Group Policies are not Getting applied with Event 1030 and 1065

Article translations Article translations
Close Close
Article ID: 2003581 - View products that this article applies to.
Expand all | Collapse all

Symptoms

Group Policies were not getting applied on the Client Machines and on the SBS 2003 Server

We get the Following Error on the SBS 2003 Server in Application Logs

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date:  10/2/2009
Time:  10:53:22 AM
User:  NT AUTHORITY\SYSTEM
Computer: <SERVERNAME>
Description:
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages 
Previously logged by the policy engine that describes the reason for this.

Event Source: Userenv
Event Category: None
Event ID: 1065
Date:  10/2/2009
Time:  10:53:22 AM
User:  NT AUTHORITY\SYSTEM
Computer: <SERVERNAME>
Description:
Windows cannot perform filter check for Group Policy object 
CN={AF28D61E-2708-4100-AA38-0754B709A042},CN=Policies,CN=System,DC=domain,DC=local. Group Policy processing aborted.

WMI and Dcom are working fine on the Server

Open Group Policy Management Console, locate the GUID in the error with event id 1065.In our case the GUID {AF28D61E-2708-4100-AA38-0754B709A042} was for Small Business Server Internet Connection Firewall Policy

Small Business Server Internet Connection Firewall was not linked to PreSp2 WMI Filter under Group Policy Management Console

We tried to Link Small Business Server Internet Connection Firewall to PreSp2 WMI Filter and we got the following error message.
---------------------------
Group Policy Management
---------------------------
Initialization failure
---------------------------
OK  
---------------------------

Cause

gPCWQLFilter” attribute has Incorrect Domain name value

Resolution

We checked the gPCWQLFilter Attribute value using Adsiedit Tool for CN={AF28D61E-2708-4100-AA38-0754B709A042}, CN=Policies, CN=System, DC=Domain, DC=local, gPCWQLFilter has attribute Value [OEMSBSDN-3380.local;{A4B1B2CE-FD58-40FC-9B17-7BB1888DD03A};0] so we Changed it to [Domain.local;{A4B1B2CE-FD58-40FC-9B17-7BB1888DD03A};0]

After making these changes we were able to Link Small Business Server Internet Connection Firewall Policy to PreSp2 WMI Filter under Group Policy Management Console

Run Gpupdate/force to apply the Group Policy Changes

 

 

More Information

Note--Actual Domain name was Domain.local where as gPCWQLFilter has a Domain name as OEMSBSDN-3380.local.

Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.

Properties

Article ID: 2003581 - Last Review: April 26, 2010 - Revision: 2.0
APPLIES TO
  • Microsoft Windows Small Business Server 2003 Standard Edition
  • Microsoft Windows Small Business Server 2003 Premium Edition
  • Microsoft Windows Small Business Server 2003 R2 Premium Edition
  • Microsoft Windows Small Business Server 2003 R2 Standard Edition
Keywords: 
KB2003581

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com