Active Directory Event id 1030 и 1058 подскажите...

Fighter · Отправлено: **08:59, 14-03-2007** | #11

oszone.net | DNS — не роскошь, о необходимость

SerP · Отправлено: **03:32, 15-03-2007** | #12

Цитата:

oszone.net | DNS — не роскошь, о необходимость

Это я уже все читал, к сожалению там дана весьма поверхностная информация по поводу настройки днс, а данном случае автоматические дефолтные настройки сервера не позволяют ему нормально работать...

Fighter · Отправлено: **09:05, 15-03-2007** | #13

DNS - Свойства, вкладка "пересылка"
указан ДНС провайдера? из настроек сетевой убирайте его

TepSer · Отправлено: **14:08, 15-03-2007** | #14

Здравствуйте. у меня подобная ситуация.
домен на Win2003 enterprise server sp1. один DC (без выхода в интернет, со встроенным в AD DNS без DHCP)
и порядка 50 пользователей(98, NT4SP6, 2000SP4, XPSP2). отработал около года без серьезных проблем
(в логах только ошибки репликации).
поднял дополнительный DC пока без DNS ошибки репликации исчезли, тут же на основном DC
полезли ошибки, повторяющиеся через 5 минут:

Код:

Тип события:	Ошибка
Источник события:	Userenv
Категория события:	Отсутствует
Код события:	1030
Дата:		15.03.2007
Время:		8:50:54
Пользователь:		NT AUTHORITY\SYSTEM
Компьютер:	CADCAM
Описание:
Не удалось запросить данный список объектов групповой политики. Проверьте в журнале событий наличие сообщений, описывающих причины сбоя.

Тип события:	Ошибка
Источник события:	Userenv
Категория события:	Отсутствует
Код события:	1058
Дата:		15.03.2007
Время:		8:50:54
Пользователь:		NT AUTHORITY\SYSTEM
Компьютер:	CADCAM
Описание:
Windows не удалось получить доступ к файлу GPT.INI для объекта групповой политики CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=IP,DC=KMZ. Этот файл должен находиться в <\\IP.KMZ\sysvol\IP.KMZ\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. (Не найден сетевой путь. ). Обработка групповой политики прекращена.

хотя я с обоих DC легко захожу по адресам:
\\IP.KMZ\sysvol\IP.KMZ\ и во все вложенные папки
\\CADCAM\sysvol\IP.KMZ\ и во все вложенные папки
\\CADCAMNW\sysvol\IP.KMZ\ и во все вложенные папки

а на дополнительном DC сразу после загрузки :

таже ошибка 1030

и еще эта

Код:

Тип события:	Ошибка
Источник события:	Userenv
Категория события:	Отсутствует
Код события:	1097
Дата:		15.03.2007
Время:		10:54:20
Пользователь:		NT AUTHORITY\SYSTEM
Компьютер:	CADCAMNW
Описание:
Не удалось найти учетную запись компьютера, Не удается установить связь с локальным администратором безопасности .

и еще на дополнительном DC я запустил acronis true image и попытался сделать сделать backup, но получил ошибку:
"Вход в систему не призведен: имя пользователя и пароль не опознаны."

Может быть конечно еще чего-нибудь вылезет, но мне и от всего вышеперечисленного уже плохо стало

много чего уже читал, искал тнформацию в том числе и тут:
http://support.microsoft.com/default...;EN-US;KBHOWTO

в результате проделал все что касается 2003 Server отсюда:

http://support.microsoft.com/kb/290647/ru#top
http://support.microsoft.com/kb/883271/ru
http://support.microsoft.com/kb/842804/ru

не помогло.

ipconfig основного DC:

Код:

Настройка протокола IP для Windows
   Имя компьютера  . . . . . . . . . : cadcam
   Основной DNS-суффикс  . . . . . . : IP.KMZ
   Тип узла. . . . . . . . . . . . . : неизвестный
   IP-маршрутизация включена . . . . : нет
   WINS-прокси включен . . . . . . . : нет
   Порядок просмотра суффиксов DNS . : IP.KMZ

