Erros in Event Log on DC \ DNS 2003 server

[Bubba Thomas]

My DC is logging the following events in the event log... I have looked for
an answer on MS Knowledge Base site but I cannot find out what they are
about. Any help would be appreciated.



Windows cannot access the file gpt.ini for GPO
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=mydomain,
DC=com. The file must be present at the location
<\\mydomain.com\sysvol\mydomain.com\Policies\{31B2F340-016D-11D2-945F-00C04F
B984F9}\gpt.ini>. (Access is denied. ). Group Policy processing aborted.


ThanX

Bubba !

 

[Simon Geary]

This looks very much like a permissions problem, have you checked the NTFS
security settings on gpt.ini?

 

[Kevin D. Goodknecht]

In

This looks very much like a permissions problem, have you checked the
NTFS security settings on gpt.ini?


CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=mydomain,
<\\mydomain.com\sysvol\mydomain.com\Policies\{31B2F340-016D-11D2-945F-00C04F

type this in your browser \\mydomian.com\SYSVOL
Authenticated users need Read and execute, List, and read permissions;
SYSTEM and Administrators need Full Control

Just to add, this could also be improper resolution of the blank record.

Use nslookup to resolve mydomain.com it should only resolve to the internal
private address that has File Sharing bound.

 

[Bubba Thomas]

I looked at the rights on the file and all parent folders and it looks fine.

Bubba !

 

[Bubba Thomas]

Kevin,

I tried what you said on both the server and a workstation and I was able
to see everything fine.

Nslookup resolution worked fine.

BUT .....
What do you mean by this ? .... "File Sharing Bound" ?

Bubba !

 

[Kevin D. Goodknecht]

In

Kevin,

I tried what you said on both the server and a workstation and I
was able to see everything fine.

Nslookup resolution worked fine.

BUT .....
What do you mean by this ? .... "File Sharing Bound" ?

In control panel, Network and Dial up connections, Advanced menu, select
advanced settings.
In the Connections pane, your internal interface should be at the top of the
list, in the Bindings pane File Sharing and Client for MS Networks should be
checked.

If they are checked then this is most likely a permissions problem.
In your browser type \\mydomain.com\sysvol right click select properties on
the Security tab click the Advanced button Permissions should be for This
folder, subfolders and files. Reset the permissions and propagate if
necessary. Be careful that you give the proper permissions to groups. But
make sure Administrators have Full control.

 

[Bubba Thomas]

Kevin....

I guess I am a rock.... Firstly tho in my defense.... I am using Win2003 Ent
and the instructions are apparently for Win2K or NT 4 as I do not have any
of the settings you mention. As for the permissions... I am thinking they
are ok . I am not 100% sure but they appear ok.


ThanX for ALL your help


Bubba !