gpt.in Access is denied. Group Policy processing aborted

[Guest Mike Bailey]

My server is Server 2003, SP2

It's the PDC, DHCP, and DNS server. I also have another server which is

the Backup DC.

 

I've been getting the error below every 5 mins for the past few months.

The error indicates that "Access is denies" to the gpt.ini. I have not

changed any permissions on the sysvol folders myself. Below are the

permissions from the file level on up. I hae no idea what is causing

this and it doesn't seem to have an obviouse affect on anyone since

there are no complaints from the usres.

 

File - gpt.ini

---------

Administrators: Full, Modify, Read&Execute, Read, Write

Authenticated Users: Read&Execute, Read

Group Policy Creator Owners: Read&Execute, Read, Write

Server Operators: Read&Execute, Read

System: Full, Modify, Read&Execute, Read, Write

 

Folder - {31B2F340-016D-11D2-945F-00C04FB984F9}

-------------------------------------------------------------------------------

Administrators: Full, Modify, Read&Execute, List Folder Contents,Read, Write

Authenticated Users: Read&Execute, Read, List Folder Contents

Group Policy Creator Owners: Read&Execute, List Folder Contents, Read, Write

Server Operators: Read&Execute, List Folder Contents, Read

System: Full, Modify, Read&Execute, List Folder Contents, Read, Write

 

Folder - Policies

------------------------

Administrators: Full, Modify, Read&Execute, List Folder Contents,Read, Write

Authenticated Users: Read&Execute, Read, List Folder Contents

Group Policy Creator Owners: Read&Execute, List Folder Contents, Read, Write

Server Operators: Read&Execute, List Folder Contents, Read

System: Full, Modify, Read&Execute, List Folder Contents, Read, Write

 

Error Messages

-----------------------------------

This one occurs first:

Event 1058

Windows cannot access the file gpt.ini for GPO

CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=beaumontproducts,DC=com.

The file must be present at the location

<\\beaumontproducts.com\sysvol\beaumontproducts.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>.

(Access is denied. ). Group Policy processing aborted.

 

Then is followed by this one:

Event 1030

Windows cannot query for the list of Group Policy objects. Check the

event log for possible messages previously logged by the policy engine

that describes the reason for this.

 

 

Thanks,

Mike Bailey

IT Director

 

mbailey@beaumontproducts.com

[Guest Coraleigh Miller]

Re: gpt.in Access is denied. Group Policy processing aborted

 

Hi Mike,

 

Was this server upgraded from Server 2000 when this started occuring?

Were there any configuration changes before this started?

Eventid.net has a ton of things you could try but read over them carefully

to see which may apply to you (as you know your system better than us) and

let us know if you have any questions or concerns with any of them.

http://www.eventid.net/display.asp?eventid=1058&eventno=1752&source=Userenv&phase=1

 

Also Microsoft has an article about this, but the hotfix they refer to was

supposed to be included in SP2 i beleive, you might want to try comparing

your file versions against the ones they list here..

http://support.microsoft.com/kb/842804/en-us

 

Coraleigh Miller

 

 

"Mike Bailey" <mbailey@beaumontproducts.com> wrote in message

news:%238qFn%23z6HHA.5772@TK2MSFTNGP03.phx.gbl...

> My server is Server 2003, SP2

> It's the PDC, DHCP, and DNS server. I also have another server which is

> the Backup DC.

>

> I've been getting the error below every 5 mins for the past few months.

> The error indicates that "Access is denies" to the gpt.ini. I have not

> changed any permissions on the sysvol folders myself. Below are the

> permissions from the file level on up. I hae no idea what is causing this

> and it doesn't seem to have an obviouse affect on anyone since there are

> no complaints from the usres.

