Event ID 1053, 1030 and 1085. Connection problems

[Haffie]

I have a connection problem.
Every 10 or 15 minutes Windows (WindowsXP prof SP2, up to date) can't
connect with the DC (Server 2003 ent SP1, up to date) anymore. I get no ping
reply from the server for several minutes. This means that all programs that
need a server to work (for example Outlook. Even RIS takes longer then
normal) stops working. This is very annoying.

Log on to WindowsXP takes up to 5 minutes to fully load. It hangs on the
logon screen.
I reinstalled both my computer and the server, but the problem remains.

I get the following errors on my computer:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1053
Date: 28-10-2006
Time: 12:22:37
User: NT AUTHORITY\SYSTEM
Computer: name
Description:
Windows cannot determine the user or computer name. (The specified domain
either does not exist or could not be contacted. ). Group Policy processing
aborted.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 28-10-2006
Time: 11:40:01
User: domain\user
Computer: name
Description:
Windows cannot query for the list of Group Policy objects. A message that
describes the reason for this was previously logged by the policy engine.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1085
Date: 27-10-2006
Time: 20:03:55
User: NT AUTHORITY\SYSTEM
Computer: name
Description:
The Group Policy client-side extension Security failed to execute. Please
look for any errors reported earlier by that extension.


People say that this is a DNS problem, but I can’t find the appropriate
knowledge base article and I compared my DNS settings with another server.
I have to add that I have a gigabyte network (Network cards all have the
latest drivers) and found a couple of articles in the knowledge base already

http://support.microsoft.com/kb/326152/en-us
http://support.microsoft.com/kb/908370/en-us
http://support.microsoft.com/kb/325487/en-us

None of them work or point me to the right direction.

I hope I’ve been clear enough and somebody understand what my problem is.

Please help...

[Andrei Ungureanu [MVP]]

Have you looked in the server Event Viewer? Do you have any erors there?
Very short about DNS: your clients should point to the DNS server that holds
you domain zone (most probably the DC itself - NOT the ISP DNS). And the
same for the DC - if it's holding that zone it should point to itself (and
then set up forwarders for external name resolution).

[Robert L [MVP - Networking]]

This case study may help,

Event ID 1058, 1059 and 1030 Event ID 1058, 1059 and 1030. Event ID 1058 is Group Policy related issue. Normally, there are two symptoms: "network path not found" and "access denied". ...
http://www.chicagotech.net/troublesh.../event1058.htm


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Haffie" <Haffie@discussions.microsoft.com> wrote in message news:F1AD86C3-0577-4D1B-8A7F-48400176274E@microsoft.com...
I have a connection problem.
Every 10 or 15 minutes Windows (WindowsXP prof SP2, up to date) can't
connect with the DC (Server 2003 ent SP1, up to date) anymore. I get no ping
reply from the server for several minutes. This means that all programs that
need a server to work (for example Outlook. Even RIS takes longer then
normal) stops working. This is very annoying.

Log on to WindowsXP takes up to 5 minutes to fully load. It hangs on the
logon screen.
I reinstalled both my computer and the server, but the problem remains.

I get the following errors on my computer:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1053
Date: 28-10-2006
Time: 12:22:37
User: NT AUTHORITY\SYSTEM
Computer: name
Description:
Windows cannot determine the user or computer name. (The specified domain
either does not exist or could not be contacted. ). Group Policy processing
aborted.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 28-10-2006
Time: 11:40:01
User: domain\user
Computer: name
Description:
Windows cannot query for the list of Group Policy objects. A message that
describes the reason for this was previously logged by the policy engine.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1085
Date: 27-10-2006
Time: 20:03:55
User: NT AUTHORITY\SYSTEM
Computer: name
Description:
The Group Policy client-side extension Security failed to execute. Please
look for any errors reported earlier by that extension.


People say that this is a DNS problem, but I can’t find the appropriate
knowledge base article and I compared my DNS settings with another server.
I have to add that I have a gigabyte network (Network cards all have the
latest drivers) and found a couple of articles in the knowledge base already

http://support.microsoft.com/kb/326152/en-us
http://support.microsoft.com/kb/908370/en-us
http://support.microsoft.com/kb/325487/en-us

None of them work or point me to the right direction.

I hope I’ve been clear enough and somebody understand what my problem is.

Please help...

[Haffie]

Yes, I looked in the server event log. No errors there.

And the clients point to the DC (DC=DNS server).
Primary DNS is the DC
Secondary is an outside ISP DNS (else my internet won't work everytime the
connection is lost).

The event ID really is 1085 (I checked it twice) not 1058

You should not outside ISP DNS as Secondary DNS.

[Haffie]

I know that using an outside DNS is not the best way to solve this problem,
But like i said earlier everytime my computer losses it's connection with the
server the internet won't work anymore. (Belief me this happens every 5/10
minutes. Very annoying).

But DNS couldn't be the problem. I think it has something to do with the
Network(cards)
I have a gigabit network and i found a article about this

http://support.microsoft.com/kb/326152/en-us

I already disabled media sense on all my pc's and also on the server, but
the problem remains. I have downgraded the networkcards to 100 Mb Full duplex
(also tried half duplex). Still nothing...I did solve the problem once, but
after reinstalling the server the problem came back. Now I can't find the
right article anymore...

Can somebody help me?

[lscapa]

Haffie,

Again let me point out that this issue comes from having your secondary DNS as an ISP address. You MUST only use internal DNS for AD. The DNS server should then be setup to forward those requests to the external DNS servers at your ISP. Change it. The connection issue every 5/10 minutes is something else entirely.