Ошибка 1030 ошибка при обработке групповой политики

• Remove From My Forums

• Вопрос

• На сервере Windows Server 2012 (роль сервер DHCP) в журнале событий периодически появляется ошибка:

  Источник: GroupPolicy (Microsoft-Windows-GroupPolicy)

  ID: 1030

  Ошибка при обработке групповой политики. Windows пыталась получить новые параметры групповой политики для этого пользователя или компьютера. На вкладке «Подробности» можно найти код и описание ошибки. Windows автоматически
  повторит попытку выполнения этой операции при следующем цикле обновления. Присоединенные к домену компьютеры должны успешно проходить процесс разрешения имени и иметь подключение к контроллеру домена для обнаружения новых
  объектов групповой политики и их параметров. Когда обработка групповой политики будет выполнена успешно, это событие будет записано в журнал.

  В сети работает два контроллера домена — один на базе Windows Server 2012, другой на базе Windows Server 2003 R2.

  Не могу понять, почему возникает эта ошибка.

Hello, 

Can somebody shed a light on this issue?

On few of our Terminal servers, we see following error:

The processing of Group Policy failed Windows attempted to retrieve new Group Policy settings for this user or computer.Look in the details tab for error
code and  description Windows will automatically retry this operation at the next refresh cycle. Computers
joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new group policy objects and settings. An event will be logged when Group Policy os successful.

In the event details, it says status 0 :

The operation completed successfully

All the servers that show the error, have the same GPO’s applied to it. As it seems that all the errors can be linked to users that are part of one particular AD group, I think I can link it to 1 GPO with security filtering on that group. I’ve compared the
security filtering configuration with other GPOs that have the same settings on other servers, everything is similar but only this GPO is causing problem (if I’m correct that this GPO is the cause of the error).

The group with the affected users has «read and apply GPO rights» and Authenticated users only have «read» on the GPO. The GPO contains screensaver timeout setting and startup script that launches an application when logging on…

Also, the error doesn’t seem to occur when logging on, maybe when refreshing the GPOs periodically?

Any ideas?

Regards,

WiM

• Edited by

  Monday, February 17, 2020 12:02 PM
  Formatting issue

Hello, 

Can somebody shed a light on this issue?

On few of our Terminal servers, we see following error:

The processing of Group Policy failed Windows attempted to retrieve new Group Policy settings for this user or computer.Look in the details tab for error
code and  description Windows will automatically retry this operation at the next refresh cycle. Computers
joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new group policy objects and settings. An event will be logged when Group Policy os successful.

In the event details, it says status 0 :

The operation completed successfully

All the servers that show the error, have the same GPO’s applied to it. As it seems that all the errors can be linked to users that are part of one particular AD group, I think I can link it to 1 GPO with security filtering on that group. I’ve compared the
security filtering configuration with other GPOs that have the same settings on other servers, everything is similar but only this GPO is causing problem (if I’m correct that this GPO is the cause of the error).

The group with the affected users has «read and apply GPO rights» and Authenticated users only have «read» on the GPO. The GPO contains screensaver timeout setting and startup script that launches an application when logging on…

Also, the error doesn’t seem to occur when logging on, maybe when refreshing the GPOs periodically?

Any ideas?

Regards,

WiM

• Edited by

  Monday, February 17, 2020 12:02 PM
  Formatting issue

• Remove From My Forums

• Question

• We are getting event ID 1030, error code 58 appearing on all domain joined computers, including domain controllers.

  Event Description:

  The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windows will automatically retry this operation at the next refresh cycle.
  Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful.

