Event Errors: 1058 and 1030

[jasonwilliams74]

Even though im running Windows Server 2003, I have researched and these
errors also apply to Windows 2K as well.

Basically, here is what is going on.
I came into work last Friday and was reviewing my Event Viewer logs on
my DC. I saw a bunch of errors in the 'application' portion in event
viewer. Specifically, Errors 1058 and 1030.

After researching more and more (and becoming ever so frustrated with
this), I have figured out that one of our particular GPO's is not being
applied. I've poked around a bit, and found this from Microsoft:

http://support.microsoft.com/default.aspx?scid=kb;en-us;887303

I also contacted them regarding a 'hotfix', which they did give me. The
catch is, on the phone they said, "This should not be applied in a
production environment." Well, its not like I run AD for the fun of it.
It annoyed me a bit.

Anyway, playing around more in the GPMC tool, I did a Group Policy
Results test. Sure enough, the one particular GPO is being denied with
the reason of 'empty'.

I have tried just adjusting things in all the GPO's and applying them
(not changing anything, just disable, enable, keep the original stuf,
then hit apply) in hopes AD will rewrite the permissions. So far, no
luck.

This is really starting to frustrate me.

Anyone have any idea on what I can do to fix this?

Much appreciated.

jas

 

[jasonwilliams74]

I should also say, I have searched the group here and read responses. I
can open up the sysvol share no problem, from any computer.

It is referencing the gpt.ini file specifically. Has anyone tried a
"dummy" file in there?

Anyone had success fixing this?

Driving me nuts.

Jas

 

[Ace Fekay [MVP]]

In

I should also say, I have searched the group here and read responses.
I can open up the sysvol share no problem, from any computer.

It is referencing the gpt.ini file specifically. Has anyone tried a
"dummy" file in there?

Anyone had success fixing this?

Driving me nuts.

Jas

Numerous issues can cause this. Take a look at this response I gave someone
the other day in the windows.server.active_directory newsgroup. Also, post
an ipconfig /all from the workstation and one from your DC.

=====================================
Did you apply SP1 on your 2003 DCs?

Are all DCs 2003?

What Event log errors are in any of the Event logs on the DC(s)?

In that article that you mentioned earlier, 842804, did you make those reg
changes and DFSutil command on your 2003 DC as suggested?

Is the DFS service running on the DC(s)?

Is the DHCP Client service running on the DC(s)? (Despite it's name, it's a
required service that deals with registration and the resolver service,
whether statically configured or not).

Is/are any of the DC(s) multihomed (meaning they have more than one NIC)?
(If so, this can surely cause this, among other things, which is why we
normally don't recommend multihoming a DC.)

Any SMB signing settings in a GPO been altered?

If 2003 DCs, were they upgraded from 2000?

Have you tried the DCGPOfix tool? See this for more info:
http://technet2.microsoft.com/WindowsServer/en/Library/48872034-1907-4149-b6aa-9788d38209d21033.mspx

Have you looked at EventID.net for the 1030 error? Please read this link
very carefully and scrutinize each section to see if it applies to you,
whether remotely or specifically.
http://www.eventid.net/display.asp?eventid=1030&eventno=1542&source=Userenv&phase=1
=====================================


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Having difficulty reading or finding responses to your post?
Instead of the website you're using, I suggest to use OEx (Outlook Express
or any other newsreader), and configure a news account, pointing to
news.microsoft.com. This is a direct link to the Microsoft Public
Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
to easily find, track threads, cross-post, sort by date, poster's name,
watched threads or subject.

It's easy:
How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Directory Services
Microsoft Certified Trainer

Infinite Diversities in Infinite Combinations
Assimilation Imminent. Resistance is Futile
"Very funny Scotty. Now, beam down my clothes."

The only thing in life is change. Anything more is a blackhole consuming
unnecessary energy. - [Me]

Ace

 

[jasonwilliams74]

Thanks for the reply. Let me go down the line here and answer questions
about:

ipconfig /all from the workstation and one from your DC.

workstation

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.


