GPo Question on sbs2003

Hi all



I have just notice on the group policy tool that a gpo was not found What
should I do? I ran gpupdate/force The gpo was still not found can I just
delete it?



Cheers

v-mileli
Mon Sep 22 03:50:17 PDT 2008

Hello Jason,

Thank you for posting here.

According to your description, I understand that:

You encounter a issue about the group policy.

If I have misunderstood the problem, please don't hesitate to let me know.

Suggestions:
====================
First of all, I'd like to know which group policy object prompts error when
you run the GPOTOOL. Does the issue happen on a specific group policy
object or all group policy objects in the domain? If the issue happens on a
specific GPO that is not the Default Domain Policy and the Domain
Controller policy, you can simply delete it to correct this error.

If the issue happen on all GPOs in the domain, the error indicates that
there are some problems on the SBS server that prevent the group policy
from processing. More specific to this issue, the system may fail to access
SYSVOL folder on the SBS server that store the Group Policy Template files.
This will result in the error "GPO not found."

To troubleshoot this issue, you may check the following aspects:

1. Examine the DNS settings and network properties on the problematic
computer (SBS server)

Please make sure that on all computer in the SBS domain (including the SBS
server) the primary DNS server is pointing to the SBS server that holds the
DNS service.

2. Make sure that Distributed File System (DFS) is accessible on the SBS
sever.

To verify that you may try to access the SYSVOL folder with the address
"\\domain.local\SYSVOL". If you receive the ACCESS DENIED error, also try
to check the permissions on it. Authenticated Users group should be granted
the READ&EXECUTE files permissions.

For more information, you may refer to Microsoft Knowledge Base article
887303:

887303 Userenv errors occur and events are logged after you apply
Group Policy to computers that are running Windows Server 2003, Windows XP,
or Windows 2000
http://support.microsoft.com/kb/887303

Related information for your reference:

842804 A Windows Server 2003-based computer may stop responding
when it is resumed from standby and events 1030 and 1058 are logged in the
application log of a domain controller
http://support.microsoft.com/kb/842804

888943 Event 1030 and event 1058 may be logged, and you may not be
able to start the Group Policy snap-in on your Windows Small Business
Server 2003 computer
http://support.microsoft.com/kb/888943

If we cannot resolve the issue after we perform the steps above, please
help me collect some information for further investigation:

Information needed:
==================
1. Please help to collect the MPS report on the SBS server and send it to
me at Miles Li <mailto:v-mileli@microsoft.com>. The report will contain the
SBS server Event logs, DNS diagnosis logs and Active Directory diagnosis
that will help for the troubleshooting.

Microsoft Product Support's Reporting Tools (MPSRPT_DirSvc.EXE)
http://www.microsoft.com/downloads/details.aspx?FamilyID=CEBF3C7C-7CA5-408F-
88B7-F9C79B7306C0&displaylang=en

If you have any questions or concerns, please do not hesitate to let me
know.



Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

v-mileli
Wed Sep 24 03:43:42 PDT 2008

Hello Jason,

Thank you for your update. I have received your screen shot properly.

From the screenshot, it seems that the issue only happens to a specific
GPO. As you know, a GPO consists of group policy container (in AD database)
and group policy template (files and folders in the SYSVOL share). The
missing of either path will result in the failure of that group policy.

To narrow down the issue, please help to check the following aspects:

1. Check whether the folder exist in
\\localhost\SYSVOL\sbs.local\Policies\{GUID} on the SBS server.

{GUID} is the unique ID of that GPO. You can see it in the screenshot. Have
you manually deleted this folder?

2. Verify the Group Policy Container in the Active Directory.

a) Open the Active Directory Users and Computer MMC.
b) Expand SBS.local--->System--->Policies.
c) In the right panel, check whether a object named {GUID} of that group
policy object lists.
d) If the issue only happens on this specific GPO, you can manually delete
the GPO by right click the GPO--->Delete.

I have received your report. I'd like to know whether you run the Directory
Service MPSreport (MPSRPT_DirSvc.EXE). Please make sure that you have the
run the correct version of the MPS report.

Hope this helps. Also, if you have any questions or concerns, please do not
hesitate to let me know.


Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.