Have you checked out www.Eventid.net? here is what the site says may be the problem with those 1030 http://www.eventid.net/display.asp?eventid=1030&eventno=1542&source=Userenv&phase=1 Hope this helps --John -------------- Original message ---------------------- From: "Bobby Benninger" <bobby.benninger@xxxxxxxxx> > Yes I get Userenv Event 1030 error in the Application log: "Windows cannot > query for the list of Group Policy Objects. A message that describes this > reason was previously logged by the policy engine." > > I can't figure out where this previous message is, unless it is the warning > in my System log - which is source: LSASRV, category: SPNEGO (negotiator), > event id: 40961, message: "The Security System could not establish a secured > connection with the server > ldap/vcfile01.veredus.local/veredus.local@xxxxxxxxxxxxxx No authentication > protocol was available." > > I found an article on MS that says this could mean DFS is disabled in the > reg but I checked and that is not the case. What do you think? > > > thanks, > bob > > On Mon, Jun 30, 2008 at 1:36 PM, Thomas Marantz <TomMarantz@xxxxxxxxxxxxxxxx> > wrote: > > > As Darren mentioned, do you have anything in your Applications Event Log? > > > > > > > > *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On > > Behalf Of *Bobby Benninger > > *Sent:* Monday, June 30, 2008 10:33 AM > > *To:* gptalk@xxxxxxxxxxxxx > > *Subject:* [gptalk] Re: Computer Policy Stuck on Machine? (corrected) > > > > > > > > I don't see an error in RSOP, just the exclamation point that shows up and > > the information still showing the GPO. > > > > > > > > I have run dcdiag on all my DC's and replication is running OK, although is > > was not when I first created the GPO. > > > > > > > > Is it safe to manually remove these folders from Sysvol? And if so, which > > folder should I remove? > > > > On Mon, Jun 30, 2008 at 1:23 PM, Darren Mar-Elia <darren@xxxxxxxxxx> > > wrote: > > > > Bobby- > > > > Couple of things. First off, did you notice what the error message was in > > RSOP? Software installation policies sometimes require a couple of reboots > > before they get picked up. You should also see errors in the application > > event log on the client that might tell why the install failed. > > > > > > > > In terms of RSOP still showing the GPO even though its gone, I suspect its > > stuck in the client's history in the registry. Frankly, it should clear out > > eventually so I wouldn't worry too much about it. > > > > > > > > Though I'm curious about your last statement. You say you deleted the GPO > > but it still has a part of it in SYSVOL? That's not good and indicates to me > > that you have some replication issues with FRS that you should probably > > solve before re-creating that GPO. > > > > > > Darren > > > > > > > > > > > > *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On > > Behalf Of *Bobby Benninger > > *Sent:* Monday, June 30, 2008 10:14 AM > > *To:* gptalk@xxxxxxxxxxxxx > > *Subject:* [gptalk] Computer Policy Stuck on Machine? (corrected) > > > > > > > > Sorry I forgot to attach the files! > > > > ---------- Forwarded message ---------- > > From: *Bobby Benninger* <bobby.benninger@xxxxxxxxx> > > Date: Mon, Jun 30, 2008 at 1:13 PM > > Subject: Computer Policy Stuck on Machine? > > To: gptalk@xxxxxxxxxxxxx > > > > Hi folks, I created a group policy to roll out the Office Compatibility > > Pack for 2007 (O12Conv.MSI). > > > > > > > > I created a new OU to test, put my machine name in it, and created an > > assigned software install for this MSI. > > > > > > > > The policy applied at startup but the software never installed. When I run > > rsop.msc it shows what I think is a pending software assignment (please see > > rsop.jpg). If I look at the advanced deployment options I get what is in the > > "script info.jpg". > > > > > > > > I have deleted the GPO and rebooted my machine several times and run > > gpupdate /force, but I still get the same info in rsop.msc, also I had some > > replication issues but those have been resolved. > > > > > > > > Is there an issue with the policy stuck on my machine and could you give me > > some suggestions how to remove it (so I can re-create the GPO and test > > installing the 012Conv.MSI)? Should I delete the policy folder > > "{8062B822-1E92-48D7-B535-610092827A9A}" off of Sysvol? > > > > > > > > Thanks so much for your help! > > > > > > > > > > > > - bob > > > > > > > > > >
