Hello,

Can anyone please help me with this Group Policy issue? When I run a gpupdate /force, this is what I see.:

Computer policy could not be updated successfully. The following errors were encountered:

The processing of Group Policy failed. Windows attempted to read the file \my.domain\SysVol\my.domain\Policies{D8A80757-D6B7-45EE-B2EE-F567F3B6DE10}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
User Policy could not be updated successfully. The following errors were encountered:

The processing of Group Policy failed. Windows attempted to read the file \my.domain\SysVol\my.domain\Policies{25B53139-F871-4611-91FB-10A1D2E57082}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.

To diagnose the failure, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.

I’ve run a dcdiag /v and these are the results:

Directory Server Diagnosis

Performing initial setup:

Trying to find home server…

  • Verifying that the local machine OHIODC, is a Directory Server.

Home Server = OHIODC

  • Connecting to directory service on server OHIODC.

  • Identified AD Forest.

Collecting AD specific global data

  • Collecting site info.

Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=my,DC=domain,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),…

The previous call succeeded

Iterating through the sites

Looking at base site object: CN=NTDS Site Settings,CN=Redacted,CN=Sites,CN=Configuration,DC=my,DC=domain

Getting ISTG and options for the site

Looking at base site object: CN=NTDS Site Settings,CN=Redacted,CN=Sites,CN=Configuration,DC=my,DC=domain

Getting ISTG and options for the site

Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=my,DC=domain

Getting ISTG and options for the site

Looking at base site object: CN=NTDS Site Settings,CN=Redacted,CN=Sites,CN=Configuration,DC=my,DC=domain

Getting ISTG and options for the site

Looking at base site object: CN=NTDS Site Settings,CN=Redacted,CN=Sites,CN=Configuration,DC=my,DC=domain

Getting ISTG and options for the site

  • Identifying all servers.

Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=my,DC=domain,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),…

The previous call succeeded…

The previous call succeeded

Iterating through the list of servers

Getting information for the server CN=NTDS Settings,CN=CADC,CN=Servers,CN=Redacted,CN=Sites,CN=Configuration,DC=my,DC=domain

objectGuid obtained

InvocationID obtained

dnsHostname obtained

site info obtained

All the info for the server collected

Getting information for the server CN=NTDS Settings,CN=OHIODC,CN=Servers,CN=Redacted,CN=Sites,CN=Configuration,DC=my,DC=domain

objectGuid obtained

InvocationID obtained

dnsHostname obtained

site info obtained

All the info for the server collected

Getting information for the server CN=NTDS Settings,CN=TXDC2,CN=Servers,CN=Redacted,CN=Sites,CN=Configuration,DC=my,DC=domain

objectGuid obtained

InvocationID obtained

dnsHostname obtained

site info obtained

All the info for the server collected

Getting information for the server CN=NTDS Settings,CN=TXDC2,CN=Servers,CN=Redacted,CN=Sites,CN=Configuration,DC=my,DC=domain

objectGuid obtained

InvocationID obtained

dnsHostname obtained

site info obtained

All the info for the server collected

  • Identifying all NC cross-refs.

  • Found 4 DC(s). Testing 1 of them.

Done gathering initial info.

Doing initial required tests

Testing server: Redacted\OHIODC

Starting test: Connectivity

  • Active Directory LDAP Services Check

Determining IP4 connectivity

  • Active Directory RPC Services Check

… OHIODC passed test Connectivity

Doing primary tests

Testing server: Redacted\OHIODC

Starting test: Advertising

The DC OHIODC is advertising itself as a DC and having a DS.

The DC OHIODC is advertising as an LDAP server

The DC OHIODC is advertising as having a writeable directory

The DC OHIODC is advertising as a Key Distribution Center

The DC OHIODC is advertising as a time server

The DS OHIODC is advertising as a GC.

… OHIODC passed test Advertising

Test omitted by user request: CheckSecurityError

Test omitted by user request: CutoffServers

Starting test: FrsEvent

  • The File Replication Service Event log test

Skip the test because the server is running DFSR.

… OHIODC passed test FrsEvent

Starting test: DFSREvent

The DFS Replication Event Log.

There are warning or error events within the last 24 hours after the

SYSVOL has been shared. Failing SYSVOL replication problems may cause

Group Policy problems.

A warning event occurred. EventID: 0x80001396

Time Generated: 04/19/2023 09:59:46

Event String:

The DFS Replication service is stopping communication with partner CADC for replication group Domain System Volume due to an error. The service will retry the connection periodically.

Additional Information:

Error: 9036 (Paused for backup or restore)

Connection ID: 5115D3D0-52FF-45C3-AB1E-9DDB2AA2B8DA

Replication Group ID: 55C589CE-1D7D-4942-8E6E-58BE8BA59F84

A warning event occurred. EventID: 0x80001396

Time Generated: 04/19/2023 11:30:58

Event String:

The DFS Replication service is stopping communication with partner TXDC2 for replication group Domain System Volume due to an error. The service will retry the connection periodically.

Additional Information:

Error: 9036 (Paused for backup or restore)

Connection ID: 1FD810F6-1D9C-4AFA-B19B-ECB66982A3FA

Replication Group ID: 55C589CE-1D7D-4942-8E6E-58BE8BA59F84

A warning event occurred. EventID: 0x80001396

Time Generated: 04/19/2023 14:00:09

Event String:

The DFS Replication service is stopping communication with partner CADC for replication group Domain System Volume due to an error. The service will retry the connection periodically.

Additional Information:

Error: 9036 (Paused for backup or restore)

Connection ID: 5115D3D0-52FF-45C3-AB1E-9DDB2AA2B8DA

Replication Group ID: 55C589CE-1D7D-4942-8E6E-58BE8BA59F84

An error event occurred. EventID: 0xC000138A

Time Generated: 04/19/2023 14:00:26

Event String:

The DFS Replication service encountered an error communicating with partner CADC for replication group Domain System Volume.

Partner DNS address: CADC.my.domain

Optional data if available:

Partner WINS Address: CADC

Partner IP Address: XX.XX.X.XXX

The service will retry the connection periodically.

Additional Information:

Error: 9036 (Paused for backup or restore)

Connection ID: 5115D3D0-52FF-45C3-AB1E-9DDB2AA2B8DA

Replication Group ID: 55C589CE-1D7D-4942-8E6E-58BE8BA59F84

A warning event occurred. EventID: 0x80001396

Time Generated: 04/19/2023 15:31:16

Event String:

The DFS Replication service is stopping communication with partner TXDC2 for replication group Domain System Volume due to an error. The service will retry the connection periodically.

Additional Information:

Error: 9036 (Paused for backup or restore)

Connection ID: 1FD810F6-1D9C-4AFA-B19B-ECB66982A3FA

Replication Group ID: 55C589CE-1D7D-4942-8E6E-58BE8BA59F84

An error event occurred. EventID: 0xC000138A

Time Generated: 04/19/2023 15:31:31

Event String:

The DFS Replication service encountered an error communicating with partner TXDC2 for replication group Domain System Volume.

Partner DNS address: TXDC2.my.domain

Optional data if available:

Partner WINS Address: TXDC2

Partner IP Address: XX.XX.X.XXX

The service will retry the connection periodically.

Additional Information:

Error: 9036 (Paused for backup or restore)

Connection ID: 1FD810F6-1D9C-4AFA-B19B-ECB66982A3FA

Replication Group ID: 55C589CE-1D7D-4942-8E6E-58BE8BA59F84

A warning event occurred. EventID: 0x80001396

Time Generated: 04/19/2023 18:00:48

Event String:

The DFS Replication service is stopping communication with partner CADC for replication group Domain System Volume due to an error. The service will retry the connection periodically.

Additional Information:

Error: 9036 (Paused for backup or restore)

Connection ID: 5115D3D0-52FF-45C3-AB1E-9DDB2AA2B8DA

Replication Group ID: 55C589CE-1D7D-4942-8E6E-58BE8BA59F84

A warning event occurred. EventID: 0x80001396

Time Generated: 04/19/2023 19:31:45

Event String:

The DFS Replication service is stopping communication with partner TXDC2 for replication group Domain System Volume due to an error. The service will retry the connection periodically.

Additional Information:

Error: 9036 (Paused for backup or restore)

Connection ID: 1FD810F6-1D9C-4AFA-B19B-ECB66982A3FA

Replication Group ID: 55C589CE-1D7D-4942-8E6E-58BE8BA59F84

A warning event occurred. EventID: 0x80001396

Time Generated: 04/19/2023 22:01:12

Event String:

The DFS Replication service is stopping communication with partner CADC for replication group Domain System Volume due to an error. The service will retry the connection periodically.

Additional Information:

Error: 9036 (Paused for backup or restore)

Connection ID: 5115D3D0-52FF-45C3-AB1E-9DDB2AA2B8DA

Replication Group ID: 55C589CE-1D7D-4942-8E6E-58BE8BA59F84

A warning event occurred. EventID: 0x80001396

Time Generated: 04/19/2023 23:32:03

Event String:

The DFS Replication service is stopping communication with partner TXDC2 for replication group Domain System Volume due to an error. The service will retry the connection periodically.

Additional Information:

Error: 9036 (Paused for backup or restore)

Connection ID: 1FD810F6-1D9C-4AFA-B19B-ECB66982A3FA

Replication Group ID: 55C589CE-1D7D-4942-8E6E-58BE8BA59F84

A warning event occurred. EventID: 0x80001396

Time Generated: 04/20/2023 01:00:50

Event String:

The DFS Replication service is stopping communication with partner CADC for replication group Domain System Volume due to an error. The service will retry the connection periodically.