Подключение по локальной сети - Ethernet адаптер:
   DNS-суффикс этого подключения . . : 
   Описание  . . . . . . . . . . . . : Intel(R) PRO/1000 PM Network Connection
   Физический адрес. . . . . . . . . : 00-13-20-A2-BE-04
   DHCP включен. . . . . . . . . . . : нет
   IP-адрес  . . . . . . . . . . . . : 10.30.0.33
   Маска подсети . . . . . . . . . . : 255.255.0.0
   Основной шлюз . . . . . . . . . . : 10.30.0.83
   DNS-серверы . . . . . . . . . . . : 10.30.0.33

ipconfig дополнительного DC:

Код:

Настройка протокола IP для Windows     
   Имя компьютера  . . . . . . . . . : cadcamnw
   Основной DNS-суффикс  . . . . . . : IP.KMZ    
   Тип узла. . . . . . . . . . . . . : неизвестный 
   IP-маршрутизация включена . . . . : нет   
   WINS-прокси включен . . . . . . . : нет   
   Порядок просмотра суффиксов DNS . : IP.KMZ 

Подключение по локальной сети - Ethernet адаптер:    
   DNS-суффикс этого подключения . . :    
   Описание  . . . . . . . . . . . . : NetServer 10/100TX PCI LAN Adapter    
   Физический адрес. . . . . . . . . : 00-03-47-4C-32-38    
   DHCP включен. . . . . . . . . . . : нет    
   IP-адрес  . . . . . . . . . . . . : 10.30.0.30    
   Маска подсети . . . . . . . . . . : 255.255.0.0    
   Основной шлюз . . . . . . . . . . : 10.30.0.83    
   DNS-серверы . . . . . . . . . . . : 10.30.0.33

nslookup основного DC:

Код:

Server:  cadcam.ip.KMZ
Address:  10.30.0.33

Name:    cadcam.IP.KMZ
Address:  10.30.0.30

nslookup дополнительного DC:

Код:

Server:  cadcam.ip.KMZ
Address:  10.30.0.33

Name:    cadcamnw.IP.KMZ
Address:  10.30.0.30

netdiag основного DC:

Код:

....................................
    Computer Name: CADCAM
    DNS Host Name: cadcam.IP.KMZ
    System info : Windows 2000 Server (Build 3790)
    Processor : x86 Family 15 Model 4 Stepping 4, GenuineIntel
    List of installed hotfixes : 
        KB901105
        KB913446
        Q147222
Netcard queries test . . . . . . . : Passed
    GetStats failed for 'Прямой параллельный порт'. [ERROR_NOT_SUPPORTED]
    GetStats failed for 'Минипорт WAN (PPTP)'. [ERROR_NOT_SUPPORTED]
    GetStats failed for 'Минипорт WAN (PPPoE)'. [ERROR_NOT_SUPPORTED]
    [WARNING] The net card 'Минипорт WAN (IP)' may not be working because it has not received any packets.
    GetStats failed for 'Минипорт WAN (L2TP)'. [ERROR_NOT_SUPPORTED]

Per interface results:
    Adapter : Подключение по локальной сети
        Netcard queries test . . . : Passed
        Host Name. . . . . . . . . : cadcam
        IP Address . . . . . . . . : 10.30.0.33
        Subnet Mask. . . . . . . . : 255.255.0.0
        Default Gateway. . . . . . : 10.30.0.83
        Dns Servers. . . . . . . . : 10.30.0.33
        AutoConfiguration results. . . . . . : Passed

        Default gateway test . . . : Failed
            No gateway reachable for this adapter. 

        NetBT name test. . . . . . : Passed
        [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.

        WINS service test. . . . . : Skipped
            There are no WINS servers configured for this interface.

Global results:

Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
    List of NetBt transports currently configured:
        NetBT_Tcpip_{DF0D3253-81E9-45AF-9FEC-BC5F89C77639}
    1 NetBt transport currently configured.

Autonet address test . . . . . . . : Passed

IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Failed

    [FATAL] NO GATEWAYS ARE REACHABLE.
    You have no connectivity to other network segments.
    If you configured the IP protocol manually then
    you need to add at least one valid gateway.

NetBT name test. . . . . . . . . . : Passed
    [WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.

Winsock test . . . . . . . . . . . : Passed

DNS test . . . . . . . . . . . . . : Passed
    PASS - All the DNS entries for DC are registered on DNS server '10.30.0.33' and other DCs also have some of the names registered.

