Software Installation Processing Alerts - Group Policy Failures?

Hello,
I am getting several errors reported by SCOM Software Installation Processing alert
In the local event log I have:
Warning 9/15/2014 11:09:37 AM GroupPolicy 1112 None
Warning 9/15/2014 11:09:37 AM Application Management Group Policy 108 None
Error 9/15/2014 11:09:37 AM Application Management Group Policy 103 None
Warning 9/15/2014 11:09:37 AM Application Management Group Policy 101 None
with the details:
101 - The assignment of application SMS Client Setup Bootstrap from policy MITS Servers Software failed. The error was : %%1274
103 - The removal of the assignment of application SMS Client Setup Bootstrap from policy MITS Servers Software failed. The error was : %%2
108 - Failed to apply changes to software installation settings. The installation of software deployed through Group Policy for this user has been delayed until the next logon because the changes must be applied before the user logon. The error was : %%1274
1112 - The Group Policy Client Side Extension Software Installation was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance.
- Computer Configuration > Policies > Administrative Templates > System > Group Policy > Policy > Startup policy processing is enabled 
what does exactly this means?
Thanks,
Dom
System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Hi,
Yes the packaged is installed.
Troubleshooting the issue deeper with http://support.microsoft.com/kb/249621/en-us is showing
Software installation extension has been called for background policy refresh
09-16 06:34:09:346
Software installation extension has been called for background policy refresh
The following policies are to be applied, flags are 11.
MITS Servers Software (unique identifier {E76FB561-E177-421D-AE43-109EADEAD751})
System volume path = \\ad.medctr.ucla.edu\sysvol\ad.medctr.ucla.edu\Policies\{E76FB561-E177-421D-AE43-109EADEAD751}\Machine
Active Directory path = LDAP://CN=Machine,cn={E76FB561-E177-421D-AE43-109EADEAD751},cn=policies,cn=system,DC=ad,DC=medctr,DC=ucla,DC=edu
Set the Active Directory path to LDAP://CN=Class Store,CN=Machine,cn={E76FB561-E177-421D-AE43-109EADEAD751},cn=policies,cn=system,DC=ad,DC=medctr,DC=ucla,DC=edu;.
Enumerating applications in the Active Directory for computer MSVROFAS2 with flags 5.
The following applications were found in policy MITS Servers Software.
Assigned application SMS Client Setup Bootstrap (flags a0044c70).
Found 1 applications in policy MITS Servers Software.
Enumerating the managed applications which are currently applied to this user.
No managed applications are currently applied to this user.
Found 0 applications locally that are not included in the set of applications from the Active Directory.
Application SMS Client Setup Bootstrap from policy MITS Servers Software is set for installation because it is assigned to this computer policy.
Software installation extension cannot perform removal or install operations during asynchronous policy refresh and will force a synchronous foreground refresh.
The assignment of application SMS Client Setup Bootstrap from policy MITS Servers Software failed. The error was : %1274
Removing application SMS Client Setup Bootstrap from the software installation database.
Calling Windows Installer to remove application advertisement for application SMS Client Setup Bootstrap from script C:\Windows\system32\appmgmt\MACHINE\{ecbf218d-0d04-4b00-a43e-91ba5c41d119}.aas.
Windows Installer cannot remove application advertisement for application SMS Client Setup Bootstrap from script C:\Windows\system32\appmgmt\MACHINE\{ecbf218d-0d04-4b00-a43e-91ba5c41d119}.aas, error 2.
The removal of the assignment of application SMS Client Setup Bootstrap from policy MITS Servers Software failed. The error was : %2
Policy Logging for Software Management is attempting to log application SMS Client Setup Bootstrap from policy MITS Servers Software.
Failed to apply changes to software installation settings. The installation of software deployed through Group Policy for this user has been delayed until the next logon because the changes must be applied before the user logon. The error was : %1274
Software installation extension has detected changes that require a synchronous foreground policy refresh.
Software installation extension returning with final error code 1274.
And this is happening hourly !!!
This is the current status...
Thanks,
Dom
System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Similar Messages

  • The processing of Group Policy failed. Windows attempted to read the file...

    Hello all-
    I am currently trying to configure group policy (specifically folder redirects) from a new Windows Server 2008 in my home... the server acts as both an AD DS and file server for 4 client computers, all running Windows Vista Ultimate.
    Here are the steps I am currently taking:
    I create a new Group Policy called All Users and Computers and apply it to the All Users and Computers OU, which contains exactly what it says (all users and computers in the domain).
    I verify that a new folder was created in \\<FQDN>\sysvol\<FQDN>\Policies.  The new folder created is named {6479C8E0-3134-4B4F-B047-7ADD51684684}
    I change the GPO Enforced setting to Enforced.
    I attempt to use the gpupdate command to see if the group policy can be updated successfully.  In a command prompt, I type gpupdate <enter>.  I receive the message 'Updating Policy...' then after about 15 seconds the message 'User Policy update has completed successfully.'
    I keep the cmd window open.  After about 10 seconds another message apperas which says "Computer policy could not be updated successfully.  The following errors were encountered: The processing of Group Policy failed.  Windows attempted to read the file \\<FQDN>\sysvol\<FQDN>\Policies\{6AC1786C-016F-11D2-945F-00C04Fb984F9}\gpt.ini from a domain controller and was not successful.  Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    To diagnose the failure, review the event log or invoke gpmc.msc to access information about Group Policy results."
    I confirm that the error code is #3 using the Event Log, "The system cannot find the file specificed"
    Of course the system cannot find the file specified because the folder does not exist in the sysvol folder. I am wondering why Windows is trying to read from this location when it does not exist, and is not the new group policy I created!  I have no other group policies linked or enforced to any other OU/Domain/etc.  Any help resolving this issue would be greatly appreciated.

    Hello all and thanks for the help.  First a few things:
    I understand that the DC should not be running RRAS, but this a simple server being used in aa home environment by 4 users and getting another server just for RRAS would be overkill.
    Secondly, I currently have it so that while the router is handling DHCP, I have reserved a fixed IP for the server, so it always has 192.168.1.100.  If I were to use the server as the DHCP, what would my hardware configuration have to look like?  I currently have the router plugged into the ISP modem, and then server plugged into the router.  All other clients connect to the router wirelessly.
    Here's the dcdiag output.  I tried dcdiag /fix but to no avail.
    Directory Server Diagnosis
    Performing initial setup:
    Trying to find home server...
    * Verifying that the local machine KELLERDCFS, is a Directory Server.
    Home Server = KELLERDCFS
    * Connecting to directory service on server KELLERDCFS.
    * Identified AD Forest.
    Collecting AD specific global data
    * Collecting site info.
    Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=keller-pa,DC=net,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
    The previous call succeeded
    Iterating through the sites
    Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
    Getting ISTG and options for the site
    * Identifying all servers.
    Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=keller-pa,DC=net,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
    The previous call succeeded....
    The previous call succeeded
    Iterating through the list of servers
    Getting information for the server CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
    objectGuid obtained
    InvocationID obtained
    dnsHostname obtained
    site info obtained
    All the info for the server collected
    * Identifying all NC cross-refs.
    * Found 1 DC(s). Testing 1 of them.
    Done gathering initial info.
    Doing initial required tests
    Testing server: Default-First-Site-Name\KELLERDCFS
    Starting test: Connectivity
    * Active Directory LDAP Services Check
    Determining IP4 connectivity
    Determining IP6 connectivity
    * Active Directory RPC Services Check
    ......................... KELLERDCFS passed test Connectivity
    Doing primary tests
    Testing server: Default-First-Site-Name\KELLERDCFS
    Starting test: Advertising
    The DC KELLERDCFS is advertising itself as a DC and having a DS.
    The DC KELLERDCFS is advertising as an LDAP server
    The DC KELLERDCFS is advertising as having a writeable directory
    The DC KELLERDCFS is advertising as a Key Distribution Center
    The DC KELLERDCFS is advertising as a time server
    The DS KELLERDCFS is advertising as a GC.
    ......................... KELLERDCFS passed test Advertising
    Test omitted by user request: CheckSecurityError
    Test omitted by user request: CutoffServers
    Starting test: FrsEvent
    * The File Replication Service Event log test
    Skip the test because the event log File Replication Service does not exist.
    ......................... KELLERDCFS passed test FrsEvent
    Starting test: DFSREvent
    The DFS Replication Event Log.
    ......................... KELLERDCFS passed test DFSREvent
    Starting test: SysVolCheck
    * The File Replication Service SYSVOL ready test
    File Replication Service's SYSVOL is ready
    ......................... KELLERDCFS passed test SysVolCheck
    Starting test: KccEvent
    * The KCC Event log test
    Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
    ......................... KELLERDCFS passed test KccEvent
    Starting test: KnowsOfRoleHolders
    Role Schema Owner = CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
    Role Domain Owner = CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
    Role PDC Owner = CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
    Role Rid Owner = CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
    Role Infrastructure Update Owner = CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
    ......................... KELLERDCFS passed test KnowsOfRoleHolders
    Starting test: MachineAccount
    Checking machine account for DC KELLERDCFS on DC KELLERDCFS.
    * SPN found :LDAP/KELLERDCFS.keller-pa.net/keller-pa.net
    * SPN found :LDAP/KELLERDCFS.keller-pa.net
    * SPN found :LDAP/KELLERDCFS
    * SPN found :LDAP/KELLERDCFS.keller-pa.net/KELLER-PA
    * SPN found :LDAP/42268b36-801f-4a6d-b162-34f3b01e04bb._msdcs.keller-pa.net
    * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/42268b36-801f-4a6d-b162-34f3b01e04bb/keller-pa.net
    * SPN found :HOST/KELLERDCFS.keller-pa.net/keller-pa.net
    * SPN found :HOST/KELLERDCFS.keller-pa.net
    * SPN found :HOST/KELLERDCFS
    * SPN found :HOST/KELLERDCFS.keller-pa.net/KELLER-PA
    * SPN found :GC/KELLERDCFS.keller-pa.net/keller-pa.net
    ......................... KELLERDCFS passed test MachineAccount
    Starting test: NCSecDesc
    * Security Permissions check for all NC's on DC KELLERDCFS.
    * Security Permissions Check for
    DC=ForestDnsZones,DC=keller-pa,DC=net
    (NDNC,Version 3)
    * Security Permissions Check for
    DC=DomainDnsZones,DC=keller-pa,DC=net
    (NDNC,Version 3)
    * Security Permissions Check for
    CN=Schema,CN=Configuration,DC=keller-pa,DC=net
    (Schema,Version 3)
    * Security Permissions Check for
    CN=Configuration,DC=keller-pa,DC=net
    (Configuration,Version 3)
    * Security Permissions Check for
    DC=keller-pa,DC=net
    (Domain,Version 3)
    ......................... KELLERDCFS passed test NCSecDesc
    Starting test: NetLogons
    * Network Logons Privileges Check
    Verified share \\KELLERDCFS\netlogon
    Verified share \\KELLERDCFS\sysvol
    ......................... KELLERDCFS passed test NetLogons
    Starting test: ObjectsReplicated
    KELLERDCFS is in domain DC=keller-pa,DC=net
    Checking for CN=KELLERDCFS,OU=Domain Controllers,DC=keller-pa,DC=net in domain DC=keller-pa,DC=net on 1 servers
    Object is up-to-date on all servers.
    Checking for CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net in domain CN=Configuration,DC=keller-pa,DC=net on 1 servers
    Object is up-to-date on all servers.
    ......................... KELLERDCFS passed test ObjectsReplicated
    Test omitted by user request: OutboundSecureChannels
    Starting test: Replications
    * Replications Check
    * Replication Latency Check
    ......................... KELLERDCFS passed test Replications
    Starting test: RidManager
    * Available RID Pool for the Domain is 1600 to 1073741823
    * KELLERDCFS.keller-pa.net is the RID Master
    * DsBind with RID Master was successful
    * rIDAllocationPool is 1100 to 1599
    * rIDPreviousAllocationPool is 1100 to 1599
    * rIDNextRID: 1111
    ......................... KELLERDCFS passed test RidManager
    Starting test: Services
    * Checking Service: EventSystem
    * Checking Service: RpcSs
    * Checking Service: NTDS
    * Checking Service: DnsCache
    * Checking Service: DFSR
    * Checking Service: IsmServ
    * Checking Service: kdc
    * Checking Service: SamSs
    * Checking Service: LanmanServer
    * Checking Service: LanmanWorkstation
    * Checking Service: w32time
    * Checking Service: NETLOGON
    ......................... KELLERDCFS passed test Services
    Starting test: SystemLog
    * The System Event log test
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 17:53:59
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 17:59:02
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 18:04:04
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 18:09:06
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 18:14:08
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 18:19:10
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 18:24:12
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 18:29:15
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 18:34:17
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 18:39:19
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 18:49:23
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    ......................... KELLERDCFS failed test SystemLog
    Test omitted by user request: Topology
    Test omitted by user request: VerifyEnterpriseReferences
    Starting test: VerifyReferences
    The system object reference (serverReference)
    CN=KELLERDCFS,OU=Domain Controllers,DC=keller-pa,DC=net and backlink
    on
    CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
    are correct.
    The system object reference (serverReferenceBL)
    CN=KELLERDCFS,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=keller-pa,DC=net
    and backlink on
    CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
    are correct.
    ......................... KELLERDCFS passed test VerifyReferences
    Test omitted by user request: VerifyReplicas
    Test omitted by user request: DNS
    Test omitted by user request: DNS
    Running partition tests on : ForestDnsZones
    Starting test: CheckSDRefDom
    ......................... ForestDnsZones passed test CheckSDRefDom
    Starting test: CrossRefValidation
    ......................... ForestDnsZones passed test
    CrossRefValidation
    Running partition tests on : DomainDnsZones
    Starting test: CheckSDRefDom
    ......................... DomainDnsZones passed test CheckSDRefDom
    Starting test: CrossRefValidation
    ......................... DomainDnsZones passed test
    CrossRefValidation
    Running partition tests on : Schema
    Starting test: CheckSDRefDom
    ......................... Schema passed test CheckSDRefDom
    Starting test: CrossRefValidation
    ......................... Schema passed test CrossRefValidation
    Running partition tests on : Configuration
    Starting test: CheckSDRefDom
    ......................... Configuration passed test CheckSDRefDom
    Starting test: CrossRefValidation
    ......................... Configuration passed test CrossRefValidation
    Running partition tests on : keller-pa
    Starting test: CheckSDRefDom
    ......................... keller-pa passed test CheckSDRefDom
    Starting test: CrossRefValidation
    ......................... keller-pa passed test CrossRefValidation
    Running enterprise tests on : keller-pa.net
    Test omitted by user request: DNS
    Test omitted by user request: DNS
    Starting test: LocatorCheck
    GC Name: \\KELLERDCFS.keller-pa.net
    Locator Flags: 0xe00013fd
    PDC Name: \\KELLERDCFS.keller-pa.net
    Locator Flags: 0xe00013fd
    Time Server Name: \\KELLERDCFS.keller-pa.net
    Locator Flags: 0xe00013fd
    Preferred Time Server Name: \\KELLERDCFS.keller-pa.net
    Locator Flags: 0xe00013fd
    KDC Name: \\KELLERDCFS.keller-pa.net
    Locator Flags: 0xe00013fd
    ......................... keller-pa.net passed test LocatorCheck
    Starting test: Intersite
    Skipping site Default-First-Site-Name, this site is outside the scope
    provided by the command line arguments provided.
    ......................... keller-pa.net passed test Intersite
    Here's the nslookup from Vista client:
    Microsoft Windows [Version 6.0.6001]
    Copyright (c) 2006 Microsoft Corporation. All rights reserved.
    C:\Users\Andrew>nslookup KELLERDCFS
    Server: UnKnown
    Address: 192.168.1.100
    Name: KELLERDCFS.keller-pa.net
    Addresses: 192.168.1.150
    192.168.1.100
    C:\Users\Andrew>
    Thanks again!

  • Processing of Group Policy failed - User Policy - Windows 7

    OP:
    http://social.technet.microsoft.com/Forums/en-US/w7itpronetworking/thread/191f1ee1-a551-446b-9808-ff66a952bb25
    When running a gpupdate I get the following message:
    Updating Policy...
    User policy could not be updated successfully. The following errors were encount
    ered:
    The processing of Group Policy failed. Windows could not authenticate to the Act
    ive Directory service on a domain controller. (LDAP Bind function call failed).
    Look in the details tab for error code and description.
    Computer Policy update has completed successfully.
    To diagnose the failure, review the event log or run GPRESULT /H GPReport.html f
    rom the command line to access information about Group Policy results.
