RSoP problems wih one user on one computer

[Robert Brown]

Here is my problem, I was going through the event logs on my computer and
found some UserEnv errors. In particular: 1058, 1030 and 1054. Not
realizing that I was having GPO problems I quickly opened a command line and
tried 'gpresult'. This yielded: INFO: The user "DOMAIN\user.name" does not
have RSOP data. So I tried RSOP.MSC which gives me: RSoP data is invalid.
Likely causes are, data is corrupt, data has been deleted or data has never
been created. Details: Invalid Namespace. Then on the server I see Event
ID 10009 "DCOM was unable to communicate with the computer COMPUTERNAME using
any configured protocols." The problem is, if I log into this same computer
with another user account (I've tested 2 other accounts) the GPO's apply
without a problem. Plus, if I log into our Citrix server I can get GPO's
without a problem.

Here is what I've tried. I've checked the bindings and tweaked those. I've
rejoined the problem computer to the domain. I've disabled all NIC's not in
use on the server and checked bindings there. I've checked Kerberos to make
sure I'm actually authenticating. I've combed through a ton of articles,
none of which exactly match my problem. I'm looking for any sort of
direction here. It's possible I'm barking up the wrong tree and the fix is
right in front of my face. If anyone can shed any type of light on this, I
would be very appreciative.

Thank you

[Florian Frommherz [MVP]]

Howdie!

Post by Robert Brown
Here is what I've tried. I've checked the bindings and tweaked those. I've
rejoined the problem computer to the domain. I've disabled all NIC's not in
use on the server and checked bindings there. I've checked Kerberos to make
sure I'm actually authenticating. I've combed through a ton of articles,
none of which exactly match my problem. I'm looking for any sort of
direction here. It's possible I'm barking up the wrong tree and the fix is
right in front of my face. If anyone can shed any type of light on this, I
would be very appreciative.

Have you already tried to create the RSOP data for that user on a
different machine?

cheers,

Florian

[Robert Brown]

I'm not exactly sure what you mean by "create". Here is what I can do - I
can log in to a Citrix server in the same domain using the same user name and
run gpresult and rsop.msc without any problems. So far, my computer and the
Citrix server (which is not a domain controller) are the only two computers I
have tried this on. Let me know if that answers your question or not.

Thank you

Post by Florian Frommherz [MVP]
Howdie!

Post by Robert Brown
Here is what I've tried. I've checked the bindings and tweaked those. I've
rejoined the problem computer to the domain. I've disabled all NIC's not in
use on the server and checked bindings there. I've checked Kerberos to make
sure I'm actually authenticating. I've combed through a ton of articles,
none of which exactly match my problem. I'm looking for any sort of
direction here. It's possible I'm barking up the wrong tree and the fix is
right in front of my face. If anyone can shed any type of light on this, I
would be very appreciative.

Have you already tried to create the RSOP data for that user on a
different machine?
cheers,
Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Use a newsreader! http://www.frickelsoft.net/news.html

[Florian Frommherz [MVP]]

Howdie!

Post by Robert Brown
I'm not exactly sure what you mean by "create". Here is what I can do - I
can log in to a Citrix server in the same domain using the same user name and
run gpresult and rsop.msc without any problems. So far, my computer and the
Citrix server (which is not a domain controller) are the only two computers I
have tried this on. Let me know if that answers your question or not.

If you can run rsop.msc on another machine with the user in question and
that is successful, I suspect the user's profile is broken. You could
try that by simply wiping it (backing it up before) and trying to log on
again.

cheers,

Florian

[Robert Brown]

I can definitely give that a try. However, when I unjoined the computer from
the domain and re-joined it, I did create a new profile on the problem box
and still could not get rsop.msc. I haven't tried rsop.msc on another
regular workstation. I've only tried it on the "problem" box and on a Citrix
server. Do you have any other ideas on what could be causing the problem?

Post by Florian Frommherz [MVP]
Howdie!

Post by Robert Brown
I'm not exactly sure what you mean by "create". Here is what I can do - I
can log in to a Citrix server in the same domain using the same user name and
run gpresult and rsop.msc without any problems. So far, my computer and the
Citrix server (which is not a domain controller) are the only two computers I
have tried this on. Let me know if that answers your question or not.

If you can run rsop.msc on another machine with the user in question and
that is successful, I suspect the user's profile is broken. You could
try that by simply wiping it (backing it up before) and trying to log on
again.
cheers,
Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Use a newsreader! http://www.frickelsoft.net/news.html