Redir and Browser test . . . . . . : Passed
    List of NetBt transports currently bound to the Redir
        NetBT_Tcpip_{DF0D3253-81E9-45AF-9FEC-BC5F89C77639}
    The redir is bound to 1 NetBt transport.

    List of NetBt transports currently bound to the browser
        NetBT_Tcpip_{DF0D3253-81E9-45AF-9FEC-BC5F89C77639}
    The browser is bound to 1 NetBt transport.

DC discovery test. . . . . . . . . : Passed

DC list test . . . . . . . . . . . : Passed

Trust relationship test. . . . . . : Skipped

Kerberos test. . . . . . . . . . . : Passed

LDAP test. . . . . . . . . . . . . : Passed

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
    No active remote access connections.

Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

    Note: run "netsh ipsec dynamic show /?" for more detailed information

The command completed successfully

netdiag дополнительного DC:

Код:

....................................
    Computer Name: CADCAMNW
    DNS Host Name: cadcamnw.IP.KMZ
    System info : Windows 2000 Server (Build 3790)
    Processor : x86 Family 6 Model 8 Stepping 1, GenuineIntel
    List of installed hotfixes : 
        KB888111Srv2k3
        .......
        ....... 
Netcard queries test . . . . . . . : Passed
    GetStats failed for 'Прямой параллельный порт'. [ERROR_NOT_SUPPORTED]
    GetStats failed for 'Минипорт WAN (PPTP)'. [ERROR_NOT_SUPPORTED]
    GetStats failed for 'Минипорт WAN (PPPoE)'. [ERROR_NOT_SUPPORTED]
    [WARNING] The net card 'Минипорт WAN (IP)' may not be working because it has not received any packets.
    GetStats failed for 'Минипорт WAN (L2TP)'. [ERROR_NOT_SUPPORTED]

Per interface results:

    Adapter : Подключение по локальной сети

        Netcard queries test . . . : Passed

        Host Name. . . . . . . . . : cadcamnw
        IP Address . . . . . . . . : 10.30.0.30
        Subnet Mask. . . . . . . . : 255.255.0.0
        Default Gateway. . . . . . : 10.30.0.83
        Dns Servers. . . . . . . . : 10.30.0.33

        AutoConfiguration results. . . . . . : Passed

        Default gateway test . . . : Failed
            No gateway reachable for this adapter. 

        NetBT name test. . . . . . : Passed
        [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.
            No remote names have been found.

        WINS service test. . . . . : Skipped
            There are no WINS servers configured for this interface.

Global results:

Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
    List of NetBt transports currently configured:
        NetBT_Tcpip_{53D10815-30BE-47FB-B16D-B15027065790}
    1 NetBt transport currently configured.

Autonet address test . . . . . . . : Passed

IP loopback ping test. . . . . . . : Passed

Default gateway test . . . . . . . : Failed

    [FATAL] NO GATEWAYS ARE REACHABLE.
    You have no connectivity to other network segments.
    If you configured the IP protocol manually then
    you need to add at least one valid gateway.

NetBT name test. . . . . . . . . . : Passed
    [WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.

Winsock test . . . . . . . . . . . : Passed

DNS test . . . . . . . . . . . . . : Passed
    PASS - All the DNS entries for DC are registered on DNS server '10.30.0.33' and other DCs also have some of the names registered.

Redir and Browser test . . . . . . : Passed
    List of NetBt transports currently bound to the Redir
        NetBT_Tcpip_{53D10815-30BE-47FB-B16D-B15027065790}
    The redir is bound to 1 NetBt transport.

    List of NetBt transports currently bound to the browser
        NetBT_Tcpip_{53D10815-30BE-47FB-B16D-B15027065790}
    The browser is bound to 1 NetBt transport.

DC discovery test. . . . . . . . . : Passed

DC list test . . . . . . . . . . . : Passed

Trust relationship test. . . . . . : Passed
    Secure channel for domain 'IP' is to '\\cadcam.IP.KMZ'.

Kerberos test. . . . . . . . . . . : Passed

LDAP test. . . . . . . . . . . . . : Passed

Bindings test. . . . . . . . . . . : Passed

WAN configuration test . . . . . . : Skipped
    No active remote access connections.

Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

    Note: run "netsh ipsec dynamic show /?" for more detailed information

The command completed successfully

dcdiag основного DC:

Код:

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests
   
   Testing server: Default-First-Site-Name\CADCAM
      Starting test: Connectivity
         ......................... CADCAM passed test Connectivity

Doing primary tests
   
   Testing server: Default-First-Site-Name\CADCAM
      Starting test: Replications
         ......................... CADCAM passed test Replications
      Starting test: NCSecDesc
         ......................... CADCAM passed test NCSecDesc
      Starting test: NetLogons
         ......................... CADCAM passed test NetLogons
      Starting test: Advertising
         ......................... CADCAM passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... CADCAM passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... CADCAM passed test RidManager
      Starting test: MachineAccount
         ......................... CADCAM passed test MachineAccount
      Starting test: Services
         ......................... CADCAM passed test Services
      Starting test: ObjectsReplicated
         ......................... CADCAM passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... CADCAM passed test frssysvol
      Starting test: frsevent
         ......................... CADCAM passed test frsevent
      Starting test: kccevent
         ......................... CADCAM passed test kccevent
      Starting test: systemlog
         ......................... CADCAM passed test systemlog
      Starting test: VerifyReferences
         ......................... CADCAM passed test VerifyReferences
   
   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
   
   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
   
   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
   
   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
   
   Running partition tests on : IP
      Starting test: CrossRefValidation
         ......................... IP passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... IP passed test CheckSDRefDom
   
   Running enterprise tests on : IP.KMZ
      Starting test: Intersite
         ......................... IP.KMZ passed test Intersite
      Starting test: FsmoCheck
         ......................... IP.KMZ passed test FsmoCheck

dcdiag дополнительного DC:

Код:

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests
   
   Testing server: Default-First-Site-Name\CADCAMNW
      Starting test: Connectivity
         ......................... CADCAMNW passed test Connectivity

Doing primary tests
   
   Testing server: Default-First-Site-Name\CADCAMNW
      Starting test: Replications
         ......................... CADCAMNW passed test Replications
      Starting test: NCSecDesc
         ......................... CADCAMNW passed test NCSecDesc
      Starting test: NetLogons
         ......................... CADCAMNW passed test NetLogons
      Starting test: Advertising
         ......................... CADCAMNW passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... CADCAMNW passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... CADCAMNW passed test RidManager
      Starting test: MachineAccount
         ......................... CADCAMNW passed test MachineAccount
      Starting test: Services
         ......................... CADCAMNW passed test Services
      Starting test: ObjectsReplicated
         ......................... CADCAMNW passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... CADCAMNW passed test frssysvol
      Starting test: frsevent
         ......................... CADCAMNW passed test frsevent
      Starting test: kccevent
         ......................... CADCAMNW passed test kccevent
      Starting test: systemlog
         ......................... CADCAMNW passed test systemlog
      Starting test: VerifyReferences
         ......................... CADCAMNW passed test VerifyReferences
   
   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
   
   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
   
   Running partition tests on : IP
      Starting test: CrossRefValidation
         ......................... IP passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... IP passed test CheckSDRefDom
   
   Running enterprise tests on : IP.KMZ
      Starting test: Intersite
         ......................... IP.KMZ passed test Intersite
      Starting test: FsmoCheck
         ......................... IP.KMZ passed test FsmoCheck

пожалуйста посоветуйте что-нибудь или порекомендуйте что почитать

Fighter · Отправлено: **18:33, 15-03-2007** | #15

Цитата:

Default gateway test . . . . . . . : Failed

[FATAL] NO GATEWAYS ARE REACHABLE.
You have no connectivity to other network segments.
If you configured the IP protocol manually then
you need to add at least one valid gateway.

Цитата:

Маска подсети . . . . . . . . . . : 255.255.0.0
Основной шлюз . . . . . . . . . . : 10.30.0.83
DNS-серверы . . . . . . . . . . . : 10.30.0.33

как это понимать?
вообще ошибки 1030 и 1058 лучше всего попробовать диагностировать согласно содержащейся в той же 842804
ссылки на 221833
ЗЫ. как у вас с апдейтами то худо =]

SerP · Отправлено: **02:37, 16-03-2007** | #16

Цитата:

DNS - Свойства, вкладка "пересылка"
указан ДНС провайдера? из настроек сетевой убирайте его

Из сетевой убрал, в Properties>Frovarders ДНС провайдера указан был.