>

> File - gpt.ini

> ---------

> Administrators: Full, Modify, Read&Execute, Read, Write

> Authenticated Users: Read&Execute, Read

> Group Policy Creator Owners: Read&Execute, Read, Write

> Server Operators: Read&Execute, Read

> System: Full, Modify, Read&Execute, Read, Write

>

> Folder - {31B2F340-016D-11D2-945F-00C04FB984F9}

> -------------------------------------------------------------------------------

> Administrators: Full, Modify, Read&Execute, List Folder Contents,Read,

> Write

> Authenticated Users: Read&Execute, Read, List Folder Contents

> Group Policy Creator Owners: Read&Execute, List Folder Contents, Read,

> Write

> Server Operators: Read&Execute, List Folder Contents, Read

> System: Full, Modify, Read&Execute, List Folder Contents, Read, Write

>

> Folder - Policies

> ------------------------

> Administrators: Full, Modify, Read&Execute, List Folder Contents,Read,

> Write

> Authenticated Users: Read&Execute, Read, List Folder Contents

> Group Policy Creator Owners: Read&Execute, List Folder Contents, Read,

> Write

> Server Operators: Read&Execute, List Folder Contents, Read

> System: Full, Modify, Read&Execute, List Folder Contents, Read, Write

>

> Error Messages

> -----------------------------------

> This one occurs first:

> Event 1058

> Windows cannot access the file gpt.ini for GPO

> CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=beaumontproducts,DC=com.

> The file must be present at the location

> <\\beaumontproducts.com\sysvol\beaumontproducts.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>.

> (Access is denied. ). Group Policy processing aborted.

>

> Then is followed by this one:

> Event 1030

> Windows cannot query for the list of Group Policy objects. Check the event

> log for possible messages previously logged by the policy engine that

> describes the reason for this.

>

>

> Thanks,

> Mike Bailey

> IT Director

>

> mbailey@beaumontproducts.com

[Guest Mike Bailey]

Re: gpt.in Access is denied. Group Policy processing aborted

 

Hey,

 

No, this server has been 2003 for over 2 years. I'm not sure of the date

that SP2 was applied. I also don't recall any configuration changes to

this server and I' mthe only one supporting it. The last thing done was

Diskeeper was in stalled on 7/11. These errors started occurring on

4/15 at 8:15 at night when our offices were closed. None of the

"Information" events prior to this one for the day show anything

alarming. That's what's so confusing about this - it seems to have

started for no apparent reason.

 

I'll read through the links you provided. Thanks for your help.

 

Mike

 

Coraleigh Miller wrote:

> Hi Mike,

>

> Was this server upgraded from Server 2000 when this started occuring?

> Were there any configuration changes before this started?

> Eventid.net has a ton of things you could try but read over them carefully

> to see which may apply to you (as you know your system better than us) and

> let us know if you have any questions or concerns with any of them.

> http://www.eventid.net/display.asp?eventid=1058&eventno=1752&source=Userenv&phase=1

>

> Also Microsoft has an article about this, but the hotfix they refer to was

> supposed to be included in SP2 i beleive, you might want to try comparing

> your file versions against the ones they list here..

> http://support.microsoft.com/kb/842804/en-us

>

> Coraleigh Miller

>

>

> "Mike Bailey" <mbailey@beaumontproducts.com> wrote in message

> news:%238qFn%23z6HHA.5772@TK2MSFTNGP03.phx.gbl...

>

>>My server is Server 2003, SP2

>>It's the PDC, DHCP, and DNS server. I also have another server which is

>>the Backup DC.

>>

>>I've been getting the error below every 5 mins for the past few months.

>>The error indicates that "Access is denies" to the gpt.ini. I have not

>>changed any permissions on the sysvol folders myself. Below are the

>>permissions from the file level on up. I hae no idea what is causing this

>>and it doesn't seem to have an obviouse affect on anyone since there are

>>no complaints from the usres.

>>

>>File - gpt.ini

>>---------

>>Administrators: Full, Modify, Read&Execute, Read, Write

>>Authenticated Users: Read&Execute, Read

>>Group Policy Creator Owners: Read&Execute, Read, Write

>>Server Operators: Read&Execute, Read

>>System: Full, Modify, Read&Execute, Read, Write

>>

>>Folder - {31B2F340-016D-11D2-945F-00C04FB984F9}

>>-------------------------------------------------------------------------------

>>Administrators: Full, Modify, Read&Execute, List Folder Contents,Read,

>>Write

>>Authenticated Users: Read&Execute, Read, List Folder Contents

>>Group Policy Creator Owners: Read&Execute, List Folder Contents, Read,

>>Write

>>Server Operators: Read&Execute, List Folder Contents, Read

>>System: Full, Modify, Read&Execute, List Folder Contents, Read, Write

>>

>>Folder - Policies

>>------------------------

>>Administrators: Full, Modify, Read&Execute, List Folder Contents,Read,

>>Write

>>Authenticated Users: Read&Execute, Read, List Folder Contents

>>Group Policy Creator Owners: Read&Execute, List Folder Contents, Read,

>>Write

>>Server Operators: Read&Execute, List Folder Contents, Read

>>System: Full, Modify, Read&Execute, List Folder Contents, Read, Write

>>

>>Error Messages

>>-----------------------------------

>>This one occurs first:

>>Event 1058

>>Windows cannot access the file gpt.ini for GPO

>>CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=beaumontproducts,DC=com.

>>The file must be present at the location

>><\\beaumontproducts.com\sysvol\beaumontproducts.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>.

>>(Access is denied. ). Group Policy processing aborted.

>>

>>Then is followed by this one:

>>Event 1030

>>Windows cannot query for the list of Group Policy objects. Check the event

>>log for possible messages previously logged by the policy engine that

>>describes the reason for this.

>>

>>

>>Thanks,

>>Mike Bailey

>>IT Director

>>

>>mbailey@beaumontproducts.com

>

>

>

[Guest Mike Bailey]

Re: gpt.in Access is denied. Group Policy processing aborted

 

Something new to add to this - not even sure if it's related or not...

 

For a few months now, occasionally my workstation would pop up a message

saying I had an IP Conflict. I haven't been able to figure this out. I

run DHCP on the server where this other problem with the grp.ini is

occuring.

 

I looked at my DHCP leases and saw my IP and two others marked as "This

address is already in use." I deleted all three.

 

Now, an hour or so later, my pc pops up the IP Conflict message again.

I look back at my DHCP and now there are 6 that say the IP is alrady in

use - the same three as before plus three new ones - and these all

happen to be IP address of printers/copiers that have been those IP's

for years. I need to add them to an exclusion list anyway.

 

I'm just wondering if this could be realted to the grp.ini error I'm

seeing. If not, what could be going on that suddenly my DHCP is failing

like that giving oput IP's already leased?

 

Mike

 

Mike Bailey wrote:

> My server is Server 2003, SP2

> It's the PDC, DHCP, and DNS server. I also have another server which is

> the Backup DC.

>

> I've been getting the error below every 5 mins for the past few months.

> The error indicates that "Access is denies" to the gpt.ini. I have not

> changed any permissions on the sysvol folders myself. Below are the

> permissions from the file level on up. I hae no idea what is causing

> this and it doesn't seem to have an obviouse affect on anyone since

> there are no complaints from the usres.

>

> File - gpt.ini

> ---------

> Administrators: Full, Modify, Read&Execute, Read, Write

> Authenticated Users: Read&Execute, Read

> Group Policy Creator Owners: Read&Execute, Read, Write

> Server Operators: Read&Execute, Read

> System: Full, Modify, Read&Execute, Read, Write

>

> Folder - {31B2F340-016D-11D2-945F-00C04FB984F9}

> -------------------------------------------------------------------------------

>

> Administrators: Full, Modify, Read&Execute, List Folder Contents,Read,

> Write

> Authenticated Users: Read&Execute, Read, List Folder Contents

> Group Policy Creator Owners: Read&Execute, List Folder Contents, Read,

> Write

> Server Operators: Read&Execute, List Folder Contents, Read

> System: Full, Modify, Read&Execute, List Folder Contents, Read, Write

>

> Folder - Policies

> ------------------------

> Administrators: Full, Modify, Read&Execute, List Folder Contents,Read,

> Write

> Authenticated Users: Read&Execute, Read, List Folder Contents

> Group Policy Creator Owners: Read&Execute, List Folder Contents, Read,

> Write

> Server Operators: Read&Execute, List Folder Contents, Read

> System: Full, Modify, Read&Execute, List Folder Contents, Read, Write

>

> Error Messages

> -----------------------------------

> This one occurs first:

> Event 1058

> Windows cannot access the file gpt.ini for GPO

> CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=beaumontproducts,DC=com.

> The file must be present at the location

> <\\beaumontproducts.com\sysvol\beaumontproducts.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>.

> (Access is denied. ). Group Policy processing aborted.

>

> Then is followed by this one:

> Event 1030

> Windows cannot query for the list of Group Policy objects. Check the

> event log for possible messages previously logged by the policy engine

> that describes the reason for this.