--- Begin Message ---
- From: "Bobby Benninger" <bobby.benninger@xxxxxxxxx>
- To: gptalk@xxxxxxxxxxxxx
- Date: Fri, 4 Jul 2008 18:56:05 +0000
Yes I get Userenv Event 1030 error in the Application log: "Windows cannot query for the list of Group Policy Objects. A message that describes this reason was previously logged by the policy engine."I can't figure out where this previous message is, unless it is the warning in my System log - which is source: LSASRV, category: SPNEGO (negotiator), event id: 40961, message: "The Security System could not establish a secured connection with the server ldap/vcfile01.veredus.local/veredus.local@xxxxxxxxxxxxxx No authentication protocol was available."I found an article on MS that says this could mean DFS is disabled in the reg but I checked and that is not the case. What do you think?thanks,bobOn Mon, Jun 30, 2008 at 1:36 PM, Thomas Marantz <TomMarantz@xxxxxxxxxxxxxxxx> wrote:
As Darren mentioned, do you have anything in your Applications Event Log?
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Bobby Benninger
Sent: Monday, June 30, 2008 10:33 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Computer Policy Stuck on Machine? (corrected)
I don't see an error in RSOP, just the exclamation point that shows up and the information still showing the GPO.
I have run dcdiag on all my DC's and replication is running OK, although is was not when I first created the GPO.
Is it safe to manually remove these folders from Sysvol? And if so, which folder should I remove?
On Mon, Jun 30, 2008 at 1:23 PM, Darren Mar-Elia <darren@xxxxxxxxxx> wrote:
Bobby-
Couple of things. First off, did you notice what the error message was in RSOP? Software installation policies sometimes require a couple of reboots before they get picked up. You should also see errors in the application event log on the client that might tell why the install failed.
In terms of RSOP still showing the GPO even though its gone, I suspect its stuck in the client's history in the registry. Frankly, it should clear out eventually so I wouldn't worry too much about it.
Though I'm curious about your last statement. You say you deleted the GPO but it still has a part of it in SYSVOL? That's not good and indicates to me that you have some replication issues with FRS that you should probably solve before re-creating that GPO.
Darren
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Bobby Benninger
Sent: Monday, June 30, 2008 10:14 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Computer Policy Stuck on Machine? (corrected)
Sorry I forgot to attach the files!
---------- Forwarded message ----------
From: Bobby Benninger <bobby.benninger@xxxxxxxxx>
Date: Mon, Jun 30, 2008 at 1:13 PM
Subject: Computer Policy Stuck on Machine?
To: gptalk@xxxxxxxxxxxxxHi folks, I created a group policy to roll out the Office Compatibility Pack for 2007 (O12Conv.MSI).
I created a new OU to test, put my machine name in it, and created an assigned software install for this MSI.
The policy applied at startup but the software never installed. When I run rsop.msc it shows what I think is a pending software assignment (please see rsop.jpg). If I look at the advanced deployment options I get what is in the "script info.jpg".
I have deleted the GPO and rebooted my machine several times and run gpupdate /force, but I still get the same info in rsop.msc, also I had some replication issues but those have been resolved.
Is there an issue with the policy stuck on my machine and could you give me some suggestions how to remove it (so I can re-create the GPO and test installing the 012Conv.MSI)? Should I delete the policy folder "{8062B822-1E92-48D7-B535-610092827A9A}" off of Sysvol?
Thanks so much for your help!
- bob
--- End Message ---
