Welcome to ISAserver.org

Userenv error 1053 no matter what I try

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Installation >> Userenv error 1053 no matter what I try

Page: [1]

Message

<< Older Topic Newer Topic >>

Userenv error 1053 no matter what I try - 10.Feb.2005 6:51:00 PM

ksteere

Posts: 4
Joined: 10.Feb.2005
From: Dallas, TX
Status: offline

Windows 2003 Server(DC mode) w/ ISA 2004
All updates/hotfixes installed.
Also runs Exchange 2003 and IIS

I had to finally uninstall ISA 2004 because I never could get it to stop eventually giving me this error in the Applications log: (as well as firewall client problems)

ID: 1053 from Userenv
Windows cannot determine the user or computer name. (%1). Group Policy processing aborted.
(No other errors appear in the other logs)

I could reboot, and the error would not come up for awhile. I could also issue the command GPUPDATE and it would quickly respond and no errors in the log, so everything looked fine (I thought).

But at some point, the 1053 error appears in the App event log and the GPUPDATE will hang for a few seconds with 1053 being logged in app log. This continues until a reboot. (routing refresh)

I will tell you the basic setup:
On the Windows 2003 Server-
LAN adapter: 192.168.1.1
(no default gateway)
CABLE: DHCP enabled (IP stays static for months)
DNS: (same as IP assigned)
or 192.168.1.1 (tried both)
Running DNS and DHCP on same server, no errors
domain: local.mydomain.com

For ISA 2004 Server (basics)
Networks:
Internal: 192.168.1.0-192.168.1.255
Network Rules:
Local Host to All Networks = Route
Internal to Internal = Route
VPN Clients to Internal = Route
Internal to External = NAT

Firewall Policy
All ports Open (so not to be a port issue)
All Networks to All Netorks = Any Protocol
Most all System Policies are enabled as well except VPNs.

In addition to the 1053 error eventually showing up, I was unable to get POP3 logins from a firewall client and MSN messanger sometimes wouldn't connect.

Web Access worked fine from everywhere.
IIS and websites worked fine (same server)
Also run Exchange 2003 on same server, works fine.

Any Ideas?

Thanks alot,
Ken

[ February 10, 2005, 07:18 PM: Message edited by: Ken S. ]

Post #: 1

Featured Links*

RE: Userenv error 1053 no matter what I try - 13.Feb.2005 2:42:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Ken,

Other than a spurious error message, for which all Windows servers have hundreds of thousands every month, was there a real problem with the ISA firewall config?

Thanks!
Tom

(in reply to ksteere)

Post #: 2

RE: Userenv error 1053 no matter what I try - 13.Feb.2005 11:34:00 PM

penrose.l@2college.nl

Posts: 474
Joined: 29.Jan.2004
From: Netherlands
Status: offline

Hi ,

I posted this not so long ago in a thread called something like "get rid of those annoying startup errors"
that will solve this error and also other ones that you haven't probably seen yet [Smile]

Lex P.

(in reply to ksteere)

Post #: 3

RE: Userenv error 1053 no matter what I try - 14.Feb.2005 1:26:00 AM

ksteere

Posts: 4
Joined: 10.Feb.2005
From: Dallas, TX
Status: offline

If it says that GRoup Policy processing has been disabled, I don't call that a small issuse.

In addition, the LAN clients were not able to login to POP3 external servers, and some of the time MSN messanger couldn't even login.

I got so frustrated, I finaly went back to ISA 2000 SP1 amd I dont get those errors and everythings ok. But I would like to use 2004 if I knew how to configure it right.

Any suggestions?

Ken \=

(in reply to ksteere)

Post #: 4

RE: Userenv error 1053 no matter what I try - 14.Feb.2005 11:19:00 PM

leonhughes

Posts: 149
Joined: 19.Mar.2001
From: UK
Status: offline

This looks similar to this:-

Q830676

You sure you got the event ID correct? If this is the problem, it's a documented issue with W2K3 DC's and has nothing to do with ISA.. I've seen it a few times on DC's that also run exchange. The other issues you are having are more likely down to incorrect configuration.

Leon.

[ February 14, 2005, 11:29 PM: Message edited by: leonhughes ]

(in reply to ksteere)

Post #: 5

RE: Userenv error 1053 no matter what I try - 15.Feb.2005 4:05:00 PM

ksteere

Posts: 4
Joined: 10.Feb.2005
From: Dallas, TX
Status: offline

quote:
Originally posted by leonhughes:
This looks similar to this:-

Q830676

You sure you got the event ID correct? ...
Leon.

That is error 1058. I was not getting that.
This was the error I would get after some time:

ID: 1053 from Userenv
Windows cannot determine the user or computer name. (%1). Group Policy processing aborted.

A bad problem, being the GP stops working.
A reboot fixes it for some time which seems to tell me that somehow the routing gets messed up. It also seems that ISA 2004 does NOT work well on a Domain Controller, maybe especially with Exchange Server on it. Unfortunetly, I can not afford a dedicated box to run ISA 2004 on.

Do you guys see anything wrong with the configuration I described above for my simple network?

Thanks,
Ken

(in reply to ksteere)

Post #: 6

RE: Userenv error 1053 no matter what I try - 15.Feb.2005 4:16:00 PM

penrose.l@2college.nl

Posts: 474
Joined: 29.Jan.2004
From: Netherlands
Status: offline

hi ,

well have you tried the solution I have given ?

Anyway your problem is that some critical services that need to start with network support don't start because your firewall client is blocking your network traffic. Something similar is with IPSEC disabled you get nasty errors also.

try to search for the solution I gave you , if that doesn't work then we'll work from that.

LexP

(in reply to ksteere)

Post #: 7

RE: Userenv error 1053 no matter what I try - 15.Feb.2005 4:35:00 PM

leonhughes

Posts: 149
Joined: 19.Mar.2001
From: UK
Status: offline

I've never tried installing ISA 2004 on a DC, but I know it's not a configuration that is supported by Microsoft. What is happening in the ISA logs? is any localhost traffic getting denied?

A quick look around the internet suggests that the problem is probably security related. I would have a good look at the logs before doing anything further.

Leon.

(in reply to ksteere)

Post #: 8