TepSer · Отправлено: **08:05, 16-03-2007** | #17

10.30.0.83 - это адрес маршрутизатора нашего сегмента заводской сети. Он управляется головными айтишниками и от нас даже не пингуется. netdiag всегда на него ругался, но с головными айтишниками не поспориш, они говорят, что так и должно быть.

а списки апдейтов я просто вырезал для уменьшения размера сообщения

Userenv.log :

Код:

USERENV(288.ae4) 07:20:44:125 GPOThread:  Next refresh will happen in 5 minutes
USERENV(288.ae4) 07:25:44:125 ProcessGPOs:
USERENV(288.ae4) 07:25:44:125 ProcessGPOs:
USERENV(288.ae4) 07:25:44:125 ProcessGPOs:  Starting computer Group Policy (Background) processing...
USERENV(288.ae4) 07:25:44:125 ProcessGPOs:
USERENV(288.ae4) 07:25:44:125 ProcessGPOs:
USERENV(288.ae4) 07:25:44:125 EnterCriticalPolicySectionEx: Entering with timeout 600000 and flags 0x0
USERENV(288.ae4) 07:25:44:125 EnterCriticalPolicySectionEx: Machine critical section has been claimed.  Handle = 0x918
USERENV(288.ae4) 07:25:44:125 EnterCriticalPolicySectionEx: Leaving successfully.
USERENV(288.ae4) 07:25:44:125 ProcessGPOs:  Machine role is 3.
USERENV(288.ae4) 07:25:44:140 PingComputer: PingBufferSize set as 2048
USERENV(288.ae4) 07:25:44:156 PingComputer: Adapter speed 10000000 bps
USERENV(288.ae4) 07:25:44:156 PingComputer:  First time:  0
USERENV(288.ae4) 07:25:44:156 PingComputer:  Fast link.  Exiting.
USERENV(288.ae4) 07:25:44:156 ProcessGPOs: network name is 
USERENV(288.ae4) 07:25:44:156 ProcessGPOs:  User name is:  CN=CADCAM,OU=Domain Controllers,DC=IP,DC=KMZ, Domain name is:  IP.KMZ
USERENV(288.ae4) 07:25:44:156 ProcessGPOs: Domain controller is:  \\cadcam.IP.KMZ  Domain DN is IP.KMZ
USERENV(288.ae4) 07:25:44:156 ReadGPExtensions: Rsop entry point not found for dskquota.dll.
USERENV(288.ae4) 07:25:44:156 ReadGPExtensions: Rsop entry point not found for gptext.dll.
USERENV(288.ae4) 07:25:44:156 ReadGPExtensions: Rsop entry point not found for iedkcs32.dll.
USERENV(288.ae4) 07:25:44:156 ReadGPExtensions: Rsop entry point not found for scecli.dll.
USERENV(288.ae4) 07:25:44:156 ReadGPExtensions: Rsop entry point not found for C:\WIN2K3\System32\cscui.dll.
USERENV(288.ae4) 07:25:44:156 ReadExtStatus: Reading Previous Status for extension {35378EAC-683F-11D2-A89A-00C04FBBCFA2}
USERENV(288.ae4) 07:25:44:156 ReadStatus: Read Extension's Previous status successfully.
USERENV(288.ae4) 07:25:44:156 ReadExtStatus: Reading Previous Status for extension {0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}
USERENV(288.ae4) 07:25:44:156 ReadExtStatus: Reading Previous Status for extension {25537BA6-77A8-11D2-9B6C-0000F8080861}
USERENV(288.ae4) 07:25:44:156 ReadExtStatus: Reading Previous Status for extension {3610eda5-77ef-11d2-8dc5-00c04fa31a66}
USERENV(288.ae4) 07:25:44:156 ReadExtStatus: Reading Previous Status for extension {426031c0-0b47-4852-b0ca-ac3d37bfcb39}
USERENV(288.ae4) 07:25:44:156 ReadExtStatus: Reading Previous Status for extension {42B5FAAE-6536-11d2-AE5A-0000F87571E3}
USERENV(288.ae4) 07:25:44:156 ReadExtStatus: Reading Previous Status for extension {4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}
USERENV(288.ae4) 07:25:44:156 ReadExtStatus: Reading Previous Status for extension {827D319E-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(288.ae4) 07:25:44:156 ReadStatus: Read Extension's Previous status successfully.
USERENV(288.ae4) 07:25:44:156 ReadExtStatus: Reading Previous Status for extension {A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}
USERENV(288.ae4) 07:25:44:156 ReadExtStatus: Reading Previous Status for extension {B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(288.ae4) 07:25:44:156 ReadStatus: Read Extension's Previous status successfully.
USERENV(288.ae4) 07:25:44:156 ReadExtStatus: Reading Previous Status for extension {C631DF4C-088F-4156-B058-4375F0853CD8}
USERENV(288.ae4) 07:25:44:156 ReadExtStatus: Reading Previous Status for extension {c6dc5466-785a-11d2-84d0-00c04fb169f7}
USERENV(288.ae4) 07:25:44:156 ReadExtStatus: Reading Previous Status for extension {e437bc1c-aa7d-11d2-a382-00c04f991e27}
