S
SebGri
Good day everybody,
one of my customers have a big problem with his servers. The serves did an unplanned restart after one of the esx-server broke. they startet but stucks at "Applying Group Policy Environment".
So i tried to troubleshoot the policies. After some tests i temporarily disabled all policies. Now, the servers start and stuck at "Please wait" (before login). i waited hours but nothing happened.
I didn't find anything interesting in eventlog. I examined the gpsvc.logs. I tried "Policy Reporter" to analyse the Logs. On the faulty machine the GPO-process stops right after this Line:
...
GPSVC(310.34c) 14:57:37:420 CGroupPolicySession::QueueItemForPolicyApplication::-- (Status: 997)
GPSVC(310.34c) 14:57:37:420 CGPApplicationService::CreateSessionEvent::-- (Status: 997)
GPSVC(310.34c) 14:57:37:420 CGPEventSubSystem::GroupPolicyCreateSession::-- (Status: 997)
GPSVC(310.34c) 14:57:37:420 CGPEventSubSystem::GroupPolicyCreateSession::++ (SessionId: 1)
GPSVC(310.34c) 14:57:37:420 CGPApplicationService::CreateSessionEvent::++ (SessionId: 1)
GPSVC(310.34c) 14:57:37:420 CGPApplicationService::CheckAndCreateCriticalPolicySection.
GPSVC(310.34c) 14:57:37:420 User SID = MACHINE SID
GPSVC(310.34c) 14:57:37:420 Setting GPsession state = 1
GPSVC(310.34c) 14:57:37:420 User SID = MACHINE SID
GPSVC(310.34c) 14:57:37:420 CGroupPolicySession::QueueItemForPolicyApplication::++ (bTriggered: 0, bConsole: 0)
GPSVC(310.34c) 14:57:37:420 PolicyApplicationState is True.
GPSVC(310.34c) 14:57:37:420 AsyncThreadsProcessing is False.
GPSVC(310.34c) 14:57:37:420 CGroupPolicySession::QueueItemForPolicyApplication::Applying policy in Sync
GPSVC(310.34c) 14:57:37:420 CStatusMessage::UpdateWinlogonStatusMessage::++ (bMachine: 1)
GPSVC(310.4dc) 14:57:37:467 ProcessGPOList: lpGPOInfo->lpGPInfoHandle->dwExtnCount is 2 for Group Policy Environment.
GPSVC(310.4dc) 14:57:37:905 ProcessGroupPolicyCompletedExInternal: Entering. Extension = {0E28E245-9368-4853-AD84-6DA3BA35BB75}, dwStatus = 0x0
GPSVC(310.4dc) 14:57:37:905 ReadGPOList:++
GPSVC(310.4dc) 14:57:37:905 ReadGPOList: Read Key:0
GPSVC(310.4dc) 14:57:37:905 ReadGPOList:-- (Result:TRUE)
GPSVC(310.4dc) 14:57:37:936 GetWbemServices: CoCreateInstance succeeded
.... nothing happens after that! It stucks in this state forever.
Compared to a working machine:
GPSVC(310.938) 15:05:25:639 CStatusMessage::UpdateWinlogonStatusMessage::-- (Status: 997)
GPSVC(310.938) 15:05:25:639 CGroupPolicySession::QueueItemForPolicyApplication::-- (Status: 997)
GPSVC(310.938) 15:05:25:639 CGPApplicationService::UserLogonEvent::-- (Status: 997)
GPSVC(310.938) 15:05:25:639 CGPEventSubSystem::GroupPolicyOnLogon::-- (Status: 997)
GPSVC(310.938) 15:05:25:639 CGPEventSubSystem::GroupPolicyOnLogon::++ (SessionId: 1)
GPSVC(310.dc8) 15:05:25:639 LogExtSessionStatus: Successfully logged Extension Session data
GPSVC(310.938) 15:05:25:639 CGPApplicationService::UserLogonEvent::++ (SessionId: 1, ServiceRestart: 0)
GPSVC(310.938) 15:05:25:639 CGPApplicationService::CheckAndCreateCriticalPolicySection.
GPSVC(310.938) 15:05:25:639 User SID = <S-1-5-21-918414836-922602079-3242352692-500>
GPSVC(310.938) 15:05:25:639 Setting GPsession state = 1
GPSVC(310.938) 15:05:25:639 User SID = <S-1-5-21-918414836-922602079-3242352692-500>
GPSVC(310.938) 15:05:25:639 CGPApplicationService::GetMachinePolicyProcessingCompletionEvent.
