The Processing of Group Policy Failed. Windows Attempted to Read the File Gpt.ini

Fixing Group Policy Replication issues

I ran into an issue where GPUpdate kept returning the error below:

"Computer policy could non be updated successfully.  The following errors were encountered: The processing of Group Policy failed.  Windows attempted to read the file \\Company.LOCAL\sysvol\<FQDN>\Policies\{XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX}\gpt.ini from a domain controller and was not successful.  Group Policy settings may not be applied until this issue is resolved. This issue may be transient and could exist acquired by one or more of the following:

a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on some other domain controller has non replicated to the current domain controller).
c) The Distributed File System (DFS) customer has been disabled.

To diagnose the failure, review the consequence log or invoke gpmc.msc to access information about Grouping Policy results."

In my case the DCs got out of sync and the fix was to complete an authoritative restore of SYSVOL

Solution:

Backup your SYSVOL folders earlier following any of these steps. If something goes wrong during the process all files could be deleted.

Encounter replication condition


  • Make certain SYSVOL is advertising
    • Dcdiag /due east /examination:sysvolcheck /test:advertising
    • For /f %i IN ('dsquery server -o rdn') practise @echo %i && @wmic /node:"%i" /namespace:\\root\microsoftdfs path dfsrreplicatedfolderinfo WHERE replicatedfoldername='SYSVOL share' get replicationgroupname,replicatedfoldername,state
      • All servers should exist in land 4 (Normal)
      • https://support.microsoft.com/en-u.s.a./assistance/2958414/dfs-replication-how-to-troubleshoot-missing-sysvol-and-netlogon-shares
    • Use Agile Directory Replication Status Tool to find bug
      • https://world wide web.microsoft.com/en-us/download/details.aspx?id=30005

Fix SYSVOL


  • perform authoritative restore of SYSVOL
    1. Follow the steps EXACTLY. You should also disable the service and so that it does not auto offset while yous are making changes.
    2. The <the server name to replicate from> does not take to be the PDC, it can be whatever server that has the correct re-create of SYSVOL.
    3. I never saw events 2002 and 4602 on the secondary servers, but everything worked as expected.
    4. Ran: For /f %i IN ('dsquery server -o rdn') exercise @repeat %i && @wmic /node:"%i" /namespace:\\root\microsoftdfs path dfsrreplicatedfolderinfo WHERE replicatedfoldername='SYSVOL share' get replicationgroupname,replicatedfoldername,land
      1. All servers were in state 4(Normal)
    5. http://jackstromberg.com/2014/07/sysvol-and-grouping-policy-out-of-sync-on-server-2012-r2-dcs-using-dfsr/
    6. https://support.microsoft.com/en-us/help/2218556/how-to-force-an-authoritative-and-non-administrative-synchronization-fo


Popular posts from this blog

Best Practices for Deploying User Profile Disks

Image

FSLogix Troubleshooting guide

Image

Deploying FSLogix Part 365 Containers

Image

tindalbitterephe.blogspot.com

Source: https://www.amorales.org/2019/05/fixing-group-policy-replication-issues.html

0 Response to "The Processing of Group Policy Failed. Windows Attempted to Read the File Gpt.ini"

Post a Comment

Iklan Atas Artikel

Iklan Tengah Artikel 1

Iklan Tengah Artikel 2

Iklan Bawah Artikel