⚑ Deus Ex Machina ➽ Eventlog Lookup

Deus Ex Machina » Eventlog » Event 1054 - GroupPolicy

GroupPolicy - 1054


Error

Description »
The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.
Data formatted as » EventData
SupportInfo1 1 
  SupportInfo2 1903 
  ProcessingMode 0 
  ProcessingTimeInMilliseconds 1266 
  ErrorCode 58 
  ErrorDescription The specified server cannot perform the requested operation.  

So - the Group Policy client has attempted to retrieve policies from a domain controller - but it can't actually find out where it can find a DC in the first place.

The event suggests a network issue, or an issue with your AD DNS server(s). Check to see if there were any network connectivity issues at the time of the event, and check that the DC/DNS servers were up, reachable and responding.

It's also possible that the issue is local to that computer, especially if it is the only one that was affected. Check that you have the correct DNS settings on the computer, and check to make sure that no firewalling is preventing it from talking to a DC, check for ephemeral port depletion, and check for system resource depletion.

If the ErrorCode is 58, this may be due to ephemeral port exhaustion. Run netstat -an | FIND /C "WAIT". If the number returned is 16,384 or higher, you've got problems. 16,384 is the default number of available ephemeral ports on Windows 2008 or 2008 R2. If you suspect your server's settings may have been changed (perhaps to allow fewer ports), you can check this with the command netsh int ipv4 show dynamicport tcp.
There is a known issue with Windows 2008 and 2008 R2 in which ports in a TIME_WAIT state aren't closed when they should be. The fix for this is MS KB2553549. If this hotfix does not apply to you, then check with netstat -anb which processes own which port bindings. If the process you find is PID 0 (System Idle Process), it means the process which used to own the connection has exited.