Tag Archives: GPO

GPO – Event ID 1058, Group Policy gpt.ini–Solved

"The Processing of Group Policy failed. Windows attempted to read the file \\domain\sysvol\domain\policies\{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}\gpt.ini from a domain controller and was not successful."

 

Under \\domain\sysvol\domain\policies\{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}  – there was no ini file  so I realized that GPO is probably corrupted

In order to determine which group policy is causing this problem .I used PowerShell  to find the friendly name of that specific GPO:

Get-GPO -id 9189e970-5663-4866-92a0-0eb2a22aab0b |select DisplayName

image

After recreating the gpo everything worked fine.

 

More information about  Group Policy Cmdlets in Windows PowerShell:

https://technet.microsoft.com/en-us/library/ee461027.aspx

GPO – Deny single user/Group

1. First you need to find the GPO Guid

To Find the group Guide Connect to a dc server and open Active Directory PowerShell

get-gpo -all |select-object DisplayName,id |sort name >c:\gpo.txt

image

 

2. Find in Active directory the GPO with ldap search

That guid is an attribute on an object in Active Directory, so you can query for it:

(&(objectCategory=groupPolicyContainer)(name={D45A4D0F-77BE-4116-9F5B-CF96E81D2DDC}))

image

3.Right Click On the Guid – Properties -security

4.Advanced

5.Add the user/group

6.Deny on – Apply Group Policy

clip_image001

clip_image002