Events 1030 and 1058 logged on domain controller every 5 minutes

The Events 1030 and 1058 are logged on only 1 of 3 domain controllers every 10 minutes. The client machines dont suffer for this problem. The problem started being logged in the Application event log on the same day that serveral Windows updates were installed. The messsages that were logged in the Application log every 10 minutes are below:

Source: Userenv
Category: None
Event ID: 1058
User: NT Authority\System
Computer: DC01

Description:
Windows cannot access the file gpt.ini for GPO
cn={BC039577-B0F3-45A6-991E-849E54A84857},cn=policies,cn=system,DC={our_domain},DC=com.
The file must be present at the location
<\\{our_domain}\SysVol\{our_domain}\Policies\{BC039577-B0F3-45A6-991E-849E54A84857}\gpt.ini>. (Access is denied. ). Group Policy processing aborted.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Source: Userenv
Category: None
Event ID: 1030
User: NT Authority\System
Computer: DC01

Windows cannot query for the list of Group Policy objects. Check the event
log for possible messages previously logged by the policy engine that
describes the reason for this.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Can you try to check the time on the DC and also check to verify that it is proper.

The GPOs are updated on DCs every 10 minutes, it is 90 minutes for clients. Therefore this GPO should be the Domain Controller Policy GPO rather than a Domain Policy GPO.

I had the same problem with 1030 and 1058 appearing in application events on both DC's. The DC's have NIC's teamed. The userenv errors started when the DC's were automatically restarted after an update was installed. So what I did was I run dfsutil /PurgeMupCache on both DC's and the errors stopped appearing. You can also find this info in http://support.microsoft.com/kb/842804 which you have already posted above.

Code:

---


Events 1030 and 1058 are logged on only one of three domain controllers every
5 minutes. Client machines do not exhibit these symptoms. The issue started
being logged in the Application event log on the same day that several
Windows updates (908531, 910437, 911280, 925398, 908519, 911567, 911897,
911927, 911562, 914388, 912919) were installed.

Found several KB articles dealing with this error:
http://support.microsoft.com/kb/842804
WaitForNetwork DWORD value not present on DC01 or DC02 (DC02 does not have
this problem or the Hotfix referenced in this article)

http://support.microsoft.com/kb/839499
Verified registry entries are already as recommended

http://support.microsoft.com/kb/887303
DNS servers and permissions are correct

http://support.microsoft.com/kb/290647
Permissions are as recommended

Server DC01: Windows Server 2003 Standard SP1 (affected server)
Server DC02: Windows Server 2003 Standard SP1

Two messages logged in the Application log every 5 minutes:
===Message 1===========

Source: Userenv
Category: None
Event ID: 1058
User: NT Authority\System
Computer: DC01

Description:
Windows cannot access the file gpt.ini for GPO
cn={BC039577-B0F3-45A6-991E-849E54A84857},cn=policies,cn=system,DC={our_domain },DC=com.
The file must be present at the location
<\\{our_domain}\SysVol\{our_domain}\Policies\{BC03 9577-B0F3-45A6-991E-849E54A84857}\gpt.ini>. (Access is denied. ). Group Policy processing aborted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

===Message 2===========

Source: Userenv
Category: None
Event ID: 1030
User: NT Authority\System
Computer: DC01

Windows cannot query for the list of Group Policy objects. Check the event
log for possible messages previously logged by the policy engine that
describes the reason for this.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

--
GiG

---