%\Winnt\Sysvol\Sysvol\domain folder, and then click Properties.

g.  Right-click the %SystemRoot%\Winnt\Sysvol\Sysvol\domain\Policies folder, and then click Properties.

Nu ezista %SystemRoot%\Winnt\Sysvol\Sysvol\domain folder.

In Sysvol\sysvol am doar folderul domeniu.ro

foderul DOMAIN il am DOAR in Windows\Sysvol , NU si in windows\Sysvol\Sysvol

PS: banuiesc ca e vorba de windows, si nu winnt, din moment ce vorbim de Win2k3, si nu de win2k.

Deocamdata sunt stucked @ this point ...

Anunturi

Chirurgia cranio-cerebrală minim invazivă Chirurgia cranio-cerebrală minim invazivă

Tehnicile minim invazive impun utilizarea unei tehnologii ultramoderne.

Endoscoapele operatorii de diverse tipuri, microscopul operator dedicat, neuronavigația, neuroelectrofiziologia, tehnicile avansate de anestezie, chirurgia cu pacientul treaz reprezintă armamentarium fără de care neurochirurgia prin "gaura cheii" nu ar fi posibilă. Folosind tehnicile de mai sus, tratăm un spectru larg de patologii cranio-cerebrale.

www.neurohope.ro

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Forumul Softpedia foloseste "cookies" pentru a imbunatati experienta utilizatorilor Accept
Pentru detalii si optiuni legate de cookies si datele personale, consultati Politica de utilizare cookies si Politica de confidentialitate