USERENV(288.ae4) 07:25:44:156 ProcessGPOs: Calling GetGPOInfo for normal policy mode
USERENV(288.ae4) 07:25:44:156 GetGPOInfo:  ********************************
USERENV(288.ae4) 07:25:44:156 GetGPOInfo:  Entering...
USERENV(288.ae4) 07:25:44:156 GetGPOInfo:  Server connection established.
USERENV(288.ae4) 07:25:44:171 GetGPOInfo:  Bound successfully.
USERENV(288.ae4) 07:25:44:171 SearchDSObject:  Searching <OU=Domain Controllers,DC=IP,DC=KMZ>
USERENV(288.ae4) 07:25:44:171 SearchDSObject:  Found GPO(s):  <[LDAP://CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=IP,DC=KMZ;0]>
USERENV(288.ae4) 07:25:44:171 ProcessGPO:  ==============================
USERENV(288.ae4) 07:25:44:171 ProcessGPO:  Deferring search for <LDAP://CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=IP,DC=KMZ>
USERENV(288.ae4) 07:25:44:171 SearchDSObject:  Searching <DC=IP,DC=KMZ>
USERENV(288.ae4) 07:25:44:171 SearchDSObject:  Found GPO(s):  <[LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=IP,DC=KMZ;0]>
USERENV(288.ae4) 07:25:44:171 ProcessGPO:  ==============================
USERENV(288.ae4) 07:25:44:171 ProcessGPO:  Deferring search for <LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=IP,DC=KMZ>
USERENV(288.ae4) 07:25:44:171 SearchDSObject:  Searching <CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=IP,DC=KMZ>
USERENV(288.ae4) 07:25:44:171 SearchDSObject:  No GPO(s) for this object.
USERENV(288.ae4) 07:25:44:171 EvaluateDeferredGPOs:  Searching for GPOs in cn=policies,cn=system,DC=IP,DC=KMZ
USERENV(288.ae4) 07:25:44:171 ProcessGPO:  ==============================
USERENV(288.ae4) 07:25:44:171 ProcessGPO:  Searching <CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=IP,DC=KMZ>
USERENV(288.ae4) 07:25:44:171 ProcessGPO:  Machine has access to this GPO.
USERENV(288.ae4) 07:25:44:171 ProcessGPO:  GPO passes the filter check.
USERENV(288.ae4) 07:25:44:171 ProcessGPO:  Found functionality version of:  2
USERENV(288.ae4) 07:25:44:187 ProcessGPO:  Found file system path of:  <\\IP.KMZ\sysvol\IP.KMZ\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(288.ae4) 07:25:44:187 ProcessGPO:  Found common name of:  <{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(288.ae4) 07:25:44:187 ProcessGPO:  Found display name of:  <Default Domain Policy>
USERENV(288.ae4) 07:25:44:187 ProcessGPO:  Found machine version of:  GPC is 47, GPT is 47
USERENV(288.ae4) 07:25:44:187 ProcessGPO:  Found flags of:  0
USERENV(288.ae4) 07:25:44:187 ProcessGPO:  Found extensions:  [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
USERENV(288.ae4) 07:25:44:187 ProcessGPO:  ==============================
USERENV(288.ae4) 07:25:44:187 ProcessGPO:  ==============================
USERENV(288.ae4) 07:25:44:187 ProcessGPO:  Searching <CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=IP,DC=KMZ>
USERENV(288.ae4) 07:25:44:187 ProcessGPO:  Machine has access to this GPO.
USERENV(288.ae4) 07:25:44:187 ProcessGPO:  GPO passes the filter check.
USERENV(288.ae4) 07:25:44:187 ProcessGPO:  Found functionality version of:  2
USERENV(288.ae4) 07:25:44:187 ProcessGPO:  Found file system path of:  <\\IP.KMZ\sysvol\IP.KMZ\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}>
USERENV(288.ae4) 07:25:44:187 ProcessGPO:  Found common name of:  <{6AC1786C-016F-11D2-945F-00C04fB984F9}>
USERENV(288.ae4) 07:25:44:187 ProcessGPO:  Found display name of:  <Default Domain Controllers Policy>
USERENV(288.ae4) 07:25:44:187 ProcessGPO:  Found machine version of:  GPC is 21, GPT is 21
USERENV(288.ae4) 07:25:44:187 ProcessGPO:  Found flags of:  0
USERENV(288.ae4) 07:25:44:187 ProcessGPO:  Found extensions:  [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
USERENV(288.ae4) 07:25:44:187 ProcessGPO:  ==============================
USERENV(288.ae4) 07:25:44:187 GetGPOInfo:  Local GPO's gpt.ini is not accessible, assuming default state.
USERENV(288.ae4) 07:25:44:187 GetGPOInfo:  Leaving with 1
USERENV(288.ae4) 07:25:44:187 GetGPOInfo:  ********************************