    This only happens on one computer under a certain account; other accounts work fine and the problem account works fine on other computers. Therefore the problem is located on the Windows 7 computer.
    I have tracked it down to an LDAP error code 49. 
    I tried the MS sollution (http://technet.microsoft.com/en-us/library/cc727283(v=ws.10).aspx) but the credentials are sound.
    I can also connect to the DC with LDP.exe fine. 
    Here are the diagnostic read outs (GPResult was too long to post):
    Log Name:      System
    Source:        Microsoft-Windows-GroupPolicy
    Date:          2/29/2012 1:56:09 PM
    Event ID:      1006
    Task Category: None
    Level:         Error
    Keywords:     
    User:          Domain\UserAccount
    Computer:      Win7-ComputerA.FQDomain
    Description:
    The processing of Group Policy failed. Windows could not authenticate to the Active Directory service on a domain controller. (LDAP Bind function call failed). Look in the details tab for error code and description.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" />
        <EventID>1006</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>0</Task>
        <Opcode>1</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2012-02-29T19:56:09.732842600Z" />
        <EventRecordID>32458</EventRecordID>
        <Correlation ActivityID="{CECE6DDC-E7CC-4563-8109-E62382F645D4}" />
        <Execution ProcessID="984" ThreadID="3688" />
        <Channel>System</Channel>
        <Computer>Win7-ComputerA.FQDomain</Computer>
        <Security UserID="S-1-5-21-416373151-1271962822-2142307910-40105" />
      </System>
      <EventData>
        <Data Name="SupportInfo1">1</Data>
        <Data Name="SupportInfo2">5012</Data>
        <Data Name="ProcessingMode">0</Data>
        <Data Name="ProcessingTimeInMilliseconds">1326</Data>
        <Data Name="ErrorCode">49</Data>
        <Data Name="ErrorDescription">Invalid Credentials</Data>
        <Data Name="DCName">
        </Data>
      </EventData>
    </Event>
    Windows IP Configuration
       Host Name . . . . . . . . . . . . : WIN7-ComputerA
       Primary Dns Suffix  . . . . . . . : FQDomain
       Node Type . . . . . . . . . . . . : Hybrid
       IP Routing Enabled. . . . . . . . : No
       WINS Proxy Enabled. . . . . . . . : No
       DNS Suffix Search List. . . . . . : FQDomain
                                           ParentDomain
    Ethernet adapter Local Area Connection:
       Connection-specific DNS Suffix  . : FQDomain
       Description . . . . . . . . . . . : Intel(R) 82579LM Gigabit Network Connecti
    on
       Physical Address. . . . . . . . . : 00-21-CC-5F-CF-DF
       DHCP Enabled. . . . . . . . . . . : Yes
       Autoconfiguration Enabled . . . . : Yes
       IPv4 Address. . . . . . . . . . . : 216.71.244.28(Preferred)
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Lease Obtained. . . . . . . . . . : Wednesday, February 29, 2012 12:38:25 PM
       Lease Expires . . . . . . . . . . : Thursday, March 01, 2012 12:38:24 PM
       Default Gateway . . . . . . . . . : 216.71.244.1
       DHCP Server . . . . . . . . . . . : 216.71.244.2
       DNS Servers . . . . . . . . . . . : 216.71.244.2
                                           216.71.240.120
                                           216.71.240.132
       Primary WINS Server . . . . . . . : 216.71.244.2
       Secondary WINS Server . . . . . . : 216.71.240.130
                                           216.71.240.122
       NetBIOS over Tcpip. . . . . . . . : Enabled
    Wireless LAN adapter Wireless Network Connection:
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Intel(R) WiFi Link 1000 BGN
       Physical Address. . . . . . . . . : 8C-A9-82-B0-67-E8
       DHCP Enabled. . . . . . . . . . . : Yes
       Autoconfiguration Enabled . . . . : Yes

    Hi,
    It sound like port blocking issue, Seems your client system connecting 216.71.240.x DNS Servers as a logon server and which seems on different subnet
    as per subnet mask, So there must be a router or firewall in between and so it might be Active directory ports are being blocked.
