Can't access DNS - Errors 1030 and 1058

[LL Deja]

I have a win2k3 server as an AD. It currently can't use its DNS at
the moment. The errors are 1030 and 1058, which is basically this:
----------------------------

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 9/12/2003
Time: 4:26:56 PM
User: NT AUTHORITY\SYSTEM
Computer: DC
Description:
Windows cannot access the file gpt.ini for GPO
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domain,DC=com.
The file must be present at the location
<\\domain.com\sysvol\domain.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>.
(The network path was not found. ). Group Policy processing aborted.
--------------------------

I don't think this is related to the typical issue that has been
floating on this particular 1030/1058 error message combo.
Microsoft's articles only mention something about sysvol, group
policies, etc. I can access the sysvol and gpt.ini just fine through
Windows Explorer. Seems to me if the DNS was fixed somehow, this
problem will go away. I think this is a DNS issue that was caused by
adding a Win2k Domain Controller with DNS and then demoting it. But
this Win2k3 AD didn't recognize that the other DC was demoted and
still had that info in ADUC and ADSS.

So at the moment, there is nothing wrong with the server except it
can't access any DNS related services. I can browse the web just fine
by using IP addresses, but no go on any names. Any ideas on this? Is
it ok to just completely wipe out DNS and reconfigure a new one even
if this is the only DC right now?

 

[Ace Fekay [MVP]]

In

I have a win2k3 server as an AD. It currently can't use its DNS at
the moment. The errors are 1030 and 1058, which is basically this:
----------------------------

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 9/12/2003
Time: 4:26:56 PM
User: NT AUTHORITY\SYSTEM
Computer: DC
Description:
Windows cannot access the file gpt.ini for GPO
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domain,DC
=com.
The file must be present at the location
<\\domain.com\sysvol\domain.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984
F9}\gpt.ini>.
(The network path was not found. ). Group Policy processing aborted.
--------------------------

I don't think this is related to the typical issue that has been
floating on this particular 1030/1058 error message combo.
Microsoft's articles only mention something about sysvol, group
policies, etc. I can access the sysvol and gpt.ini just fine through
Windows Explorer. Seems to me if the DNS was fixed somehow, this
problem will go away. I think this is a DNS issue that was caused by
adding a Win2k Domain Controller with DNS and then demoting it. But
this Win2k3 AD didn't recognize that the other DC was demoted and
still had that info in ADUC and ADSS.

So at the moment, there is nothing wrong with the server except it
can't access any DNS related services. I can browse the web just fine
by using IP addresses, but no go on any names. Any ideas on this? Is
it ok to just completely wipe out DNS and reconfigure a new one even
if this is the only DC right now?

If it was demoted properly, then that wouldn't be the cause. Seems that
first thought of this error is that I usually see this when the admin
configured their ISP's DNS server address in the DC's IP properties. All
machines should only point to the internal DNS server only and forward out
to the ISP's DNS for Internet resolution. Otherwise all kinds of errors
appear.

Make sure that none of the machines are pointing in IP properties to the the
DC/DNS you demoted as it's DNS server.

Do all the SRV records exist?


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory

 

[Shane Brasher]

Hello,

I have seen this one time but the error was in correlation to GPO not
applying to all XP clients. The issue was resolved and the errors went away
via everyone had been removed from the root drive NTFS permissions. Gave
Everyone Full control NTFS permissions on the root drive.

Out of curiosity, are GP's being applied with no problem?


Shane Brasher
MCSE (2000,NT),MCSA, A+
Microsoft Platforms Support
Windows NT/2000 Networking

 

[Ace Fekay [MVP]]

In

Hello,

I have seen this one time but the error was in correlation to GPO not
applying to all XP clients. The issue was resolved and the errors
went away via everyone had been removed from the root drive NTFS
permissions. Gave Everyone Full control NTFS permissions on the root
drive.

Out of curiosity, are GP's being applied with no problem?


Shane Brasher
MCSE (2000,NT),MCSA, A+
Microsoft Platforms Support
Windows NT/2000 Networking

Shane, I see what you mean. I checked these articles out and they're
basically saying just that, that there are issues related to permissions.
The 1030 article says there's a possible fix available (is that correct?),
assuming that the permissions weren't removed intentionally.

http://www.eventid.net/display.asp?eventid=1058&source=
http://www.eventid.net/display.asp?eventid=1030&source=

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory

 

[Shane Brasher]

Hello Ace,

Hotfix 810907 will be rolled up in SP2 for XP. The hotfix is availible but
I don't believe that it is the source of what LL Deja is seeing. He stated
"I have a win2k3 server as an AD. It currently can't use its DNS at the
moment. The errors are 1030 and 1058, ....etc....." but yes the hotfix for
XP is availible.


Shane Brasher
MCSE (2000,NT),MCSA, A+
Microsoft Platforms Support
Windows NT/2000 Networking

 

[Ace Fekay [MVP]]

Ok, misread it. Hotfix for XP.

Reminds me of a friend of mine that did the same thing, removing Everyone FC
on the root of her Win2k c: drive. What a mess. She did it to stop her kids
from installing stuff on her home machine, but back fired. Took me two days
to figure that one out.

Thanks!

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory