The processing of Group Policy failed. Windows attempted to read the file \\\SysVol\\Policies\{CFABC23E-DD6D-4314-A616-A900B203B7E8}\gpt.ini

Richard 1 Reputation point

Hi Microsoft Community,

I am having a hard time fixing this issue.

All our computers can't retrieve any GP updates from the domain controller. I suppose the GP is corrupted.

gpupdate /force
Updating policy...

Computer policy could not be updated successfully. The following errors were encountered:

The processing of Group Policy failed. Windows attempted to read the file \\SysVol\\Policies{CFABC23E-DD6D-4314-A616-A900B203B7E8}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
User Policy update has completed successfully.

To diagnose the failure, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.

We have 3 domain controllers.
Current Domain Functional Level: Windows Server 2012 R2
DC1 is the main one. DC2 and DC3 are the secondary.

Here are more info about DC1

PS C:\Windows\system32> dfsrmig.exe /getglobalstate
Current DFSR global state: 'Eliminated'

PS C:\Windows\system32> repadmin /replsum
Replication Summary Start Time: 2022-02-14 18:05:01

Beginning data collection for replication summary, this may take awhile:

Source DSA largest delta fails/total %% error
DC1 02h:02m:27s 0 / 5 0
DC2 02m:27s 0 / 5 0
TDC3 01h:53m:34s 0 / 10 0

Destination DSA largest delta fails/total %% error
TDC3 01h:53m:34s 0 / 5 0
DC2 04m:12s 0 / 5 0
DC1 02h:02m:27s 0 / 10 0

Here is dcdiag /e /c /q

PS C:\Windows\system32> dcdiag /e /test:sysvolcheck /test:advertising


I need some help.

I already tried reseting the domain policy.


A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
3,032 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
10,564 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
4,844 questions
{count} votes

4 answers

Sort by: Most helpful
  1. cb831 26 Reputation points

    Can I ask how this issue was resolved ?

    After inplace upgrading a pair of WinServ2012R2 DC's (Forrestmode 2012) to WinServ2022 I got the exact same issue. Everything looks fine including the GPO explorer mentioned above but yet I receive the error reported as subject for this thread.

    2 people found this answer helpful.

  2. Limitless Technology 38,451 Reputation points

    Hi @Richard

    This issue may be caused by one or more of the following:

    -The Distributed File System (DFS) client has been disabled.
    -A file created on another domain controller has not been replicated to the current domain controller.

    First, make sure the \domain.local\SysVol\domain.local\Policies{Policy_GUID}\gpt.ini file exists on your domain controller. If the gpt.ini file is missing, then most likely the GPO is corrupted. You can determine the name of the GPO by its GUID using the following PowerShell command from the GroupPolicy module.

    Get-GPO -id {Policy_GUID}|select DisplayName

    If the gpt.ini file is missing you must recreate the policy or copy it from another DC.

    Hope this resolves your Query!!


    --If the reply is helpful, please Upvote and Accept it as an answer--

    1 person found this answer helpful.

  3. Thameur-BOURBITA 16,631 Reputation points


    Check if the file \\SysVol\\Policies{CFABC23E-DD6D-4314-A616-A900B203B7E8}\gpt.ini exists.
    If it's not the case there many way to restore it.
    To identify the GPO name you can run the folowing command :

    get-GPO -GUI CFABC23E-DD6D-4314-A616-A900B203B7E8

    If you have already a backup for this GPO , you can restore it.

    You can also just edit the GPO and modify one of its setting just to generate the gpt.ini file.

    Please don't forget to marl helpful reply as answer

  4. Gary Reynolds 9,111 Reputation points

    As a bounce response and a shameless plug have a look at this article which explains how to test the replication consistency of GPOs across AD and Sysvol, and to make sure the permissions have been assigned correctly.


    0 comments No comments