Group Policy sometimes not being applied.

We have a recurring, intermittent problem in which users suddenly loose
access to their mapped network drives and cannot regain access to them for an
hour of two even though they repeatedly re-login from their Windows XP
machines to our Windows 2003 server. The server is the only server in our
domain. The network can run for a week or two with no problems, then this
problem recurs.

The users are apparently not getting their OU’s group policy applied (which
contains the login script that does the mappings) even though running
gpresult at their workstations shows the policy as having been applied. They
successfully login, but the login script in their OU’s GPO does not run and
they have no mapped network drives after login.

After a server reboot we see the following error message in the server’s
Application Log:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 11/21/2007
Time: 9:47:30 AM
User: OCPD\administrator
Computer: TAG6951
Description:
Windows cannot access the file gpt.ini for GPO
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=ocpd,DC=dpds.
The file must be present at the location
<\\ocpd.dpds\sysvol\ocpd.dpds\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>.
(Logon failure: the user has not been granted the requested logon type at
this computer. ). Group Policy processing aborted.

Followed by:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 11/21/2007
Time: 9:47:30 AM
User: OCPD\administrator
Computer: TAG6951
Description:
Windows cannot query for the list of Group Policy objects. Check the event
log for possible messages previously logged by the policy engine that
describes the reason for this.

We can always manually map the drives from the workstations.

Does anyone have any thoughts on what could be causing this?

Thanks.

Hi Karen,

Did you ever find the solutio to this ?. I am having a similar intermittent
problem at different sites. It appears that some login scripts are not being
executed thereby some ntwork divves are not being mapped.
A gpudate /force seemd to fix it, but it does not tell me what the root
cause of the problem and how to overcome it long term, it's more of a
workaround

Thanks
--
THM


"Karen Wayland" wrote:

> We have a recurring, intermittent problem in which users suddenly loose
> access to their mapped network drives and cannot regain access to them for an
> hour of two even though they repeatedly re-login from their Windows XP
> machines to our Windows 2003 server. The server is the only server in our
> domain. The network can run for a week or two with no problems, then this
> problem recurs.
>
> The users are apparently not getting their OU’s group policy applied (which
> contains the login script that does the mappings) even though running
> gpresult at their workstations shows the policy as having been applied. They
> successfully login, but the login script in their OU’s GPO does not run and
> they have no mapped network drives after login.
>
> After a server reboot we see the following error message in the server’s
> Application Log:
>
> Event Type: Error
> Event Source: Userenv
> Event Category: None
> Event ID: 1058
> Date: 11/21/2007
> Time: 9:47:30 AM
> User: OCPD\administrator
> Computer: TAG6951
> Description:
> Windows cannot access the file gpt.ini for GPO
> CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=ocpd,DC=dpds.
> The file must be present at the location
> <\\ocpd.dpds\sysvol\ocpd.dpds\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>.
> (Logon failure: the user has not been granted the requested logon type at
> this computer. ). Group Policy processing aborted.
>
> Followed by:
>
> Event Type: Error
> Event Source: Userenv
> Event Category: None
> Event ID: 1030
> Date: 11/21/2007
> Time: 9:47:30 AM
> User: OCPD\administrator
> Computer: TAG6951
> Description:
> Windows cannot query for the list of Group Policy objects. Check the event
> log for possible messages previously logged by the policy engine that
> describes the reason for this.
>
> We can always manually map the drives from the workstations.
>
> Does anyone have any thoughts on what could be causing this?
>
> Thanks.

We are not sure, but we think that it may have been a group policy issue. A
security group that all users were a member of was set to "Deny access to
this computer from the network" under Domain Controller Security Policy. I do
not know why it was an intermittent prolblem and not a permanent one.

