Win2k Adv. Server; Probs. with GroupPolicy

[Tom]

Hi there,

I have been having quite persistent problems with my Windows 2000 Advanced Server, concerning GroupPolicy and Eventlogtracking.
There are two Events occuring every 5 minutes:

SceCli EventID: 1001 Can't access \ADS-DE.localsysvolADS-DE.localPolicies{31B2F340-016D-11D2-945F-00C04FB984F9}MachineMicrosoftWindows NTSecEditGptTmpl.inf

and

Userenv EventID: 1000 User: NT-Authority/SYSTEM
Message: The client extension "SECURITY" receved Flags 17 and Errorcode 3.
(the maessage is not exactly what was on the eventlog, i shortend it...)

Microsoft states that this should be a rplication problem among domain controllers, but my controller is a stand-alone machine.
I have been encountering problems opening the grouppolicy MMC snap-in.
Everytime I try to open it, it breaks down telling me that the snap-in can't find the specified networkpath... well it should be on this very machine...!?
Then the MMC is opened with no content or policy trees. It's plainly empty.

If anybody knows a solution, please help me!
Thanks!

Tom

[Graeme Carstairs]

Whats happened here I beleive is some of your SYSVOL folders have gone missing. THis happens to us regularly as well and we have not been able to find a permanent fix, but in the short term if you restore the c:winntsysvol and all folders underneath it should resolve the issue.
Your missing the sysvolsysvoldomainpolicies and sysvolsysvoldomainscripts folders.
I have not been able to work out why they go or how to stop it, but the restore will work in the short term.

Graeme


------------
Tom at 11/22/2002 8:46:34 AM


Hi there,

I have been having quite persistent problems with my Windows 2000 Advanced Server, concerning GroupPolicy and Eventlogtracking.
There are two Events occuring every 5 minutes:

SceCli EventID: 1001 Can't access \ADS-DE.localsysvolADS-DE.localPolicies{31B2F340-016D-11D2-945F-00C04FB984F9}MachineMicrosoftWindows NTSecEditGptTmpl.inf

and

Userenv EventID: 1000 User: NT-Authority/SYSTEM
Message: The client extension "SECURITY" receved Flags 17 and Errorcode 3.
(the maessage is not exactly what was on the eventlog, i shortend it...)

Microsoft states that this should be a rplication problem among domain controllers, but my controller is a stand-alone machine.
I have been encountering problems opening the grouppolicy MMC snap-in.
Everytime I try to open it, it breaks down telling me that the snap-in can't find the specified networkpath... well it should be on this very machine...!?
Then the MMC is opened with no content or policy trees. It's plainly empty.

If anybody knows a solution, please help me!
Thanks!

Tom

[Tom]

Thanks for your reply,

I checked that.
It turned out, that all folders are existing and I double checked the file
permissions. It still wouldn't give me a Group Policy.
Concerning the Microsoft FAQs I checked dependencies with the DFS root and
discovered some inconsistencies. It wouldn't let me create a new independent
DFS Tree... though I set EnableDFS to 1. It says: "PRC-Server not available."

The error that appears in the "securitypolicy for domains"-mmc all the time is that "the networkpath was not found".
I'm running out of ideas now...

Is it possible that maybe there ist a problem with the dynamic disks?
Because I can't create a DFS Tree... I guess a vaild DFS Tree is necessary for replication of the NETLOGON and SYSVOL shares!?


TOM

------------
Graeme Carstairs at 11/25/2002 3:25:42 AM

Whats happened here I beleive is some of your SYSVOL folders have gone missing. THis happens to us regularly as well and we have not been able to find a permanent fix, but in the short term if you restore the c:winntsysvol and all folders underneath it should resolve the issue.
Your missing the sysvolsysvoldomainpolicies and sysvolsysvoldomainscripts folders.
I have not been able to work out why they go or how to stop it, but the restore will work in the short term.

Graeme


------------
Tom at 11/22/2002 8:46:34 AM


Hi there,

I have been having quite persistent problems with my Windows 2000 Advanced Server, concerning GroupPolicy and Eventlogtracking.
There are two Events occuring every 5 minutes:

SceCli EventID: 1001 Can't access \ADS-DE.localsysvolADS-DE.localPolicies{31B2F340-016D-11D2-945F-00C04FB984F9}MachineMicrosoftWindows NTSecEditGptTmpl.inf

and

Userenv EventID: 1000 User: NT-Authority/SYSTEM
Message: The client extension "SECURITY" receved Flags 17 and Errorcode 3.
(the maessage is not exactly what was on the eventlog, i shortend it...)

Microsoft states that this should be a rplication problem among domain controllers, but my controller is a stand-alone machine.
I have been encountering problems opening the grouppolicy MMC snap-in.
Everytime I try to open it, it breaks down telling me that the snap-in can't find the specified networkpath... well it should be on this very machine...!?
Then the MMC is opened with no content or policy trees. It's plainly empty.

If anybody knows a solution, please help me!
Thanks!

Tom