>

>

> Thanks,

> Mike Bailey

> IT Director

>

> mbailey@beaumontproducts.com

[Guest Coraleigh Miller]

Re: gpt.in Access is denied. Group Policy processing aborted

 

Hi Mike,

 

If your printers ips are within your DHCP scope then you should for sure set

up an exclusion list for your printers, or you should adjust your scope so

that these IPs are not within it... and this should get rid of your conflict

errors. Do you have enough free ips in your scope to give out to clients? I

would try fixing this and if making these beneficial changes to your DHCP

doesnt resolve your ip conflict issues then we can theorize that this could

be related to your original issue.

 

Coraleigh Miller

 

 

"Mike Bailey" <mbailey@beaumontproducts.com> wrote in message

news:u2aAPy87HHA.5424@TK2MSFTNGP02.phx.gbl...

> Something new to add to this - not even sure if it's related or not...

>

> For a few months now, occasionally my workstation would pop up a message

> saying I had an IP Conflict. I haven't been able to figure this out. I

> run DHCP on the server where this other problem with the grp.ini is

> occuring.

>

> I looked at my DHCP leases and saw my IP and two others marked as "This

> address is already in use." I deleted all three.

>

> Now, an hour or so later, my pc pops up the IP Conflict message again. I

> look back at my DHCP and now there are 6 that say the IP is alrady in

> use - the same three as before plus three new ones - and these all happen

> to be IP address of printers/copiers that have been those IP's for years.

> I need to add them to an exclusion list anyway.

>

> I'm just wondering if this could be realted to the grp.ini error I'm

> seeing. If not, what could be going on that suddenly my DHCP is failing

> like that giving oput IP's already leased?

>

> Mike

>

> Mike Bailey wrote:

>> My server is Server 2003, SP2

>> It's the PDC, DHCP, and DNS server. I also have another server which is

>> the Backup DC.

>>

>> I've been getting the error below every 5 mins for the past few months.

>> The error indicates that "Access is denies" to the gpt.ini. I have not

>> changed any permissions on the sysvol folders myself. Below are the

>> permissions from the file level on up. I hae no idea what is causing this

>> and it doesn't seem to have an obviouse affect on anyone since there are

>> no complaints from the usres.

>>

>> File - gpt.ini

>> ---------

>> Administrators: Full, Modify, Read&Execute, Read, Write

>> Authenticated Users: Read&Execute, Read

>> Group Policy Creator Owners: Read&Execute, Read, Write

>> Server Operators: Read&Execute, Read

>> System: Full, Modify, Read&Execute, Read, Write

>>

>> Folder - {31B2F340-016D-11D2-945F-00C04FB984F9}

>> -------------------------------------------------------------------------------

>>

>> Administrators: Full, Modify, Read&Execute, List Folder Contents,Read,

>> Write

>> Authenticated Users: Read&Execute, Read, List Folder Contents

>> Group Policy Creator Owners: Read&Execute, List Folder Contents, Read,

>> Write

>> Server Operators: Read&Execute, List Folder Contents, Read

>> System: Full, Modify, Read&Execute, List Folder Contents, Read, Write

>>

>> Folder - Policies

>> ------------------------

>> Administrators: Full, Modify, Read&Execute, List Folder Contents,Read,

>> Write

>> Authenticated Users: Read&Execute, Read, List Folder Contents

>> Group Policy Creator Owners: Read&Execute, List Folder Contents, Read,

>> Write

>> Server Operators: Read&Execute, List Folder Contents, Read

>> System: Full, Modify, Read&Execute, List Folder Contents, Read, Write

>>

>> Error Messages

>> -----------------------------------

>> This one occurs first:

>> Event 1058

>> Windows cannot access the file gpt.ini for GPO

>> CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=beaumontproducts,DC=com.

>> The file must be present at the location

>> <\\beaumontproducts.com\sysvol\beaumontproducts.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>.

>> (Access is denied. ). Group Policy processing aborted.

>>

>> Then is followed by this one:

>> Event 1030

>> Windows cannot query for the list of Group Policy objects. Check the

>> event log for possible messages previously logged by the policy engine

>> that describes the reason for this.

>>

>>

>> Thanks,

>> Mike Bailey

>> IT Director

>>

>> mbailey@beaumontproducts.com