  Event Detail:

  System

    — Provider

     [ Name]  Microsoft-Windows-GroupPolicy
     [ Guid]  {AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}
     EventID 1030
     Version 0
     Level 2
     Task 0
     Opcode 1
     Keywords 0x8000000000000000

   
    — TimeCreated
     [ SystemTime]  2012-06-12T00:19:31.734258300Z
     EventRecordID 191165

   
    — Correlation
     [ ActivityID]  {464CBB72-656C-4632-A2AA-31E797F0A8DE}

   
    — Execution
     [ ProcessID]  908
     [ ThreadID]  2368
     Channel System
     Computer DC1.domain.local

   
    — Security
     [ UserID]  S-1-5-18

  — EventData

    SupportInfo1 1
    SupportInfo2 2070
    ProcessingMode 0
    ProcessingTimeInMilliseconds 515
    ErrorCode 58
    ErrorDescription The specified server cannot perform the requested operation. 
  
    DCName \DC1.domain.local

  I’ve followed
  http://technet.microsoft.com/en-us/library/7e940882-33b7-43db-b097-f3752c84f67f and everything is looking good up to event ID 5311 and then Group Policy processing fails.

  I’ve run GPLOGVIEW -m and it shows processing fail for the currently logged on user as well as the computer.

  The computer in question (that I want to resolve first) is one of three domain controllers in the AD domain. It is hosting DNS, and IP settings are pointing to itself (127.0.0.1) for DNS.

  I have tried/checked:

  • pointing at another DNS (DC), running ipconfig /flushdns and nbtstat -R with no improvement.
  • DCDIAG/test:dns comes back clean on all DCs.
  • I can ping by host name all DCs.
  • I can ping the domain name and a DC responds.
  • DNS SRV records have been checked and are all present, as are CNAMES and A records.
  • AD replication (as per DCDIAG) is fine as well.

  THere are no logon issues, problems with Exchange or other applications. It is just GrouP Policy Processing that is failing across the board.

  It therefore does not look like a connectivity failure, but I can’t find any more useful information from the logs. Any help would be greatly appreciated.

• Remove From My Forums

• Question

• We are getting event ID 1030, error code 58 appearing on all domain joined computers, including domain controllers.

  Event Description:

  The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windows will automatically retry this operation at the next refresh cycle.
  Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful.

  Event Detail:

  System

    — Provider

     [ Name]  Microsoft-Windows-GroupPolicy
     [ Guid]  {AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}
     EventID 1030
     Version 0
     Level 2
     Task 0
     Opcode 1
     Keywords 0x8000000000000000

   
    — TimeCreated
     [ SystemTime]  2012-06-12T00:19:31.734258300Z
     EventRecordID 191165

   
    — Correlation
     [ ActivityID]  {464CBB72-656C-4632-A2AA-31E797F0A8DE}

   
    — Execution
     [ ProcessID]  908
     [ ThreadID]  2368
     Channel System
     Computer DC1.domain.local

   
    — Security
     [ UserID]  S-1-5-18

  — EventData

    SupportInfo1 1
    SupportInfo2 2070
    ProcessingMode 0
    ProcessingTimeInMilliseconds 515
    ErrorCode 58
    ErrorDescription The specified server cannot perform the requested operation. 
  
    DCName \DC1.domain.local

  I’ve followed
  http://technet.microsoft.com/en-us/library/7e940882-33b7-43db-b097-f3752c84f67f and everything is looking good up to event ID 5311 and then Group Policy processing fails.

  I’ve run GPLOGVIEW -m and it shows processing fail for the currently logged on user as well as the computer.

  The computer in question (that I want to resolve first) is one of three domain controllers in the AD domain. It is hosting DNS, and IP settings are pointing to itself (127.0.0.1) for DNS.

  I have tried/checked:

  • pointing at another DNS (DC), running ipconfig /flushdns and nbtstat -R with no improvement.
  • DCDIAG/test:dns comes back clean on all DCs.
  • I can ping by host name all DCs.
  • I can ping the domain name and a DC responds.
  • DNS SRV records have been checked and are all present, as are CNAMES and A records.
  • AD replication (as per DCDIAG) is fine as well.

  THere are no logon issues, problems with Exchange or other applications. It is just GrouP Policy Processing that is failing across the board.

  It therefore does not look like a connectivity failure, but I can’t find any more useful information from the logs. Any help would be greatly appreciated.