Hi all,

On several Citrix servers, an issue randomly occured :Event ID 1058 with error code 3.

This issue indicates th server can't find the file  \\domainFQDN\SYSVOL\domainFQDN\Policies\policyGUID\gpt.ini.

I read this post  http://social.technet.microsoft.com/Forums/fr-FR/298d5161-f4a1-4de6-982e-77c2ab4e0a9e/event-1058-the-processing-of-group-policy-failed but it didn't help me to solve this issue.

From this server, When I try to browse this file gpt.ini, I can reach \\domainFQDN where I see 3 directories (CertEnroll, NETLOGON and SYSVOL), but if I try to enter in SYSVOL directory Windows say me "\\domainFQDN\SYSVOL refers to an unavailable location".

However, from the same server if I try to browse this file gpt.ini through DCs mentioned in event ID 1058 (\\PDC\SYSVOL\domainFQDN\Policies\policyGUID or \\DC1\SYSVOL\domainFQDN\Policies\policyGUID), I can reach and open gpt.ini file.

A DCDiag on the PDC goes no error.

Thank you for your

Try this: http://support.microsoft.com/kb/314494

.

Thank you for your reply.

This article is about OS Windows XP, but my OS is Windows Server 2008 R

I know but it's worth a try.

Also, what about this one? http://technet.microsoft.com/en-us/library/cc727259%28v=ws.10%29.aspx

.

For the first KB, the key doesn't exist in registry.

And about the last link, I've already try the solution corresponding to error 3, and a user impacted can reach the gpt.ini with the path \\DC\SYSVOL\domain\Policies\GUID\gpt.ini.

Ok, let's try other sources then. I wonder if you have ghost SOA's in your DNS for the domainFQDN. Could you check that?

.

What about the Name Servers? Are them all up to date? Does nslookup DomainFQDN bring you the expected correct results?

.

Hmm, weird then. You mentioned it happens randomly in some Citrix servers? Maybe it's something you will find in the Citrix Forum (if that's only on Citrix boxes).

.

Hello,

if you already have checked all links in the mentioned articles please upload the following files:

ipconfig /all >c:\ipconfig.log [all DCs]
dcdiag /v /c /d /e /s:dcname >c:\dcdiag.log
repadmin /showrepl dc* /verbose /all /intersite >c:\repl.log  ["dc* is a place holder for the starting name of the DCs if they all begin the same (if more then one DC exists)]
dnslint /ad /s "DCipaddress" (http://support.microsoft.com/kb/321045)
ADREPLSTATUS: http://www.microsoft.com/en-us/download/details.aspx?id=30005 can also be exported to file.

As the output will become large, DON'T post them into the thread, please use Windows Sky Drive(with open access!) https://skydrive.live.com and add the link from it here. Also the /e in dcdiag scans the complete forest, so better run it on COB.