J
Joseph O'Brien
Over the last several weeks, users in our office have had trouble with
their machines that ultimately requires a restart.
The first symptom of the problem is that the user's network printers
are "gone." Another symptom is that they cannot access mapped and
unmapped network shares. Users occasionally report an error message
about Windows being out of system resources, but this error is not
logged.
When this happens to me, I also notice that management consoles fail
to load. I don't know if this happens each time, or if it was just an
isolated case.
The problem is always fixed by a restart. However, I would like to
figure out what's going to prevent this from happening. It occurs at
least once a day to at least one computer in our organization. We have
30 Windows computers. People are becoming frustrated, and I don't know
what to do.
Details: all computers are up-to-date within 2-weeks of MS updates. We
have 1 SBS2003 that acts as the domain controller, AD, Exchange, and
DNS server. We have a second Windows Server 2003 primarily as a file/
printer server.
I have checked the logs on both the server and client. There are a few
errors that I see consistently, but I don't know if they're related to
the problem. Those logs are below.
I doubt that this is a malware problems. Our Trend Micro OfficeScan is
kept up-to-date, and I have scanned several of the machines with other
virus/malware scanners.
Can anyone offer a solution or a direction to look for an answer?
Thanks.
joseph
===========================
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 11/20/2007
Time: 9:26:34 AM
User: NT AUTHORITY\SYSTEM
Computer: BIG573
Description:
Windows cannot query for the list of Group Policy objects. A message
that describes the reason for this was previously logged by the policy
engine.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
=============================
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 11/20/2007
Time: 9:26:34 AM
User: NT AUTHORITY\SYSTEM
Computer: BIG573
Description:
Windows cannot access the file gpt.ini for GPO CN={0AC3ADD8-71E2-44A8-
BF77-337D8D70636D},CN=Policies,CN=System,DC=ourdomain,DC=com. The file
must be present at the location <\\ourdomain.com\SysVol\ourdomain.com
\Policies\{0AC3ADD8-71E2-44A8-BF77-337D8D70636D}\gpt.ini>.
(Configuration information could not be read from the domain
controller, either because the machine is unavailable, or access has
been denied. ). Group Policy processing aborted.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
=========================
their machines that ultimately requires a restart.
The first symptom of the problem is that the user's network printers
are "gone." Another symptom is that they cannot access mapped and
unmapped network shares. Users occasionally report an error message
about Windows being out of system resources, but this error is not
logged.
When this happens to me, I also notice that management consoles fail
to load. I don't know if this happens each time, or if it was just an
isolated case.
The problem is always fixed by a restart. However, I would like to
figure out what's going to prevent this from happening. It occurs at
least once a day to at least one computer in our organization. We have
30 Windows computers. People are becoming frustrated, and I don't know
what to do.
Details: all computers are up-to-date within 2-weeks of MS updates. We
have 1 SBS2003 that acts as the domain controller, AD, Exchange, and
DNS server. We have a second Windows Server 2003 primarily as a file/
printer server.
I have checked the logs on both the server and client. There are a few
errors that I see consistently, but I don't know if they're related to
the problem. Those logs are below.
I doubt that this is a malware problems. Our Trend Micro OfficeScan is
kept up-to-date, and I have scanned several of the machines with other
virus/malware scanners.
Can anyone offer a solution or a direction to look for an answer?
Thanks.
joseph
===========================
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 11/20/2007
Time: 9:26:34 AM
User: NT AUTHORITY\SYSTEM
Computer: BIG573
Description:
Windows cannot query for the list of Group Policy objects. A message
that describes the reason for this was previously logged by the policy
engine.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
=============================
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 11/20/2007
Time: 9:26:34 AM
User: NT AUTHORITY\SYSTEM
Computer: BIG573
Description:
Windows cannot access the file gpt.ini for GPO CN={0AC3ADD8-71E2-44A8-
BF77-337D8D70636D},CN=Policies,CN=System,DC=ourdomain,DC=com. The file
must be present at the location <\\ourdomain.com\SysVol\ourdomain.com
\Policies\{0AC3ADD8-71E2-44A8-BF77-337D8D70636D}\gpt.ini>.
(Configuration information could not be read from the domain
controller, either because the machine is unavailable, or access has
been denied. ). Group Policy processing aborted.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
=========================