GPSVC(310.938) 15:05:25:639 CGPApplicationService::GetMachinePolicyWaitForNetworkCompletionEvent.
GPSVC(310.938) 15:05:25:639 CGroupPolicySession::QueueItemForPolicyApplication::++ (bTriggered: 0, bConsole: 1)
GPSVC(310.938) 15:05:25:639 PolicyApplicationState is True.
GPSVC(310.938) 15:05:25:639 AsyncThreadsProcessing is False.
GPSVC(310.938) 15:05:25:639 CGroupPolicySession::QueueItemForPolicyApplication::Applying policy in Sync
GPSVC(310.938) 15:05:25:639 CStatusMessage::UpdateWinlogonStatusMessage::++ (bMachine: 0)
GPSVC(310.dc8) 15:05:25:764 ProcessGPOList: lpGPOInfo->lpGPInfoHandle->dwExtnCount is 2 for Group Policy Registry.
GPSVC(310.dc8) 15:05:25:920 ProcessGroupPolicyCompletedExInternal: Entering. Extension = {B087BE9D-ED37-454F-AF9C-04291E351182}, dwStatus = 0x0
GPSVC(310.dc8) 15:05:25:920 ReadGPOList:++
GPSVC(310.dc8) 15:05:25:920 ReadGPOList: Read Key:0
GPSVC(310.dc8) 15:05:25:920 ReadGPOList:-- (Result:TRUE)
GPSVC(310.dc8) 15:05:25:920 GetWbemServices: CoCreateInstance succeeded
GPSVC(310.dc8) 15:05:25:920 ConnectToNameSpace: ConnectServer returned 0x0
GPSVC(310.dc8) 15:05:25:920 ProcessGroupPolicyCompletedExInternal: Extension {B087BE9D-ED37-454F-AF9C-04291E351182} was able to log data. Error = 0x0, dwRet = 0. Clearing the dirty bit
GPSVC(310.dc8) 15:05:25:920 CExtSessionLogger::Log: Didn't find an instance of the extension object when trying to set the dirty flag.
GPSVC(310.dc8) 15:05:25:920 ProcessGroupPolicyCompletedExInternal: Finished processing extension <Group Policy Registry> at 59578 ticks (ms)
GPSVC(310.dc8) 15:05:25:920 ProcessGroupPolicyCompletedExInternal: Leaving. Extension = {B087BE9D-ED37-454F-AF9C-04291E351182}, Return status dwRet = 0x0
GPSVC(310.dc8) 15:05:25:920 ProcessGPOList: Extension Group Policy Registry returned 0x0.
GPSVC(310.dc8) 15:05:25:920 ProcessGPOList: Extension Group Policy Registry was able to log data. RsopStatus = 0x0, dwRet = 0, Clearing the dirty bit
GPSVC(310.dc8) 15:05:25:920 ProcessGPOList:--
GPSVC(310.dc8) 15:05:25:920 CPolicyCriticalSectionCollection: Deleting critical section for UserSid <S-1-5-21-918414836-922602079-3242352692-500>
GPSVC(310.dc8) 15:05:25:920 Deleting sidString <S-1-5-21-918414836-922602079-3242352692-500>
GPSVC(310.dc8) 15:05:25:920 ProcessGPOs(User): -----------------------
GPSVC(310.dc8) 15:05:25:920 ProcessGPOs(User): -----------------------
GPSVC(310.dc8) 15:05:25:920 ProcessGPOs(User): Processing extension 802.3 Group Policy
GPSVC(310.dc8) 15:05:25:920 ReadGPOList:++
GPSVC(310.dc8) 15:05:25:920 CheckGPOs: ReadGPOList count = 0
GPSVC(310.dc8) 15:05:25:920 CompareGPOLists: The lists are the same.
GPSVC(310.dc8) 15:05:25:920 ProcessGPOs(User): Extension 802.3 Group Policy skipped with flags 0x400026.
GPSVC(310.dc8) 15:05:25:920 ProcessGPOs(User): -----------------------
GPSVC(310.dc8) 15:05:25:920 ProcessGPOs(User): Processing extension Group Policy Printers
.... and so on...
As you can see, the next step on faulty machine should be "ConnectToNameSpace: ConnectServer returned 0x0" but nothing happens!
To resolve this state i have to start the machine in Safe Mode, Login and restart. After this procedure the machine starts normally.
I really have no more ideas. I hope anybody can help me.
Thanks in advance!