USERENV(288.ae4) 07:25:44:187 ProcessGPOs: Logging Data for Target <CADCAM>.
USERENV(288.ae4) 07:25:44:187 ProcessGPOs: OpenThreadToken failed with error 1008, assuming thread is not impersonating
USERENV(288.ae4) 07:25:44:187 ProcessGPOs: -----------------------
USERENV(288.ae4) 07:25:44:187 ProcessGPOs: Processing extension Реестр
USERENV(288.ae4) 07:25:44:187 ReadStatus: Read Extension's Previous status successfully.
USERENV(288.ae4) 07:25:44:203 CompareGPOLists:  The lists are the same.
USERENV(288.ae4) 07:25:44:203 CheckGPOs: No GPO changes and no security group membership change and extension Реестр has NoGPOChanges set.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: -----------------------
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: -----------------------
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Processing extension Политика беспроводной группы
USERENV(288.ae4) 07:25:44:203 CompareGPOLists:  The lists are the same.
USERENV(288.ae4) 07:25:44:203 CheckGPOs: No GPO changes but couldn't read extension Политика беспроводной группы's status or policy time.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Extension Политика беспроводной группы skipped because both deleted and changed GPO lists are empty.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: -----------------------
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Processing extension Folder Redirection
USERENV(288.ae4) 07:25:44:203 CompareGPOLists:  The lists are the same.
USERENV(288.ae4) 07:25:44:203 CheckGPOs: No GPO changes but couldn't read extension Folder Redirection's status or policy time.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Extension Folder Redirection skipped with flags 0x10007.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: -----------------------
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Processing extension Дисковые квоты
USERENV(288.ae4) 07:25:44:203 CompareGPOLists:  The lists are the same.
USERENV(288.ae4) 07:25:44:203 CheckGPOs: No GPO changes but couldn't read extension Дисковые квоты's status or policy time.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Extension Дисковые квоты skipped with flags 0x10007.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: -----------------------
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Processing extension Планировщик пакетов QoS
USERENV(288.ae4) 07:25:44:203 CompareGPOLists:  The lists are the same.
USERENV(288.ae4) 07:25:44:203 CheckGPOs: No GPO changes but couldn't read extension Планировщик пакетов QoS's status or policy time.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Extension Планировщик пакетов QoS skipped because both deleted and changed GPO lists are empty.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: -----------------------
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Processing extension Сценарии
USERENV(288.ae4) 07:25:44:203 CompareGPOLists:  The lists are the same.
USERENV(288.ae4) 07:25:44:203 CheckGPOs: No GPO changes but couldn't read extension Сценарии's status or policy time.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Extension Сценарии skipped because both deleted and changed GPO lists are empty.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: -----------------------
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Processing extension Сопоставление зон Internet Explorer
USERENV(288.ae4) 07:25:44:203 CompareGPOLists:  The lists are the same.
USERENV(288.ae4) 07:25:44:203 CheckGPOs: No GPO changes but couldn't read extension Сопоставление зон Internet Explorer's status or policy time.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Extension Сопоставление зон Internet Explorer skipped because both deleted and changed GPO lists are empty.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: -----------------------
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Processing extension Security
USERENV(288.ae4) 07:25:44:203 ReadStatus: Read Extension's Previous status successfully.
