I keep getting Userenv errors 1030 and 1058 on one of my domain controllers.
The description of Event ID 1058 says “Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9}, CN=Policies, CN=System, DC=MyDomain, DC=com. The file must be present at the location <\MyDomain.com sysvol MyDomain.com Policies {31B2F340-016D-11D2-945F-00C04FB984F9} gpt.ini>. (Access is denied. ). Group Policy Processing aborted.”
This problem has plagued me for quite a while. I have checked permissions on the file, the folder and the root drive. Everything looked normal. I couldn’t figure out what to do, so… I decided to do nothing. Everything appeared to be working fine.
A couple months later I decided to cleanup active directory a little bit. I opened the Group Policy manager and deleted all of my unused GPOs. The next day, I noticed that the Userenv errors quit showing up. I was quite happy with myself. My patience (procrastination) paid off.
The next week however I noticed that I was getting the errors in a different environment. I was a little put out. I didn’t want to randomly delete GPOs until the problem went away, so I googled again. I came across a solution. It was so simple, I was angry that I lived with the error for so long. All I had to do was open the security page of all the GPOs and reset the ACL. After 5 minutes I fixed the error and have not seen it since.
In conclusion, to fix Userenv Events 1030 and 1058 that are caused by Access Restrictions:
- Download and install the Group Policy Management Console.
- Open the Group Policy Management MMC and browse to Forest: -> Domains -> MyDomain.com -> Group Policy Objects.
- Click on the first object. Open the Delegation Tab.
- Click on a user and then the Advanced… button in the bottom corner.
- Uncheck and recheck any check box.
- Click OK and repeat on every GPO. (This causes the ACL to be rewritten and permission granted the the broken GPO.)