"Karen Wayland" wrote:

> We have a recurring, intermittent problem in which users suddenly loose
> access to their mapped network drives and cannot regain access to them for an
> hour of two even though they repeatedly re-login from their Windows XP
> machines to our Windows 2003 server. The server is the only server in our
> domain. The network can run for a week or two with no problems, then this
> problem recurs.
>
> The users are apparently not getting their OU’s group policy applied (which
> contains the login script that does the mappings) even though running
> gpresult at their workstations shows the policy as having been applied. They
> successfully login, but the login script in their OU’s GPO does not run and
> they have no mapped network drives after login.
>
> After a server reboot we see the following error message in the server’s
> Application Log:
>
> Event Type: Error
> Event Source: Userenv
> Event Category: None
> Event ID: 1058
> Date: 11/21/2007
> Time: 9:47:30 AM
> User: OCPD\administrator
> Computer: TAG6951
> Description:
> Windows cannot access the file gpt.ini for GPO
> CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=ocpd,DC=dpds.
> The file must be present at the location
> <\\ocpd.dpds\sysvol\ocpd.dpds\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>.
> (Logon failure: the user has not been granted the requested logon type at
> this computer. ). Group Policy processing aborted.
>
> Followed by:
>
> Event Type: Error
> Event Source: Userenv
> Event Category: None
> Event ID: 1030
> Date: 11/21/2007
> Time: 9:47:30 AM
> User: OCPD\administrator
> Computer: TAG6951
> Description:
> Windows cannot query for the list of Group Policy objects. Check the event
> log for possible messages previously logged by the policy engine that
> describes the reason for this.
>
> We can always manually map the drives from the workstations.
>
> Does anyone have any thoughts on what could be causing this?
>
> Thanks.

Thanks Karen,

I'll post back here if I find the solution
--
THM


"Karen Wayland" wrote:

> We are not sure, but we think that it may have been a group policy issue. A
> security group that all users were a member of was set to "Deny access to
> this computer from the network" under Domain Controller Security Policy. I do
> not know why it was an intermittent prolblem and not a permanent one.
>
> "Karen Wayland" wrote:
>
> > We have a recurring, intermittent problem in which users suddenly loose
> > access to their mapped network drives and cannot regain access to them for an
> > hour of two even though they repeatedly re-login from their Windows XP
> > machines to our Windows 2003 server. The server is the only server in our
> > domain. The network can run for a week or two with no problems, then this
> > problem recurs.
> >
> > The users are apparently not getting their OU’s group policy applied (which
> > contains the login script that does the mappings) even though running
> > gpresult at their workstations shows the policy as having been applied. They
> > successfully login, but the login script in their OU’s GPO does not run and
> > they have no mapped network drives after login.
> >
> > After a server reboot we see the following error message in the server’s
> > Application Log:
> >
> > Event Type: Error
> > Event Source: Userenv
> > Event Category: None
> > Event ID: 1058
> > Date: 11/21/2007
> > Time: 9:47:30 AM
> > User: OCPD\administrator
> > Computer: TAG6951
> > Description:
> > Windows cannot access the file gpt.ini for GPO
> > CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=ocpd,DC=dpds.
> > The file must be present at the location
> > <\\ocpd.dpds\sysvol\ocpd.dpds\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>.
> > (Logon failure: the user has not been granted the requested logon type at
> > this computer. ). Group Policy processing aborted.
> >
> > Followed by:
> >
> > Event Type: Error
> > Event Source: Userenv
> > Event Category: None
> > Event ID: 1030
> > Date: 11/21/2007
> > Time: 9:47:30 AM
> > User: OCPD\administrator
> > Computer: TAG6951
> > Description:
> > Windows cannot query for the list of Group Policy objects. Check the event
> > log for possible messages previously logged by the policy engine that
> > describes the reason for this.
> >
> > We can always manually map the drives from the workstations.
> >
> > Does anyone have any thoughts on what could be causing this?
> >
> > Thanks.

I have same trouble and was just fadeup with the same.
This helped me:

Open local security policy:
Start -> Programs -> Administrative Tools -> Local Security Policy
OR
Start -> Run -> "secpol.msc" <enter>
OR
Start -> Run -> "gpedit.msc" <enter> -> Computer Configuration ->
Windows Settings

And then:

Security Settings -> Local Policies -> User Rights Assignment

Doube click "Access this computer from the network" and check that
EVERYONE is added to the list. If not add it.

Hope this helps you too.

~Atul D. Patil