Group Policy Error in Log every 5 minutes.

Giganews Newsgroups
Subject: Group Policy Error in Log every 5 minutes.
Posted by:  Caledai (Caled…@discussions.microsoft.com)
Date: Tue, 21 Mar 2006

Ok this error occurs every 5 minutes on a server I manage.
Its a clean build of Windows Server 2003 SP1 Standard 32bit
Its the PDC of a brand new active directory - only use has been us
configuring, importing and setting up users/group policies.

[quote]Event Type:    Error
Event Source:    Userenv
Event Category:    None
Event ID:    1091
Date:        3/22/2006
Time:        11:07:08 AM
User:        NT AUTHORITY\SYSTEM
Computer:    FILESERVER
Description:
The Group Policy client-side extension Security failed to log RSOP
(Resultant Set of Policy) data. Please look for any errors reported earlier
by that extension.
[/quote]
Step 1 - Verify WMI service is running [sc query winmgmt returns running]
Step 2 - Run > WBEMTEST / Connect "root/rsop" - Successful
Step 3 - Verify access to namespace - "ENUM CLASSES" - Left Blank - 7
Objects - RsopLoggingModeProvider etc
Step 4 - Run > GPUPDATE - Only returns the same error I am attempting to
troubleshoot in the event log.
Step 5 - Use Verbose Logging to debug this error - Activated - But haven't
got a clue on how to read log

Alternate Option - kb823608 - phone call to microsoft support - Service Pack
1 superseeds this.  Not an Option.

*******

Run > rsop.msc
Warning Found - Computer Configuration - Properties - Error Information
[quote]Security - Failed.
Security processed successfully but failed to log resultant set of policy
information[/quote]
Expanding Path - Windows Settings - Security Settings
[quote]Windows cannot open template file.[/quote]
*******
Group Policy Modelling of PDC
DC - Set to the PDC.
OU - Users [administrator] on Domain Controllers
Applied GPO's - Default Domain Policy / Default Domain Controllers Policy

Summary Tab - Warning on Component Status.
Component Name - Security
[quote]
Security failed due to the error listed below and failed to log resultant
set of policy information

Element not found.

Additional information may have been logged.  Review the applicaiton event
log on the domain controller on which the simulation was run for events
between [i]date[/i] and [i]date[/i]
[/quote]
Settings Tab
Computer Config - Windows Settings - Security Settings
[quote]An error has occured while collecting data for Security Configuarion
Engine [SCE] Extension

This error impacts the following settings:
Account Policies[Password Policy, Account Lockout Policy, Kerberos Policy]
Local Policies[Audit, User Rights Assignment, Security Options]
Event Log
Restricted Groups
System Services
Registry
File System

The following errors apply to all of the above settings:
An unknown error occured while data was gathered for this extention.
Details: Invalid Class[/quote]
******
Application Log on Secondary Domain Controller - Windows Server 2003 SP1
Standard 32bit.
[quote]Event Type:    Error
Event Source:    Userenv
Event Category:    None
Event ID:    1030
Date:        22/03/2006
Time:        11:21:07 AM
User:        NT AUTHORITY\SYSTEM
Computer:    APPSERVER
Description:
Windows cannot query for the list of Group Policy objects. Check the event
log for possible messages previously logged by the policy engine that
describes the reason for this.

****

Event Type:    Error
Event Source:    Userenv
Event Category:    None
Event ID:    1058
Date:        22/03/2006
Time:        11:21:07 AM
User:        NT AUTHORITY\SYSTEM
Computer:    APPSERVER
Description:
Windows cannot access the file gpt.ini for GPO
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=sdc,DC=sunbury-downs-sc,DC=edu,DC=vic,DC=gov,DC=au.
The file must be present at the location
<\\sdc.sunbury-downs-sc.edu.vic.gov.au\sysvol\sdc.sunbury-downs-sc.edu.vic.gov.au\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>.
(Access is denied. ). Group Policy processing aborted.[/quote]
Security Privilages of above file.
Administrators - Full, Authenticated Users - Read & Execute, Server
Operators - Read & Execute, System - Full

Secondary Server - Run - rsop.msc - Failed [GP Core Failure - Group Policy
Infrastructure has failed due to the error listed below - Access is denied.]
Client Workstation [Windows XP Pro SP2] - Run - rsop.msc - No Errors or
Warnings.

Replies