Thanks! Slow to reply because I've been checking things out re: your
suggestions...
Neither the W32tm -monitor nor the GPOTool showed anything amiss. Then
again, going back to check, it was time stamped this time yesterday, so
things I did later in the day may have resolved this.
Here is the text of the event error ID (ID: 1058)
Windows cannot access the file gpt.ini for GPO
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=napcc,DC=aspca,DC=int.
The file must be present at the location
<\\napcc.aspca.int\sysvol\napcc.aspca.int\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>.
(There is a time and/or date difference between the client and server. ).
Group Policy processing aborted.
For the GPOTOOL, each and every policy (both on this DC and on one other)
list each GPO, followed by "Policy OK". The job ends with "Policies OK".
Interesting thing regarding the W32TM -monitor job...
The error (source of this discussion) is our oldest DC, is probably our
oldest "running" physical server, and is due to be demoted to a member
service (and scrapped some time after that). It has the unfortunate name
of "ATTILA".
The other DCs (I fear there are 2 additional physical + 2 VMs) are more
aptly named. Anyway, the W32TM -monitor has been run on my desktop, on a
newer DC, and on ATTILA.
The results all show results in the following order:
ATTILA
MWO-DC1 (which is supposed to be the PDC Emulator)
MWO-DC2
MWODC02 (a newly created VM)
MWODC01 (a newly created VM)
Is there any significance to the order in which they appear? They all
list an offset from MWO-DC1.
HOWEVER, there is also a "RefID:". On the three physical boxes, they
point to outside servers. The new VM DCs all point to MWO-DC1 (which I
believe the others should as well.) I predict that when I look in the
registries of the physical DCs, I'll see their type as "NTP"...
I believe I really need to change that to "NT5DS", right? Thing is, if I
simply enter a command (from my desktop or from some servers) "NET TIME",
I get the time from ATTILA ("Current time at \\ATTILA is 9/23/2009 10:10
AM"). If things were not screwy, should I get "Current time at \\MWO-DC1
is..."?
Long posting, but thanks!
--
richard
"Free, Bob" <[email protected]> wrote on 09/23/2009 09:48:35 AM:
> Richard-
>
> {31B2F340-016D-11D2-945F-00C04FB984F9} is the well-known GUID for
> your Default Doman Policy. (Default Domain and Default Domain
> Controllers each have a well-known GUID that is the same in all
> environments, all your other GPOs will have a GUID that is truly
> unique to your environment.
>
> Given your recent w32time issues and the text in the error message,
> the first thing I would do is run w32tm ?monitor in a command prompt
> on a system in the domain. That will give you a listing of all your
> DC?s time offsets relative to the source.
>
> I?d also run gpotool.exe just as a sanity check that all the GPOs
> are intact and in good shape.
>
> The event ID would be helpful as well as the rest of the text in the
> error e.g.- (followed by assorted LDAP pointers)
>
> From: [email protected] [mailto:[email protected]]
> Sent: Wednesday, September 23, 2009 7:25 AM
> To: NT System Admin Issues
> Subject: Another GPO question...
>
>
> Greetings!
>
> First, thanks to all who have worked with me in dealing with Windows
> Time Services problems. This may or may not be related...
>
> On one DC, I get a red USERENV error, GPO-related:
>
> Windows cannot access the file gpt.ini for GPO
> CN={31B2F340-016D-11D2-945F-00C04FB984F9} (followed by assorted
> LDAP pointers). The message ends with "(There is a time and/or date
> difference between the client and server. ). Group Policy
processingaborted."
>
> Browsing the file system, I find that GPO folder in .\SYSVOL. What
> I cannot find is, what is this particular GPO supposed to be doing,
> and what client has the time difference?
>
> Thanks!
> --
> Richard D. McClary
> Systems Administrator, Information Technology Group
>
> ASPCA®
> 1717 S. Philo Rd, Ste 36
> Urbana, IL 61802
>
> [email protected]
>
> P: 217-337-9761
> C: 217-417-1182
> F: 217-337-9761
> www.aspca.org
>
> The information contained in this e-mail, and any attachments
> hereto, is from The American Society for the Prevention of Cruelty to
Animals®
> (ASPCA®) and is intended only for use by the addressee(s) named
> herein and may contain legally privileged and/or confidential
> information. If you are not the intended recipient of this e-mail,
> you are hereby notified that any dissemination, distribution,
> copying or use of the contents of this e-mail, and any attachments
> hereto, is strictly prohibited. If you have received this e-mail in
> error, please immediately notify me by reply email and permanently
> delete the original and any copy of this e-mail and any printout
thereof.
>
>
>
>
>
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
