We are getting event ID 1030, error code 58 appearing on all domain joined computers, including domain controllers.
Event Description:
The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windows will automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful.
Event Detail:System
- Provider
[ Name] Microsoft-Windows-GroupPolicy
[ Guid] {AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}
EventID 1030
Version 0
Level 2
Task 0
Opcode 1
Keywords 0x8000000000000000
- TimeCreated
[ SystemTime] 2012-06-12T00:19:31.734258300Z
EventRecordID 191165
- Correlation
[ ActivityID] {464CBB72-656C-4632-A2AA-31E797F0A8DE}
- Execution
[ ProcessID] 908
[ ThreadID] 2368
Channel System
Computer DC1.domain.local
- Security
[ UserID] S-1-5-18
- EventData
SupportInfo1 1
SupportInfo2 2070
ProcessingMode 0
ProcessingTimeInMilliseconds 515
ErrorCode 58
ErrorDescription The specified server cannot perform the requested operation.
DCName \\DC1.domain.local
I've followed http://technet.microsoft.com/en-us/library/7e940882-33b7-43db-b097-f3752c84f67f and everything is looking good up to event ID 5311 and then Group Policy processing fails.
I've run GPLOGVIEW -m and it shows processing fail for the currently logged on user as well as the computer.
The computer in question (that I want to resolve first) is one of three domain controllers in the AD domain. It is hosting DNS, and IP settings are pointing to itself (127.0.0.1) for DNS.
I have tried/checked:
- pointing at another DNS (DC), running ipconfig /flushdns and nbtstat -R with no improvement.
- DCDIAG/test:dns comes back clean on all DCs.
- I can ping by host name all DCs.
- I can ping the domain name and a DC responds.
- DNS SRV records have been checked and are all present, as are CNAMES and A records.
- AD replication (as per DCDIAG) is fine as well.
THere are no logon issues, problems with Exchange or other applications. It is just GrouP Policy Processing that is failing across the board.
It therefore does not look like a connectivity failure, but I can't find any more useful information from the logs. Any help would be greatly appreciated.