Userenv error

[Steven Bellamy]

Hi,

We're running W2KSP3 with 2 AD controllers.
For some reason our W2KPro PC's started coming up with the following error message in the event viewer under application:
Source: Userenv
EventID: 1000
Windows cannot access the registry information at \\abc.co.uk\sysvol\abc.co.uk\Policies\{31B2F340-016D-11C3-945F-00C04FB984F9}\Machine\registry.pol with (5).

Source: Scecli
EventID: 1001
Security policy cannot be propagated. Cannot access the template. Error code = 3.
\\abc.co.uk\sysvol\abc.co.uk\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.

Source Userenv
EventID: 1000
The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (3).

If I run secedit /refreshpolicy machine_policy /enforce on the servers, Group policies are applied sucessfully, but if it is run on a PC with admin rights... the above error messages appear.
I have checked NTFRS and everything seems to be OK, if I copy (delete) a file into the policies directory, it get replicated to the other server...

On the gptext.log file on the clients, I'm getting the following error message:
GPTEXT(a0.2e0) 09:29:58:863 ProcessScriptsGroupPolicy Failed to get file attributes of \\abc.co.uk\sysvol\abc.co.uk\Policies\{31B2F340-016D-11C3-945F-00C04FB984F9}\User\Scripts\scripts.ini with 5

and the following in the Userenv.log
USERENV(a0.70) 11:59:01:676 ParseRegistryFile: CreateFile failed with 5
USERENV(a0.70) 11:59:01:676 ProcessGPORegistryPolicy: ParseRegistryFile failed.
USERENV(a0.70) 11:59:01:676 ProcessGPOList: ProcessGPORegistryPolicy failed.
USERENV(a0.70) 11:59:01:676 ProcessGPOs: Extension Registry ProcessGroupPolicy failed, status 0x80004005.
USERENV(a0.70) 11:59:01:692 ProcessGPOs: Extension Security ProcessGroupPolicy failed, status 0x3.

I've tried deleting the policy from the server, but get the following error in the GPEDIT.LOG file
GPEDIT(af0.768) 11:53:38:223 CGroupPolicyObject:elete: Failed to delete DS storage with 0x80072035
GPEDIT(af0.768) 11:53:38:223 GPMDlgProc: Failed to delete GPO object with 0x80072035.

I've been trying to resolve this error for over a week and I'm going around in circles!
Any help would be GREATLY appreciated!!!!

 

[Vsevolod Titov [MSFT]]

Something is wrong with SYSVOL part of the GPO. Group Policy Engine
determined that GPO should be accessible, based on the DS part of GPO and
gpt.ini on SYSVOL.

In most cases this error is due to the ACLs mis-synchronization between DS
and SYSVOL parts of GPO. GPMC can fix ACLs problem. You will need to install
GPMC and simply navigate to the GPO node. A dialog will pop up with a
warning and you will have an option to fix the ACLs on SYSVOL. Another way
to fix that is by editing the ACLs on the GPO using standard UI. You need to
modify something in the ACLs, then revert it back.

--
V.T.
This posting is provided "AS IS" with no warranties, and confers no rights

Hi,

We're running W2KSP3 with 2 AD controllers.
For some reason our W2KPro PC's started coming up with the following error
message in the event viewer under application:
Source: Userenv
EventID: 1000
Windows cannot access the registry information at
\\abc.co.uk\sysvol\abc.co.uk\Policies\{31B2F340-016D-11C3-945F-00C04FB984F9}
\Machine\registry.pol with (5).

Source: Scecli
EventID: 1001
Security policy cannot be propagated. Cannot access the template. Error code
= 3.
\\abc.co.uk\sysvol\abc.co.uk\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}
\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.

Source Userenv
EventID: 1000
The Group Policy client-side extension Security was passed flags (17) and
returned a failure status code of (3).

If I run secedit /refreshpolicy machine_policy /enforce on the servers,
Group policies are applied sucessfully, but if it is run on a PC with admin
rights... the above error messages appear.
I have checked NTFRS and everything seems to be OK, if I copy (delete) a
file into the policies directory, it get replicated to the other server...

