This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 28.999999999999996%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER%3C/text%3E%3C/svg%3E)
Hi Microsoft Community,
I am having a hard time fixing this issue.
All our computers can't retrieve any GP updates from the domain controller. I suppose the GP is corrupted.
gpupdate /force
Updating policy...Computer policy could not be updated successfully. The following errors were encountered:
The processing of Group Policy failed. Windows attempted to read the file \company.com\SysVol\company.com\Policies{CFABC23E-DD6D-4314-A616-A900B203B7E8}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
User Policy update has completed successfully.To diagnose the failure, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.
We have 3 domain controllers.
Current Domain Functional Level: Windows Server 2012 R2
DC1 is the main one. DC2 and DC3 are the secondary.
Here are more info about DC1
PS C:\Windows\system32> dfsrmig.exe /getglobalstate
Current DFSR global state: 'Eliminated'
Succeeded.PS C:\Windows\system32> repadmin /replsum
Replication Summary Start Time: 2022-02-14 18:05:01Beginning data collection for replication summary, this may take awhile:
......Source DSA largest delta fails/total %% error
DC1 02h:02m:27s 0 / 5 0
DC2 02m:27s 0 / 5 0
TDC3 01h:53m:34s 0 / 10 0Destination DSA largest delta fails/total %% error
TDC3 01h:53m:34s 0 / 5 0
DC2 04m:12s 0 / 5 0
DC1 02h:02m:27s 0 / 10 0
Here is dcdiag /e /c /q
PS C:\Windows\system32> dcdiag /e /test:sysvolcheck /test:advertising
173928-dcdiag-sysvolcheck.txt173946-dcdiag1.txt
I need some help.
I already tried reseting the domain policy.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(272, 79%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
Hello,
Did you check that DFS-R was working all your DCs ?
Below an article to check that :
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc754227(v=ws.11)
You should create a diagnostic report and also some propagation test to check if everything is working
Regards,
Yes, it's working
Hi, Do you have any other suggestions on where I could look?
What you can also check to discard the DFS-R service is to restart it on your DCs and check in the event viewer if you have some persistent errors
This error might just be caused by the "Version" line missing inside the gpt.ini file (compare with other GPOs). This can be solved by making any edit in the impacted GPO (and applying it) and if necessary undoing the edit. You will see that the modify timestamp of the gpt.ini file reflects the time of the edits and it should now contain a "Version" line.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(304, 92%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC%3C/text%3E%3C/svg%3E)
Can I ask how this issue was resolved ?
After inplace upgrading a pair of WinServ2012R2 DC's (Forrestmode 2012) to WinServ2022 I got the exact same issue. Everything looks fine including the GPO explorer mentioned above but yet I receive the error reported as subject for this thread.
Have a look at this post and check the gpo results section to confirm the status of gpo based the dc and if there is any additional information or errors.
https://nettools.net/how-to-troubleshot-which-gpo-have-been-applied/
Hi @Richard
This issue may be caused by one or more of the following:
-The Distributed File System (DFS) client has been disabled.
-A file created on another domain controller has not been replicated to the current domain controller.
First, make sure the \domain.local\SysVol\domain.local\Policies{Policy_GUID}\gpt.ini file exists on your domain controller. If the gpt.ini file is missing, then most likely the GPO is corrupted. You can determine the name of the GPO by its GUID using the following PowerShell command from the GroupPolicy module.
Get-GPO -id {Policy_GUID}|select DisplayName
If the gpt.ini file is missing you must recreate the policy or copy it from another DC.
Hope this resolves your Query!!
-----------
--If the reply is helpful, please Upvote and Accept it as an answer--
Hi Limitless,
Thank you for replying back.
How do I recreate the policy? because i tried to recreate it and permission didn't work
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 80%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETB%3C/text%3E%3C/svg%3E)
Hi,
Check if the file \company.com\SysVol\company.com\Policies{CFABC23E-DD6D-4314-A616-A900B203B7E8}\gpt.ini exists.
If it's not the case there many way to restore it.
To identify the GPO name you can run the folowing command :
get-GPO -GUI CFABC23E-DD6D-4314-A616-A900B203B7E8
If you have already a backup for this GPO , you can restore it.
You can also just edit the GPO and modify one of its setting just to generate the gpt.ini file.
Please don't forget to marl helpful reply as answer
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 84%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERC%3C/text%3E%3C/svg%3E)
Help Full many thanks
This error might just be caused by the "Version" line missing inside the gpt.ini file (compare with other GPOs). This can be solved by making any edit in the impacted GPO (and applying it) and if necessary undoing the edit. You will see that the modify timestamp of the gpt.ini file reflects the time of the edits and it should now contain a "Version" line.
As a bounce response and a shameless plug have a look at this article which explains how to test the replication consistency of GPOs across AD and Sysvol, and to make sure the permissions have been assigned correctly.
Gary.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(96, 81%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
Was this ever resolved and can you share how you resolved it?
Jim