Hi, I'm having a problem on Server 2003 sp2. Getting application error 1030, and 1058 (see below.) I found KB-887303 but get stuck because I can't edit any GPO. From server I can't access \\aa-dev, or \\aa-dev.org\sysvol, but can access \\aa-dev.org and \\aa-dev\sysvol. I'm not sure if what I'm seeing in DFSUtil (below) is correct, or how to fix if it's not. Thanks in advance. Mike ~~~~~~~~~~~~~~~~~~~~~~~~~ Event Type: Error Event Source: Userenv Event Category: None Event ID: 1058 Date: 2/1/2010 Time: 10:17:27 AM User: NT AUTHORITY\SYSTEM Computer: AAB-DOM Description: Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=aa-dev,DC=org. The file must be present at the location <\\aa-dev.org\sysvol\aa-dev.org\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. (Configuration information could not be read from the domain controller, either because the machine is unavailable, or access has been denied. ). Group Policy processing aborted. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. ~~~~~~~~~~~~~~~~~~~~~~~~~ dfsutil /pktinfo DFS Utility Version 5.2 (built on 5.2.3790.3959) Copyright (c) Microsoft Corporation. All rights reserved. --mup.sys-- 4 entries... Entry: \aa-dev.org\sysvol ShortEntry: \aa-dev.org\sysvol Expires in 660 seconds UseCount: 0 Type:0x10 ( OUTSIDE_MY_DOM ) 0:[\aag-sdom.aa-dev.org\sysvol] State:0x121 ( TARGETSET ) 1:[\aab-dom.aa-dev.org\sysvol] State:0x31 ( ACTIVE ) 2:[\aab-sdom.aa-dev.org\sysvol] State:0x21 ( ) Entry: \aa-dev.org\NETLOGON ShortEntry: \aa-dev.org\NETLOGON Expires in 0 seconds UseCount: 0 Type:0x10 ( OUTSIDE_MY_DOM ) 0:[\aab-dom.aa-dev.org\NETLOGON] State:0x121 ( TARGETSET ) 1:[\aab-sdom.aa-dev.org\NETLOGON] State:0x21 ( ) 2:[\aag-sdom.aa-dev.org\NETLOGON] State:0x21 ( ) Entry: \aa-dev\sysvol ShortEntry: \aa-dev\sysvol Expires in 0 seconds UseCount: 0 Type:0x1 ( DFS ) 0:[\AAB-SDOM\sysvol] State:0x131 ( ACTIVE TARGETSET ) 1:[\AAB-DOM\sysvol] State:0x21 ( ) 2:[\AAG-SDOM\sysvol] State:0x21 ( ) Entry: \aa-dev\netlogon ShortEntry: \aa-dev\netlogon Expires in 0 seconds UseCount: 0 Type:0x1 ( DFS ) 0:[\AAG-SDOM\netlogon] State:0x131 ( ACTIVE TARGETSET ) 1:[\AAB-SDOM\netlogon] State:0x21 ( ) 2:[\AAB-DOM\netlogon] State:0x21 ( ) DfsUtil command completed successfully.

Hello,As per my knowdge....For application error 1030, and 1058 http://support.microsoft.com/kb/842804and for sysvol and domain access...http://social.technet.microsoft.com/Forums/en-GB/winserverDS/thread/ff60bf6f-10e7-4740-83df-64b6a11e672dRegardsRajesh J S

Thanks for the reply... I've worked thru 842804 previously - it didn't help. I looked at the second article and started from the top. Everything looks OK until I have to open Domain Controller Security Policy. That's where I get the error - Failed to open GPO. You may not have appropriate rights. I'll continue thru the other KBs.... but I think I'm missing something...

Hello,Here is one more KB, please have a llok in to it....http://support.microsoft.com/kb/294257RegardsRajesh J S

I seem to be going backwards now, but an idea I had before is resurfacing. A corruption between DOMAIN, and DOMAIN.ORG. Possibly due to DNS (?). The GUID is the same, but flags are different. Our internal domain doesn't use .org suffix, but DNS does. Please see below, different response between nltest.exe c:\nltest /server:aab-dom /dsgetdc:aa-dev DC: \\AAB-DOM Address: \\128.0.254.15 Dom Guid: 611914c3-177d-4950-bce1-bc681d7cfadb Dom Name: AA-DEV Forest Name: aa-dev.org Dc Site Name: Default-First-Site-Name Our Site Name: Default-First-Site-Name Flags: PDC GC DS LDAP KDC TIMESERV WRITABLE DNS_FOREST CLOSE_SITE The command completed successfully c:\nltest /server:aab-dom /dsgetdc:aa-dev.org DC: \\aab-dom.aa-dev.org Address: \\128.0.254.15 Dom Guid: 611914c3-177d-4950-bce1-bc681d7cfadb Dom Name: aa-dev.org Forest Name: aa-dev.org Dc Site Name: Default-First-Site-Name Our Site Name: Default-First-Site-Name Flags: PDC GC DS LDAP KDC TIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE The command completed successfully