GPO problems in XP SP 2 WS in a native 2003 AD (id 1058 and 1030)

[Yves]

The problem is the erratic appearance of ID 1058 and ID 1030

Windows cannot access the file gpt.ini for (Access is denied. ). Group
Policy processing aborted.

What happens: if I insist enough rebooting and exec'ing gpupdate
/force, the policy finally goes through. It then functions for a while
.... and spits the errors again.

What I tried:
set the diabledfs key in registry to enabled : no cure
run dcdiag and netdiag on all dc's : no errors
access gpt.ini form the problem workstations under admin rights:
always works
set the LAN authentication tab to point to domain certificate server:
no cure
tried the dfsutil /purgemup on the servers: no cure
checked the DNS info : OK

I am at the end of my latin. Can anyone please help. I would
appreciate it a lot.

Yves

 

[Jerold Schulman]

The problem is the erratic appearance of ID 1058 and ID 1030

Windows cannot access the file gpt.ini for (Access is denied. ). Group
Policy processing aborted.

What happens: if I insist enough rebooting and exec'ing gpupdate
/force, the policy finally goes through. It then functions for a while
... and spits the errors again.

What I tried:
set the diabledfs key in registry to enabled : no cure
run dcdiag and netdiag on all dc's : no errors
access gpt.ini form the problem workstations under admin rights:
always works
set the LAN authentication tab to point to domain certificate server:
no cure
tried the dfsutil /purgemup on the servers: no cure
checked the DNS info : OK

I am at the end of my latin. Can anyone please help. I would
appreciate it a lot.

Yves

Try tip 7819 in the 'Tips & Tricks' at http://www.jsiinc.com
See tip 5168, 7983, 8262

Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com

 

[Yves]

Thanks for the response.

I tried the tips. I did not help much. Finally, enabling 802.1x
authentication and selecting the domain certificate server seemingly
fixed the trouble.

I do not understand it, though

Yves