This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 28.999999999999996%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER%3C/text%3E%3C/svg%3E)
Hi Microsoft Community,
I am having a hard time fixing this issue.
All our computers can't retrieve any GP updates from the domain controller. I suppose the GP is corrupted.
gpupdate /force
Updating policy...Computer policy could not be updated successfully. The following errors were encountered:
The processing of Group Policy failed. Windows attempted to read the file \company.com\SysVol\company.com\Policies{CFABC23E-DD6D-4314-A616-A900B203B7E8}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
User Policy update has completed successfully.To diagnose the failure, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.
We have 3 domain controllers.
Current Domain Functional Level: Windows Server 2012 R2
DC1 is the main one. DC2 and DC3 are the secondary.
Here are more info about DC1
PS C:\Windows\system32> dfsrmig.exe /getglobalstate
Current DFSR global state: 'Eliminated'
Succeeded.PS C:\Windows\system32> repadmin /replsum
Replication Summary Start Time: 2022-02-14 18:05:01Beginning data collection for replication summary, this may take awhile:
......Source DSA largest delta fails/total %% error
DC1 02h:02m:27s 0 / 5 0
DC2 02m:27s 0 / 5 0
TDC3 01h:53m:34s 0 / 10 0Destination DSA largest delta fails/total %% error
TDC3 01h:53m:34s 0 / 5 0
DC2 04m:12s 0 / 5 0
DC1 02h:02m:27s 0 / 10 0
Here is dcdiag /e /c /q
PS C:\Windows\system32> dcdiag /e /test:sysvolcheck /test:advertising
173928-dcdiag-sysvolcheck.txt173946-dcdiag1.txt
I need some help.
I already tried reseting the domain policy.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(272, 79%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
Hello,
Did you check that DFS-R was working all your DCs ?
Below an article to check that :
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc754227(v=ws.11)
You should create a diagnostic report and also some propagation test to check if everything is working
Regards,
Yes, it's working
Hi, Do you have any other suggestions on where I could look?
What you can also check to discard the DFS-R service is to restart it on your DCs and check in the event viewer if you have some persistent errors
This error might just be caused by the "Version" line missing inside the gpt.ini file (compare with other GPOs). This can be solved by making any edit in the impacted GPO (and applying it) and if necessary undoing the edit. You will see that the modify timestamp of the gpt.ini file reflects the time of the edits and it should now contain a "Version" line.
This error might just be caused by the "Version" line missing inside the gpt.ini file (compare with other GPOs). This can be solved by making any edit in the impacted GPO (and applying it) and if necessary undoing the edit. You will see that the modify timestamp of the gpt.ini file reflects the time of the edits and it should now contain a "Version" line.