Windows IP Configuration

Host Name . . . . . . . . . . . . : it-w-01
Primary Dns Suffix . . . . . . . : mycompany.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : mycompany.local
mycompany.local

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : mycompany.local
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT
Network Connection
Physical Address. . . . . . . . . : 00-08-74-EA-65-53
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.100.155
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.100.1
DHCP Server . . . . . . . . . . . : 192.168.100.20
DNS Servers . . . . . . . . . . . : 192.168.100.20
Lease Obtained. . . . . . . . . . : Wednesday, May 03, 2006
5:43:53 PM
Lease Expires . . . . . . . . . . : Tuesday, May 09, 2006
5:43:53 PM


Domain Controller


Windows IP Configuration

Host Name . . . . . . . . . . . . : cmdc01
Primary Dns Suffix . . . . . . . : mycompany.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : mycompany.local

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
Connection
Physical Address. . . . . . . . . : 00-14-22-10-DA-07
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.100.20
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.100.1
DNS Servers . . . . . . . . . . . : 192.168.100.20


Moving along:

Did you apply SP1 on your 2003 DCs?
Are all DCs 2003?

Yes to SP1 and yes, all DC's are 2003.

What Event log errors are in any of the Event logs on the DC(s)?

eventID's 1030 and 1058, source: userenv

In that article that you mentioned earlier, 842804, did you make those reg
changes and DFSutil command on your 2003 DC as suggested?

Did not make the registry edits, but did issue the dfsutil command,
with no luck it seems. Still getting the errors this morning.

Is the DFS service running on the DC(s)?

yes, but have not configured it. Only have one share that the company
uses, at this time.

Is the DHCP Client service running on the DC(s)? (Despite it's name, it's a
required service that deals with registration and the resolver service,
whether statically configured or not).

DCHP service is running on the DC. DC has a static IP.

Is/are any of the DC(s) multihomed (meaning they have more than one NIC)?
(If so, this can surely cause this, among other things, which is why we
normally don't recommend multihoming a DC.)

Yes, two NIC's, only one is configured though. Second NIC is disabled
(for this reason you mentioned above)

Any SMB signing settings in a GPO been altered?

I tried to adjust the Default DC Policy by changing the following to
not defined (it was enabled when I checked it yesterday)

Micrsoft network server: digitallyl sign communications (always) = not
defined

If 2003 DCs, were they upgraded from 2000?

None. All clean installs on new machines.

Have you tried the DCGPOfix tool? See this for more info:
http://technet2.microsoft.com/WindowsServer/en/Library/48872034-1907-...

Have not. What exactly would this alter? Right now, I have about half a
dozen GPO's for certain things like IE settings, and remoev some items.
That's it, but more are being planned.

Have you looked at EventID.net for the 1030 error? Please read this link
very carefully and scrutinize each section to see if it applies to you,
whether remotely or specifically.
http://www.eventid.net/display.asp?eventid=1030&eventno=1542&source=U...

I'll read that. I have been reading this entry:

http://www.eventid.net/display.asp?eventid=1058&eventno=1752&source=Userenv&phase=1

Hope this helps.

 

[Guest]

I am having the same problem since yesterday. Errors 1030 and 1058, I read
and applied the recommendations from Microsoft on both errors with no lick.

I tried dcgpofix ; but I am getting sysvol share can not be accessed!

any suggestions

thks

Dave

Thanks for the reply. Let me go down the line here and answer questions
about:

ipconfig /all from the workstation and one from your DC.

workstation

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.


Windows IP Configuration

Host Name . . . . . . . . . . . . : it-w-01
Primary Dns Suffix . . . . . . . : mycompany.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : mycompany.local
mycompany.local

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : mycompany.local
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT
Network Connection
Physical Address. . . . . . . . . : 00-08-74-EA-65-53
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.100.155
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.100.1
DHCP Server . . . . . . . . . . . : 192.168.100.20
DNS Servers . . . . . . . . . . . : 192.168.100.20
Lease Obtained. . . . . . . . . . : Wednesday, May 03, 2006
5:43:53 PM
Lease Expires . . . . . . . . . . : Tuesday, May 09, 2006
5:43:53 PM


Domain Controller


Windows IP Configuration

Host Name . . . . . . . . . . . . : cmdc01
Primary Dns Suffix . . . . . . . : mycompany.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : mycompany.local

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
Connection
Physical Address. . . . . . . . . : 00-14-22-10-DA-07
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.100.20
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.100.1
DNS Servers . . . . . . . . . . . : 192.168.100.20


Moving along:

Did you apply SP1 on your 2003 DCs?
Are all DCs 2003?