Best regards
Sebastian
Continue reading...
one of my customers have a big problem with his servers. The serves did an unplanned restart after one of the esx-server broke. they startet but stucks at "Applying Group Policy Environment".
So i tried to troubleshoot the policies. After some tests i temporarily disabled all policies. Now, the servers start and stuck at "Please wait" (before login). i waited hours but nothing happened.
I didn't find anything interesting in eventlog. I examined the gpsvc.logs. I tried "Policy Reporter" to analyse the Logs. On the faulty machine the GPO-process stops right after this Line:
...
GPSVC(310.34c) 14:57:37:420 CGroupPolicySession::QueueItemForPolicyApplication::-- (Status: 997)
GPSVC(310.34c) 14:57:37:420 CGPApplicationService::CreateSessionEvent::-- (Status: 997)
GPSVC(310.34c) 14:57:37:420 CGPEventSubSystem::GroupPolicyCreateSession::-- (Status: 997)
GPSVC(310.34c) 14:57:37:420 CGPEventSubSystem::GroupPolicyCreateSession::++ (SessionId: 1)
GPSVC(310.34c) 14:57:37:420 CGPApplicationService::CreateSessionEvent::++ (SessionId: 1)
GPSVC(310.34c) 14:57:37:420 CGPApplicationService::CheckAndCreateCriticalPolicySection.
GPSVC(310.34c) 14:57:37:420 User SID = MACHINE SID
GPSVC(310.34c) 14:57:37:420 Setting GPsession state = 1
GPSVC(310.34c) 14:57:37:420 User SID = MACHINE SID
GPSVC(310.34c) 14:57:37:420 CGroupPolicySession::QueueItemForPolicyApplication::++ (bTriggered: 0, bConsole: 0)
GPSVC(310.34c) 14:57:37:420 PolicyApplicationState is True.
GPSVC(310.34c) 14:57:37:420 AsyncThreadsProcessing is False.
GPSVC(310.34c) 14:57:37:420 CGroupPolicySession::QueueItemForPolicyApplication::Applying policy in Sync
GPSVC(310.34c) 14:57:37:420 CStatusMessage::UpdateWinlogonStatusMessage::++ (bMachine: 1)
GPSVC(310.4dc) 14:57:37:467 ProcessGPOList: lpGPOInfo->lpGPInfoHandle->dwExtnCount is 2 for Group Policy Environment.
GPSVC(310.4dc) 14:57:37:905 ProcessGroupPolicyCompletedExInternal: Entering. Extension = {0E28E245-9368-4853-AD84-6DA3BA35BB75}, dwStatus = 0x0
GPSVC(310.4dc) 14:57:37:905 ReadGPOList:++
GPSVC(310.4dc) 14:57:37:905 ReadGPOList: Read Key:0
GPSVC(310.4dc) 14:57:37:905 ReadGPOList:-- (Result:TRUE)
GPSVC(310.4dc) 14:57:37:936 GetWbemServices: CoCreateInstance succeeded
.... nothing happens after that! It stucks in this state forever.
Compared to a working machine:
GPSVC(310.938) 15:05:25:639 CStatusMessage::UpdateWinlogonStatusMessage::-- (Status: 997)
GPSVC(310.938) 15:05:25:639 CGroupPolicySession::QueueItemForPolicyApplication::-- (Status: 997)
GPSVC(310.938) 15:05:25:639 CGPApplicationService::UserLogonEvent::-- (Status: 997)
GPSVC(310.938) 15:05:25:639 CGPEventSubSystem::GroupPolicyOnLogon::-- (Status: 997)
GPSVC(310.938) 15:05:25:639 CGPEventSubSystem::GroupPolicyOnLogon::++ (SessionId: 1)
GPSVC(310.dc8) 15:05:25:639 LogExtSessionStatus: Successfully logged Extension Session data
GPSVC(310.938) 15:05:25:639 CGPApplicationService::UserLogonEvent::++ (SessionId: 1, ServiceRestart: 0)
GPSVC(310.938) 15:05:25:639 CGPApplicationService::CheckAndCreateCriticalPolicySection.
GPSVC(310.938) 15:05:25:639 User SID = <S-1-5-21-918414836-922602079-3242352692-500>
GPSVC(310.938) 15:05:25:639 Setting GPsession state = 1
GPSVC(310.938) 15:05:25:639 User SID = <S-1-5-21-918414836-922602079-3242352692-500>
GPSVC(310.938) 15:05:25:639 CGPApplicationService::GetMachinePolicyProcessingCompletionEvent.