On the gptext.log file on the clients, I'm getting the following error
message:
GPTEXT(a0.2e0) 09:29:58:863 ProcessScriptsGroupPolicy Failed to get file
attributes of
\\abc.co.uk\sysvol\abc.co.uk\Policies\{31B2F340-016D-11C3-945F-00C04FB984F9}
\User\Scripts\scripts.ini with 5

and the following in the Userenv.log
USERENV(a0.70) 11:59:01:676 ParseRegistryFile: CreateFile failed with 5
USERENV(a0.70) 11:59:01:676 ProcessGPORegistryPolicy: ParseRegistryFile
failed.
USERENV(a0.70) 11:59:01:676 ProcessGPOList: ProcessGPORegistryPolicy failed.
USERENV(a0.70) 11:59:01:676 ProcessGPOs: Extension Registry
ProcessGroupPolicy failed, status 0x80004005.
USERENV(a0.70) 11:59:01:692 ProcessGPOs: Extension Security
ProcessGroupPolicy failed, status 0x3.

I've tried deleting the policy from the server, but get the following error
in the GPEDIT.LOG file
GPEDIT(af0.768) 11:53:38:223 CGroupPolicyObject:elete: Failed to delete DS
storage with 0x80072035
GPEDIT(af0.768) 11:53:38:223 GPMDlgProc: Failed to delete GPO object with
0x80072035.

I've been trying to resolve this error for over a week and I'm going around
in circles!
Any help would be GREATLY appreciated!!!!

 

[Steven Bellamy]

Thanks for the reply, it's greatly appreciated!

I installed the GPMC on my WinXPSp1 PC, and clicked 'OK' when it wanted to
reset the ACL's on the GPO, but unfortunately, I still get the same error
message on my XP PC and W2K Pro PC's

XP
Userenv
1058
Windows cannot access the file gpt.ini for GPO
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=abc,DC=co
,DC=uk. The file must be present at the location
<\\abc.co.uk\sysvol\abc.co.uk\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9
}\gpt.ini>. (Access is denied. ). Group Policy processing aborted.

W2K Pro
Mentioned in original post

I have done a secedit /refreshpolicy machine_policy /enforce
I have done a secedit /refreshpolicy user_policy /enforce
on both servers and a gpupdate /force on my XP PC.

When I run the 'Group Policy Result Wizard', I get the following error on
the report
Component Status X (red circle, white X)
Group Policy Infrastructure failed due to the error listed below.

Access is denied.

Note: Due to the GP Core failure, none of the other Group Policy components
processed their policy. Consequently, status information for the other
components is not available.

Additional information may have been logged. Review the Policy Events tab in
the console or the application event log for events between 18/07/2003
11:13:21 and 18/07/2003 11:13:26

The logged message is the Userenv mentioned above

Any other suggestions?

 

[seth]

Where is that registry key found? On the client? I read that kb
article to chage that value but I am running XP and that dword does
not exist in that key.

I have the following registry setting set to 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Mup]
"DisableDFS"=dword:00000001
Changing to 0 resolved the problem.

Thanks for the reply, it's greatly appreciated!

I installed the GPMC on my WinXPSp1 PC, and clicked 'OK' when it wanted to
reset the ACL's on the GPO, but unfortunately, I still get the same error
message on my XP PC and W2K Pro PC's

XP
Userenv
1058
Windows cannot access the file gpt.ini for GPO
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=abc,DC=co
,DC=uk. The file must be present at the location
<\\abc.co.uk\sysvol\abc.co.uk\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9
}\gpt.ini>. (Access is denied. ). Group Policy processing aborted.

W2K Pro
Mentioned in original post

I have done a secedit /refreshpolicy machine_policy /enforce
I have done a secedit /refreshpolicy user_policy /enforce
on both servers and a gpupdate /force on my XP PC.

When I run the 'Group Policy Result Wizard', I get the following error on
the report
Component Status X (red circle, white X)
Group Policy Infrastructure failed due to the error listed below.

Access is denied.

Note: Due to the GP Core failure, none of the other Group Policy components
processed their policy. Consequently, status information for the other
components is not available.

Additional information may have been logged. Review the Policy Events tab in
the console or the application event log for events between 18/07/2003
11:13:21 and 18/07/2003 11:13:26

The logged message is the Userenv mentioned above

Any other suggestions?

need
to
\\abc.co.uk\sysvol\abc.co.uk\Policies\{31B2F340-016D-11C3-945F-00C04FB984F9}
\\abc.co.uk\sysvol\abc.co.uk\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}
\\abc.co.uk\sysvol\abc.co.uk\Policies\{31B2F340-016D-11C3-945F-00C04FB984F9} delete
DS