RE: [ActiveDir] Application Log Event Errors

[Robert Mezzone]

I have two Windows Server 2003 DC's. Every time I reboot them in a particular order, I get the error. I eliminate the problem by shutting down both servers, reboot the first DC I created in the domain then start up the second server. For some reason, one I haven't been able to figure out, if I reboot the first DC I built (I forget the correct term) while the second is up and running I get the message you mentioned below, every five minutes in the application event log. Like yourself, I'll live without the hot fix. Fortunately I don't have a large environment so I can easily fix the error when I forget to reboot in the correct order.   Robert From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Edwin Sent: Thursday, June 24, 2004 12:42 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Application Log Event Errors I am getting numerous errors in the Application Event logs that are provided below.   Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.   Windows cannot access the file gpt.ini for GPO cn={4A2B990D-CE94-4AF6-BB85-5521AAEEE954},cn=policies,cn=system,DC=mydomain,DC=com. The file must be present at the location <\\mydomain.com\SysVol\mydomain.com\Policies\{4A2B990D-CE94-4AF6-BB85-5521AAEEE954}\gpt.ini>. (Access is denied. ). Group Policy processing aborted.   According to the error the system cannot find the gpt.ini file in the path \\mydomain.com\SysVol\mydomain.com\Policies\{4A2B990D-CE94-4AF6-BB85-5521AAEEE954 because permission is denied.   NTFS permissions on the directory have not been modified.  The permissions defined on the directory mentioned above are:   Authenticated Users:                 Read & Execute                 List Folder Contents                 Read   Creator Owner                 Special Permissions   Domain Admins                 Full Control   Enterprise Admins                 Full Control   Enterprise Domain Controllers                 Read & Execute                 List Folder Contents                 Read   System                 Full Control   Primary DC                 Read & Execute                 List Folder Contents                 Read   Secondary DC                 Read & Execute                 List Folder Contents                 Read   I have read KB Ariticle #810907 but I would rather not install a Hotfix if not absolutely necessary.  Has anyone else experienced this?  If so, were you able to remedy the error without the Hotfix?  If so, how.   Thank you.