Troubleshooting Event ID 1058, Group Policy gpt.ini

Posted by Ahmed Nabil In | 6 comments»
Event ID 1058

Event ID: 1058
Source: Group Policy

"The Processing of Group Policy failed. Windows attempted to read the file \\domain\sysvol\domain\policies\{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}\gpt.ini from a domain controller and was not successful."

I passed by this error lately with several environments running Windows 2008 or 2008R2 Domain controllers. The key element in resolving this issue is to determine which group policy is causing this problem.
When you install GPMC you get a sample folder full of very useful scripts that make use of GPMC COM interfaces, The Script we are looking for is the DumpGPOInfo.wsf. For some reason Windows 2008 doesn’t include this folder and you will have to download it manually from the following link
After downloading and installing the Sample scripts, use the above mentioned file to get the name of the GPO generating the above error.
Cscript DumpGPOInfo.wsf {xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}
This will give you the friendly name of the GPO.
You may delete, rename……….etc the GPO from the Group Policy Management Console. In my case I just enabled/disabled one setting and it worked fine and I was able to recreate the GPT.ini file back.
6 Comments
Comments

6 comments:

eduardo matriz Says:

Hi, I am very interesting your post in you blog 'cause I have the same problem and need to fix. I already download and install the said scripts but the problem is I can't go through 'cause your post didn't mentioned where I go to check the errors of my GPO...Can you give me the sample step?

Thanks and more power!

Ahmed Nabil Says:

Thanks for your feedback. After getting your friendly name GPO using the above script, just open this GP from the GPMC and check its setting as well as the GPT.ini. In my case the GPT.ini file was missing so i removed the GP and created it again. One other case i had to change one of its settings to make it work. It all depends on your GP.

Ivano Carrara Says:

Dear Mr. Ahmed, since more than one year I have the error: Event ID: 1058 - Source: Group Policy

"The Processing of Group Policy failed. Windows attempted to read the file \\domain\sysvol\domain\policies\{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}\gpt.ini from a domain controller and was not successful."

I understood that you blog post is about my issue but still I can't resolve my issu, so I'm very frustrated, and I hope you can help me.

My Win 2008R2 server machine act both as Domain Controller and Terminal Server, and was migrated from a Win 2003 server with the same roles.

All users are working without apparently problems but I have the log full of the above error message - In my case the GPT.ini file was really missing.

In Group Policy Management Console if I try to Edit the Default Domain Policy or the Default Domain Controllers Policy I get the error that it is impossible to find the element and that it is impossible to find the specified path.

I'm very worried about the situation and I hope you can help me, here or eventually writing me directly to different agreement.

Thank you in advance for your help !

Ivano Carrara

Ahmed Nabil Says:

Ivano, Have you identified the Problematic GP ? Have you tried Recreating it again. Please check my earlier comments on the post.

Unknown Says:

Hi all,
We had the same problem, but we using PowerShell a lot and MS build in the command
In your example you need to uses
Get-gpo –guide 31B2F340-016D-11D2-945F-00C04FB984F9 –domain “domain from your environment”

this will give you the info you need - F9 is the default domain policy

Alejandro Gómez Espinosa Says:

Alejandro Gomez E Says:

Hi Folks

The best is restore the default gpo

https://technet.microsoft.com/en-us/library/hh875588%28v=ws.11%29.aspx

Post a Comment