USERENV(288.ae4) 07:25:44:203 CompareGPOLists:  The lists are the same.
USERENV(288.ae4) 07:25:44:203 CheckGPOs: No GPO changes and no security group membership change and extension Security has NoGPOChanges set.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: -----------------------
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: -----------------------
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Processing extension Фирменная настройка Internet Explorer
USERENV(288.ae4) 07:25:44:203 CompareGPOLists:  The lists are the same.
USERENV(288.ae4) 07:25:44:203 CheckGPOs: No GPO changes but couldn't read extension Фирменная настройка Internet Explorer's status or policy time.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Extension Фирменная настройка Internet Explorer skipped with flags 0x10007.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: -----------------------
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Processing extension EFS recovery
USERENV(288.ae4) 07:25:44:203 ReadStatus: Read Extension's Previous status successfully.
USERENV(288.ae4) 07:25:44:203 CompareGPOLists:  The lists are the same.
USERENV(288.ae4) 07:25:44:203 CheckGPOs: No GPO changes and no security group membership change and extension EFS recovery has NoGPOChanges set.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: -----------------------
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: -----------------------
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Processing extension Microsoft Offline Files
USERENV(288.ae4) 07:25:44:203 CompareGPOLists:  The lists are the same.
USERENV(288.ae4) 07:25:44:203 CheckGPOs: No GPO changes but couldn't read extension Microsoft Offline Files's status or policy time.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Extension Microsoft Offline Files skipped because both deleted and changed GPO lists are empty.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: -----------------------
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Processing extension Установка программного обеспечения
USERENV(288.ae4) 07:25:44:203 CompareGPOLists:  The lists are the same.
USERENV(288.ae4) 07:25:44:203 CheckGPOs: No GPO changes but couldn't read extension Установка программного обеспечения's status or policy time.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Extension Установка программного обеспечения skipped because both deleted and changed GPO lists are empty.
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: -----------------------
USERENV(288.ae4) 07:25:44:203 ProcessGPOs: Processing extension IP-безопасность
USERENV(288.ae4) 07:25:44:218 CompareGPOLists:  The lists are the same.
USERENV(288.ae4) 07:25:44:218 CheckGPOs: No GPO changes but couldn't read extension IP-безопасность's status or policy time.
USERENV(288.ae4) 07:25:44:218 ProcessGPOs: Extension IP-безопасность skipped because both deleted and changed GPO lists are empty.
USERENV(288.ae4) 07:25:44:218 SetFgRefreshInfo: Next Machine Fg policy Synchronous, Reason: SKU.
USERENV(288.ae4) 07:25:44:218 ProcessGPOs: No WMI logging done in this policy cycle.
USERENV(288.ae4) 07:25:44:218 LeaveCriticalPolicySection: Critical section 0x918 has been released.
USERENV(288.ae4) 07:25:44:218 ProcessGPOs: Computer Group Policy has been applied.
USERENV(288.ae4) 07:25:44:218 ProcessGPOs: Leaving with 1.
USERENV(288.ae4) 07:25:44:218 EnterCriticalPolicySectionEx: Entering with timeout 600000 and flags 0x0
USERENV(288.ae4) 07:25:44:218 EnterCriticalPolicySectionEx: Machine critical section has been claimed.  Handle = 0x918
USERENV(288.ae4) 07:25:44:218 EnterCriticalPolicySectionEx: Leaving successfully.
USERENV(288.ae4) 07:25:44:234 LeaveCriticalPolicySection: Critical section 0x918 has been released.
USERENV(288.ae4) 07:25:44:234 GPOThread:  Next refresh will happen in 5 minutes

ошибка вроде бы только одна :
OpenThreadToken failed with error 1008, assuming thread is not impersonating

сейчас поищу ро это информацию.
а может посоветуете чего-нибудь?