The processing of Group Policy failed. Windows attempted to read the file \\company.com\SysVol\company.com\Policies\{CFABC23E-DD6D-4314-A616-A900B203B7E8}\gpt.ini

Question

Hi Microsoft Community,

I am having a hard time fixing this issue.

All our computers can't retrieve any GP updates from the domain controller. I suppose the GP is corrupted.

gpupdate /force
Updating policy...

Computer policy could not be updated successfully. The following errors were encountered:

The processing of Group Policy failed. Windows attempted to read the file \company.com\SysVol\company.com\Policies{CFABC23E-DD6D-4314-A616-A900B203B7E8}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
User Policy update has completed successfully.

To diagnose the failure, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.

We have 3 domain controllers.
Current Domain Functional Level: Windows Server 2012 R2
DC1 is the main one. DC2 and DC3 are the secondary.

Here are more info about DC1

PS C:\Windows\system32> dfsrmig.exe /getglobalstate
Current DFSR global state: 'Eliminated'
Succeeded.

PS C:\Windows\system32> repadmin /replsum
Replication Summary Start Time: 2022-02-14 18:05:01

Beginning data collection for replication summary, this may take awhile:
......

Source DSA largest delta fails/total %% error
DC1 02h:02m:27s 0 / 5 0
DC2 02m:27s 0 / 5 0
TDC3 01h:53m:34s 0 / 10 0

Destination DSA largest delta fails/total %% error
TDC3 01h:53m:34s 0 / 5 0
DC2 04m:12s 0 / 5 0
DC1 02h:02m:27s 0 / 10 0

Here is dcdiag /e /c /q

PS C:\Windows\system32> dcdiag /e /test:sysvolcheck /test:advertising

173928-dcdiag-sysvolcheck.txt173946-dcdiag1.txt

I need some help.

I already tried reseting the domain policy.

174001-dcdiag.txt

Answer 1

Can I ask how this issue was resolved ?

After inplace upgrading a pair of WinServ2012R2 DC's (Forrestmode 2012) to WinServ2022 I got the exact same issue. Everything looks fine including the GPO explorer mentioned above but yet I receive the error reported as subject for this thread.

Answer 2

Hi @Richard

This issue may be caused by one or more of the following:

-The Distributed File System (DFS) client has been disabled.
-A file created on another domain controller has not been replicated to the current domain controller.

First, make sure the \domain.local\SysVol\domain.local\Policies{Policy_GUID}\gpt.ini file exists on your domain controller. If the gpt.ini file is missing, then most likely the GPO is corrupted. You can determine the name of the GPO by its GUID using the following PowerShell command from the GroupPolicy module.

Get-GPO -id {Policy_GUID}|select DisplayName

If the gpt.ini file is missing you must recreate the policy or copy it from another DC.

Hope this resolves your Query!!

-----------

--If the reply is helpful, please Upvote and Accept it as an answer--

Answer 3

Hi,

Check if the file \company.com\SysVol\company.com\Policies{CFABC23E-DD6D-4314-A616-A900B203B7E8}\gpt.ini exists.
If it's not the case there many way to restore it.
To identify the GPO name you can run the folowing command :

get-GPO -GUI CFABC23E-DD6D-4314-A616-A900B203B7E8

If you have already a backup for this GPO , you can restore it.

You can also just edit the GPO and modify one of its setting just to generate the gpt.ini file.

Please don't forget to marl helpful reply as answer

Answer 4

As a bounce response and a shameless plug have a look at this article which explains how to test the replication consistency of GPOs across AD and Sysvol, and to make sure the permissions have been assigned correctly.

Gary.