Good Morning everyone, I am currently getting this error message on my windows 2003 X64 domain controller: 31 August 2010 18:28:24 Group Policy Infrastructure failed due to the error listed below. Access is denied. Note: Due to the GP Core failure, none of the other Group Policy components processed their policy. Consequently, status information for the other components is not available. Additional Information: Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=dsi,DC=local. The file must be present at the location <\\dsi.local\sysvol\dsi.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. (Access is denied. ). Group Policy processing aborted. Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this. Could anyone tell me if they have seen this error message as well and how you managed to fix it. Any reply welcome. Thanks James

Hi, what are ntfs permissions on file \\dsi.local\sysvol\dsi.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini ?Edoardo Benussi - Microsoft MVP Management Infrastructure - Systems Administration https://mvp.support.microsoft.com/Profile/Benussi Windows Server Italian Forum Moderator edo[at]mvps[dot]org

Hi, They are set to full control

"full control" for which users or groups ?Edoardo Benussi - Microsoft MVP Management Infrastructure - Systems Administration https://mvp.support.microsoft.com/Profile/Benussi Windows Server Italian Forum Moderator edo[at]mvps[dot]org

we have just set everyone to have full control, the error is still coming though but how it is only comes though every 20 mins when it was coming though every 5 mins before

right permissions for sysvol folder and its subfolders are reported here http://support.microsoft.com/kb/290647/en-us set your sysvol folder permission as suggested in linked KB article and restart your server. bye.Edoardo Benussi - Microsoft MVP Management Infrastructure - Systems Administration https://mvp.support.microsoft.com/Profile/Benussi Windows Server Italian Forum Moderator edo[at]mvps[dot]org

i have gone though what you have sent me, i will have to wait till tonight to restart the server, so ill mark this as an answer tomorrow if it works thanks james

good morning, im sorry to say that this has not worked, if you have any other suggestions i would be very greatful thanks James

can you post "ipconfig /all" result of this doamin controller ?Edoardo Benussi - Microsoft MVP Management Infrastructure - Systems Administration https://mvp.support.microsoft.com/Profile/Benussi Windows Server Italian Forum Moderator edo[at]mvps[dot]org

Windows IP Configuration Host Name . . . . . . . . . . . . : dsifs1 Primary Dns Suffix . . . . . . . : dsi.local Node Type . . . . . . . . . . . . : Unknown IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : dsi.local Ethernet adapter Local Area Connection 2: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter #2 Physical Address. . . . . . . . . : 00-0F-20-F6-70-CC DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 192.168.254.213 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.254.224 DNS Servers . . . . . . . . . . . : 208.67.222.222 208.67.220.220 NetBIOS over Tcpip. . . . . . . . : Disabled Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter Physical Address. . . . . . . . . : 00-0F-20-F6-70-CD DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 192.168.254.223 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.254.224 DNS Servers . . . . . . . . . . . : 127.0.0.1

you have some errors in configuration: 1) it would be better that a domain controller has only one nic and not two nics; 2) if second nic is needed, your DNS server must be listening only on first nic that i assume to be "Ethernet adapter Local Area Connection". 3) first nic must have this configuration IP Address. . . . . . . . . . . . : 192.168.254.223 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : DNS Servers . . . . . . . . . . . : 192.168.254.223 4) second nic must have this configuration: IP Address. . . . . . . . . . . . : 192.168.254.213 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.254.224 DNS Servers . . . . . . . . . . . : 5) your domain controller must resolve internet address using Forwarders configured in dns server otherwise simply using Root Hints. In this conditions, your dc will work properly. bye.Edoardo Benussi - Microsoft MVP Management Infrastructure - Systems Administration https://mvp.support.microsoft.com/Profile/Benussi Windows Server Italian Forum Moderator edo[at]mvps[dot]org

If we only have NIC 1 will we need to put the default gateway from NIC 2 onto NIC 1?

you are right.Edoardo Benussi - Microsoft MVP Management Infrastructure - Systems Administration https://mvp.support.microsoft.com/Profile/Benussi Windows Server Italian Forum Moderator edo[at]mvps[dot]org

Good Morning, Im sorry to say that this has not fixed the problem eathier? Any other suggestions would be very greatly appreciated. Thanks James

can you post again "ipconfig /all" result ?Edoardo Benussi - Microsoft MVP Management Infrastructure - Systems Administration https://mvp.support.microsoft.com/Profile/Benussi Windows Server Italian Forum Moderator edo[at]mvps[dot]org

Windows IP Configuration Host Name . . . . . . . . . . . . : dsifs1 Primary Dns Suffix . . . . . . . : dsi.local Node Type . . . . . . . . . . . . : Unknown IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : dsi.local Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter Physical Address. . . . . . . . . : 00-0F-20-F6-70-CD DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 192.168.254.223 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.254.224 DNS Servers . . . . . . . . . . . : 127.0.0.1 on the frist ipconfig /all output i posted there were a couple of 208.67.... dns server address were would you suggest putting them now?

dns server must be configured as follows DNS Servers . . . . . . . . . . . : 192.168.254.223Edoardo Benussi - Microsoft MVP Management Infrastructure - Systems Administration https://mvp.support.microsoft.com/Profile/Benussi Windows Server Italian Forum Moderator edo[at]mvps[dot]org

Hello Y0da3, How many domain controllers are in your domain? If you have more than one, please check if there exists some replication issue on the problematic domain controller. repadmin /showrepl <server1.microsoft.com> --- replication partners of Server1 Please also enable Userenv debug logging in the domain controller and upload %Systemroot%\Debug\UserMode\Userenv.log file to the SkyDrive for further research, and then let me know the upload link. How to enable user environment debug logging in retail builds of Windows http://support.microsoft.com/kb/221833 The following articles are for your reference: Userenv errors occur and events are logged after you apply Group Policy to computers that are running Windows Server 2003, Windows XP, or Windows 2000 http://support.microsoft.com/kb/887303 Windows cannot query for the list of Group Policy objects. EventID 1030 http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/b93653c4-270b-4373-a030-c18a150a5bca Brent Hu, Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”