GPSVC(310.938) 15:05:25:639 CGPApplicationService::GetMachinePolicyWaitForNetworkCompletionEvent.
GPSVC(310.938) 15:05:25:639 CGroupPolicySession::QueueItemForPolicyApplication::++ (bTriggered: 0, bConsole: 1)
GPSVC(310.938) 15:05:25:639 PolicyApplicationState is True.
GPSVC(310.938) 15:05:25:639 AsyncThreadsProcessing is False.
GPSVC(310.938) 15:05:25:639 CGroupPolicySession::QueueItemForPolicyApplication::Applying policy in Sync
GPSVC(310.938) 15:05:25:639 CStatusMessage::UpdateWinlogonStatusMessage::++ (bMachine: 0)
GPSVC(310.dc8) 15:05:25:764 ProcessGPOList: lpGPOInfo->lpGPInfoHandle->dwExtnCount is 2 for Group Policy Registry.
GPSVC(310.dc8) 15:05:25:920 ProcessGroupPolicyCompletedExInternal: Entering. Extension = {B087BE9D-ED37-454F-AF9C-04291E351182}, dwStatus = 0x0
GPSVC(310.dc8) 15:05:25:920 ReadGPOList:++
GPSVC(310.dc8) 15:05:25:920 ReadGPOList: Read Key:0
GPSVC(310.dc8) 15:05:25:920 ReadGPOList:-- (Result:TRUE)
GPSVC(310.dc8) 15:05:25:920 GetWbemServices: CoCreateInstance succeeded
GPSVC(310.dc8) 15:05:25:920 ConnectToNameSpace: ConnectServer returned 0x0
GPSVC(310.dc8) 15:05:25:920 ProcessGroupPolicyCompletedExInternal: Extension {B087BE9D-ED37-454F-AF9C-04291E351182} was able to log data. Error = 0x0, dwRet = 0. Clearing the dirty bit
GPSVC(310.dc8) 15:05:25:920 CExtSessionLogger::Log: Didn't find an instance of the extension object when trying to set the dirty flag.
GPSVC(310.dc8) 15:05:25:920 ProcessGroupPolicyCompletedExInternal: Finished processing extension <Group Policy Registry> at 59578 ticks (ms)
GPSVC(310.dc8) 15:05:25:920 ProcessGroupPolicyCompletedExInternal: Leaving. Extension = {B087BE9D-ED37-454F-AF9C-04291E351182}, Return status dwRet = 0x0
GPSVC(310.dc8) 15:05:25:920 ProcessGPOList: Extension Group Policy Registry returned 0x0.
GPSVC(310.dc8) 15:05:25:920 ProcessGPOList: Extension Group Policy Registry was able to log data. RsopStatus = 0x0, dwRet = 0, Clearing the dirty bit
GPSVC(310.dc8) 15:05:25:920 ProcessGPOList:--
GPSVC(310.dc8) 15:05:25:920 CPolicyCriticalSectionCollection: Deleting critical section for UserSid <S-1-5-21-918414836-922602079-3242352692-500>
GPSVC(310.dc8) 15:05:25:920 Deleting sidString <S-1-5-21-918414836-922602079-3242352692-500>
GPSVC(310.dc8) 15:05:25:920 ProcessGPOs(User): -----------------------
GPSVC(310.dc8) 15:05:25:920 ProcessGPOs(User): -----------------------
GPSVC(310.dc8) 15:05:25:920 ProcessGPOs(User): Processing extension 802.3 Group Policy
GPSVC(310.dc8) 15:05:25:920 ReadGPOList:++
GPSVC(310.dc8) 15:05:25:920 CheckGPOs: ReadGPOList count = 0
GPSVC(310.dc8) 15:05:25:920 CompareGPOLists: The lists are the same.
GPSVC(310.dc8) 15:05:25:920 ProcessGPOs(User): Extension 802.3 Group Policy skipped with flags 0x400026.
GPSVC(310.dc8) 15:05:25:920 ProcessGPOs(User): -----------------------
GPSVC(310.dc8) 15:05:25:920 ProcessGPOs(User): Processing extension Group Policy Printers
.... and so on...
As you can see, the next step on faulty machine should be "ConnectToNameSpace: ConnectServer returned 0x0" but nothing happens!
To resolve this state i have to start the machine in Safe Mode, Login and restart. After this procedure the machine starts normally.
I really have no more ideas. I hope anybody can help me.
Thanks in advance!
Best regards
Sebastian
Continue reading...