Cannot edit a Domain Group Policy Object

Event ID: 1030 - 1058

Symptoms: 1. When you attempt to open or edit a domain Group Policy Object (GPO) on a computer running Windows 2000/2003 Server, you may receive the following error message:

The domain controller for Group Policy operations is not available. You may cancel this operation for this session or retry using one of the following domain controller choices:

The one with the Operations Master token for the PDC emulator
The one used by the Active Directory Snap-ins
Use any available domain controller

If you choose any of these options, you may receive the following error message:

“Failed to find a domain controller. There may be a policy that prevents you from selecting another domain controller”.

2. When you select the Edit of Default Domain Policy, you may receive these message: “Failed to open the Group Policy Object. You may not have appropriate rights” and “Configuration information could not be read from the domain controller, either because the machine is unavailable, or access has been denied”.

3. In the Event Viewer, you may have the following errors:

Event Source: Userenv

Event ID: 1030

Description: Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.

Event Source: Userenv

Event ID: 1058

Description: Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=chicagotech,DC=local. The file must be present at the location <\\chicagotech.local\sysvol\chicagotech.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. (Configuration information could not be read from the domain controller, either because the machine is unavailable, or access has been denied. ). Group Policy processing aborted.

Causes: 1. There is an incorrect DNS settings or the SBS/DC is running on a multihomed computer.

2. File and Printer Sharing for Microsoft Networks is not enabled on the domain controller.

3. The TCP/IP NetBIOS Helper service is disabled.

Post your questions, comments, feedbacks and suggestions

Contact a consultant