Additional Information:

Error: 9036 (Paused for backup or restore)

Connection ID: 5115D3D0-52FF-45C3-AB1E-9DDB2AA2B8DA

Replication Group ID: 55C589CE-1D7D-4942-8E6E-58BE8BA59F84

An error event occurred. EventID: 0xC000138A

Time Generated: 04/20/2023 01:01:06

Event String:

The DFS Replication service encountered an error communicating with partner CADC for replication group Domain System Volume.

Partner DNS address: CADC.my.domain

Optional data if available:

Partner WINS Address: CADC

Partner IP Address: XX.XX.X.XXX

The only error I’m really seeing in Event Viewer is this:

The DFS Replication service encountered an error communicating with partner CADC for replication group Domain System Volume.

Partner DNS address: CADC.my.domain

Optional data if available:
Partner WINS Address: CADC
Partner IP Address: XX.X.X.XXX

The service will retry the connection periodically.

Additional Information:
Error: 9036 (Paused for backup or restore)
Connection ID: 5115D3D0-52FF-45C3-AB1E-9DDB2AA2B8DA
Replication Group ID: 55C589CE-1D7D-4942-8E6E-58BE8BA59F84

Which from what I understand is normal when you run Veeam Backup & Replication? Am I missing something? Thanks in advance.

8 Spice ups

I have four DC’s, OHIODC, CADC, TXDC1, and TXDC2. When I run a dcdiag /s against TXDC1 I’m seeing this:

Performing initial setup:

  • Identified AD Forest.

Done gathering initial info.

Doing initial required tests

Testing server: Redacted\TXDC1

Starting test: Connectivity

… TXDC1 passed test Connectivity

Doing primary tests

Testing server: Redacted\TXDC1

Starting test: Advertising

… TXDC1 passed test Advertising

Starting test: FrsEvent

… TXDC1 passed test FrsEvent

Starting test: DFSREvent

The event log DFS Replication on server TXDC1.my.domain could not be queried, error 0x6ba

“The RPC server is unavailable.”

… TXDC1 failed test DFSREvent

Starting test: SysVolCheck

… TXDC1 passed test SysVolCheck

Starting test: KccEvent

The event log Directory Service on server TXDC1.my.domain could not be queried, error 0x6ba

“The RPC server is unavailable.”

… TXDC1 failed test KccEvent

Starting test: KnowsOfRoleHolders

… TXDC1 passed test KnowsOfRoleHolders

Starting test: MachineAccount

… TXDC1 passed test MachineAccount

Starting test: NCSecDesc

… TXDC1 passed test NCSecDesc

Starting test: NetLogons

… TXDC1 passed test NetLogons

Starting test: ObjectsReplicated

… TXDC1 passed test ObjectsReplicated

Starting test: Replications

… TXDC1 passed test Replications

Starting test: RidManager

… TXDC1 passed test RidManager

Starting test: Services

… TXDC1 passed test Services

Starting test: SystemLog

The event log System on server TXDC1.my.domain could not be queried, error 0x6ba

“The RPC server is unavailable.”

… TXDC1 failed test SystemLog

Starting test: VerifyReferences

… TXDC1 passed test VerifyReferences

Running partition tests on : ForestDnsZones

Starting test: CheckSDRefDom

… ForestDnsZones passed test CheckSDRefDom

Starting test: CrossRefValidation

… ForestDnsZones passed test CrossRefValidation

Running partition tests on : DomainDnsZones

Starting test: CheckSDRefDom

… DomainDnsZones passed test CheckSDRefDom

Starting test: CrossRefValidation

… DomainDnsZones passed test CrossRefValidation

Running partition tests on : Schema

Starting test: CheckSDRefDom

… Schema passed test CheckSDRefDom

Starting test: CrossRefValidation

… Schema passed test CrossRefValidation

Running partition tests on : Configuration

Starting test: CheckSDRefDom

… Configuration passed test CheckSDRefDom

Starting test: CrossRefValidation

… Configuration passed test CrossRefValidation

Running partition tests on : my

Starting test: CheckSDRefDom

… my passed test CheckSDRefDom

Starting test: CrossRefValidation

… my passed test CrossRefValidation

Running enterprise tests on : my.domain

Starting test: LocatorCheck

… my.domain passed test LocatorCheck

Starting test: Intersite

… my.domain passed test Intersite

Could “The RPC Server is unavailable” be my issue? Thanks.

Hello,

Have you made sure that the PC you are trying to update can access the SYSVOL network folder? You can check by going to file explorer \OHIODC. From what I can see in the initial error message is that it is not able to read the the domain controller file for GPOs.

Yes it can access the SYSVOL folder. The odd thing is though, neither of the two policies show in File Explorer. {D8A80757-D6B7-45EE-B2EE-F567F3B6DE10} or {25B53139-F871-4611-91FB-10A1D2E57082}. At least not on this DC.

In fact, I don’t see these policies listed in the SYSVOL folder of any of the four DC’s.

Are you using central store? If so does gpmc say it or does it reference local?

Thanks for the help! As I dug further into this, we got rid of one particular policy that seemed to be causing the issue. For whatever reason, policies weren’t showing up in the Sysvol folder.