Yes to SP1 and yes, all DC's are 2003.

What Event log errors are in any of the Event logs on the DC(s)?

eventID's 1030 and 1058, source: userenv

In that article that you mentioned earlier, 842804, did you make those reg
changes and DFSutil command on your 2003 DC as suggested?

Did not make the registry edits, but did issue the dfsutil command,
with no luck it seems. Still getting the errors this morning.

Is the DFS service running on the DC(s)?

yes, but have not configured it. Only have one share that the company
uses, at this time.

Is the DHCP Client service running on the DC(s)? (Despite it's name, it's a
required service that deals with registration and the resolver service,
whether statically configured or not).

DCHP service is running on the DC. DC has a static IP.

Is/are any of the DC(s) multihomed (meaning they have more than one NIC)?
(If so, this can surely cause this, among other things, which is why we
normally don't recommend multihoming a DC.)

Yes, two NIC's, only one is configured though. Second NIC is disabled
(for this reason you mentioned above)

Any SMB signing settings in a GPO been altered?

I tried to adjust the Default DC Policy by changing the following to
not defined (it was enabled when I checked it yesterday)

Micrsoft network server: digitallyl sign communications (always) = not
defined

If 2003 DCs, were they upgraded from 2000?

None. All clean installs on new machines.

Have you tried the DCGPOfix tool? See this for more info:
http://technet2.microsoft.com/WindowsServer/en/Library/48872034-1907-...

Have not. What exactly would this alter? Right now, I have about half a
dozen GPO's for certain things like IE settings, and remoev some items.
That's it, but more are being planned.

Have you looked at EventID.net for the 1030 error? Please read this link
very carefully and scrutinize each section to see if it applies to you,
whether remotely or specifically.
http://www.eventid.net/display.asp?eventid=1030&eventno=1542&source=U...

I'll read that. I have been reading this entry:

http://www.eventid.net/display.asp?eventid=1058&eventno=1752&source=Userenv&phase=1

Hope this helps.

 

[jasonwilliams74]

Ok. I've been reading up on the following links:

http://www.eventid.net/display.asp?eventid=1058&eventno=1752&source=Userenv&phase=1

Specifically, the first entry.

and..

http://support.microsoft.com/default.aspx?scid=kb;en-us;887303#E0WE0ABAAA

Where it talks about editing the GPO.

Few questions on this:

Which GPO should I edit? I'm little confused here, and pretty new to AD
and GPO's.

I'm just trying to figure out how I would successfully and correctly
edit the correct GPO (or would it be the default DC Policy?), to ensure
that the changes will take effect.

Anyone care to point me in the right direction, tell me the correct
procedure?

Thanks,

 

[Kidem]

Ok. I've been reading up on the following links:

http://www.eventid.net/display.asp?eventid=1058&eventno=1752&source=Userenv&phase=1

Specifically, the first entry.

and..

http://support.microsoft.com/default.aspx?scid=kb;en-us;887303#E0WE0ABAAA

Where it talks about editing the GPO.

Few questions on this:

Which GPO should I edit? I'm little confused here, and pretty new to AD
and GPO's.

I'm just trying to figure out how I would successfully and correctly
edit the correct GPO (or would it be the default DC Policy?), to ensure
that the changes will take effect.

Anyone care to point me in the right direction, tell me the correct
procedure?

Thanks,

Your looking in the right place...i've had those errors so manys time.
the dfsutil worked once for one place, then i think there was SMB
signing was another one, follow both ways!! see if either work..

 

[jasonwilliams74]

You know what is interesting; i've been digging deeper into this and
what i've noticed, from my event viewer logs, I am only getting this
error on one of the GPO's that I have in my Domain. All the others work
fine, just not this specific one.

Any ideas on that one?