View Full Version : Event ID Error 1030, 1058 and 333


Arash Fattahi
08-13-2005, 11:31 AM
Dear All,

We have been using Windows Server 2003 Enterprise Edition in our LAN for
three month:
1. The first one (BTEHSRV-1) is handling our Mail Server and working as a
File Server and Domain Controller.
2. The second one (BTEHSRV-2) is handling our ISA Server 2004 Standard
Edition and working as an Application Server
Every thing was OK.

Since three weeks ago, I've been receiving some errors in System Event
Viewer and Application Event Viewer on BTEHSRV-1 and after on day, our LAN
doesn't work and our users can not access the network resources. After I
restart BTEHSRV-1, every thing work properly. This problem ocures weekly.

in Application Event Viewer:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 8/12/2005
Time: 5:18:45 PM
User: NT AUTHORITY\SYSTEM
Computer: BTEHSRV-1
Description:
Windows cannot query for the list of Group Policy objects. Check the event
log for possible messages previously logged by the policy engine that
describes the reason for this.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

AND:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 8/12/2005
Time: 5:18:45 PM
User: NT AUTHORITY\SYSTEM
Computer: BTEHSRV-1
Description:
Windows cannot access the file gpt.ini for GPO
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=buhlerteh
,DC=com. The file must be present at the location
<\\buhlerteh.com\sysvol\buhlerteh.com\Policies\{31B2F340-016D-11D2-945F-00C0
4FB984F9}\gpt.ini>. (Configuration information could not be read from the
domain controller, either because the machine is unavailable, or access has
been denied. ). Group Policy processing aborted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
----------------------------------------------------------------------------
-----

in System Event Viewer:

Event Type: Error
Event Source: Application Popup
Event Category: None
Event ID: 333
Date: 8/12/2005
Time: 8:00:08 PM
User: N/A
Computer: BTEHSRV-1
Description:
An I/O operation initiated by the Registry failed unrecoverably. The
Registry could not read in, or write out, or flush, one of the files that
contain the system's image of the Registry.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 6c 00 ......l.
0008: 00 00 00 00 4d 01 00 c0 ....M..À
0010: 00 00 00 00 4d 01 00 c0 ....M..À
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Appreciate any ideas.
Thanks in advance
Arash Fattahi
MCP

Jon Wallace
09-19-2005, 07:00 AM
have you disabled your DFS service, doing this can sometimes yield these
types of problems?



"Arash Fattahi" <arash.fattahi@gmail.com> wrote in message
news:eIoHoI$nFHA.3960@TK2MSFTNGP12.phx.gbl...
> Dear All,
>
> We have been using Windows Server 2003 Enterprise Edition in our LAN for
> three month:
> 1. The first one (BTEHSRV-1) is handling our Mail Server and working as a
> File Server and Domain Controller.
> 2. The second one (BTEHSRV-2) is handling our ISA Server 2004 Standard
> Edition and working as an Application Server
> Every thing was OK.
>
> Since three weeks ago, I've been receiving some errors in System Event
> Viewer and Application Event Viewer on BTEHSRV-1 and after on day, our LAN
> doesn't work and our users can not access the network resources. After I
> restart BTEHSRV-1, every thing work properly. This problem ocures weekly.
>
> in Application Event Viewer:
>
> Event Type: Error
> Event Source: Userenv
> Event Category: None
> Event ID: 1030
> Date: 8/12/2005
> Time: 5:18:45 PM
> User: NT AUTHORITY\SYSTEM
> Computer: BTEHSRV-1
> Description:
> Windows cannot query for the list of Group Policy objects. Check the event
> log for possible messages previously logged by the policy engine that
> describes the reason for this.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
> AND:
>
> Event Type: Error
> Event Source: Userenv
> Event Category: None
> Event ID: 1058
> Date: 8/12/2005
> Time: 5:18:45 PM
> User: NT AUTHORITY\SYSTEM
> Computer: BTEHSRV-1
> Description:
> Windows cannot access the file gpt.ini for GPO
> CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=buhlerteh
> ,DC=com. The file must be present at the location
> <\\buhlerteh.com\sysvol\buhlerteh.com\Policies\{31B2F340-016D-11D2-945F-00C0
> 4FB984F9}\gpt.ini>. (Configuration information could not be read from the
> domain controller, either because the machine is unavailable, or access
> has
> been denied. ). Group Policy processing aborted.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> ----------------------------------------------------------------------------
> -----
>
> in System Event Viewer:
>
> Event Type: Error
> Event Source: Application Popup
> Event Category: None
> Event ID: 333
> Date: 8/12/2005
> Time: 8:00:08 PM
> User: N/A
> Computer: BTEHSRV-1
> Description:
> An I/O operation initiated by the Registry failed unrecoverably. The
> Registry could not read in, or write out, or flush, one of the files that
> contain the system's image of the Registry.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 00 00 00 00 01 00 6c 00 ......l.
> 0008: 00 00 00 00 4d 01 00 c0 ....M..À
> 0010: 00 00 00 00 4d 01 00 c0 ....M..À
> 0018: 00 00 00 00 00 00 00 00 ........
> 0020: 00 00 00 00 00 00 00 00 ........
>
> Appreciate any ideas.
> Thanks in advance
> Arash Fattahi
> MCP
>
>