    So first for testing purpose just remove other
    216.71.240.x DNS
    servers from TCP/IP configuration and clear dns cache
    ipconfig/flushdns
    and restart the system. check if it works.
    or run this command on DC
    dcdiag /test:dns
    and share the error report.
    Cheers!
    Sanjay

  • The processing of Group Policy failed because of lack of network connectivity to a domain controller

    We are setting up a new AD environment  with one AD/DC running DNS services,  and a secondary DNS server configured with secondary zone. The problem is that none of the machines in the the domain are getting GPO.
    When I run a gpupdate /force from a machine, I get the following output:
    "Updating Policy...
    User Policy update has completed successfully.
    Computer policy could not be updated successfully. The following errors were enc
    ountered:
    The processing of Group Policy failed because of lack of network connectivity to
     a domain controller. This may be a transient condition. A success message would
     be generated once the machine gets connected to the domain controller and Group
     Policy has succesfully processed. If you do not see a success message for sever
    al hours, then contact your administrator.
    To diagnose the failure, review the event log or run GPRESULT /H GPReport.html f
    rom the command line to access information about Group Policy results."
    While the system event log outputs the following:
    "The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy
    has succesfully processed. If you do not see a success message for several hours, then contact your administrator." 
    All the machines that were joined to the domain are able to resolve in forward and reverse lookups, ping the DC and ping each other so  I dont understand how the error can be resolved.
    Here are few things I have tried:
    1. I came across this KB which checked ok for me: http://support.microsoft.com/kb/241515
    2. Made a copy of the default GPO, applied to a OU with one machine, and made sure to remove any GPO links from above
    3. Enabled the following  two local Group policies on a test member:
    GP slow link detection
    Startup policy processing wait time
    4. Modified firewall to allow everything on both member and DC
    5. Verified DSN logs, SRV records, access to sysvol ( added authenticated users to sysvol)
    I have yet to figure out the reason for this issue. Has anyone seen anything like this before?

    1. I checked the NIC, it only has one IP. and I followed your article. I set the primary DNS to its own IP and the secondary DNS to the loopback ip
    2. This is a new DC and DNS server. I dont have old records yet. I also check the DNS event logs. No errors
    3. I made sure the member server is pointing only to the only DC/DNS server
    4. Here is the output from the dcdiag....  everything passed except, the Netlogons part. I'm not sure what means or how to fix it yet:
          Starting test: NetLogons
             * Warning BUILTIN\Administrators did not have the "Access this
             computer
             "*   from network" right.
             [hostname] An net use or LsaPolicy operation failed with error
             1, Incorrect function..
             ......................... hostname failed test NetLogons
    Complete output:
    > hostname
    Server:  hostname.domain.local
    Address:  X.X.X.95
    > ^C
    C:\Windows\system32>
    C:\Windows\system32>nslookup
    > set type=all
    >
    >
    >
    > _ldap._tcp.dc._msdcs.domainname
    _ldap._tcp.dc._msdcs.domain.local SRV service location:
              priority       = 0
              weight         = 100
              port           = 389
              svr hostname   = hostname.domain.local
    hostname.domain.local      internet address = X.X.X.95
    > ^C
    C:\Windows\system32>cd ..
    C:\Windows>cd SYSVOL
    C:\Windows\SYSVOL>cd sysvol
    C:\Windows\SYSVOL\sysvol>dir
     Volume in drive C has no label.
     Volume Serial Number is F624-CDB2
     Directory of C:\Windows\SYSVOL\sysvol
    10/29/2014  08:25 PM    <DIR>          .
    10/29/2014  08:25 PM    <DIR>          ..
    10/29/2014  08:25 PM    <JUNCTION>     domain.local [C:\Windows\SYSVOL\domain]
                   0 File(s)              0 bytes
                   3 Dir(s)  63,971,037,184 bytes free
    C:\Windows\SYSVOL\sysvol>dcdiag
    Directory Server Diagnosis
    Performing initial setup:
       Trying to find home server...
       Home Server = hostname
       * Identified AD Forest.
       Done gathering initial info.
    Doing initial required tests
       Testing server: Default-First-Site-Name\hostname
          Starting test: Connectivity
             ......................... hostname passed test Connectivity
    Doing primary tests
       Testing server: Default-First-Site-Name\hostname
          Starting test: Advertising
             ......................... hostname passed test Advertising
          Starting test: FrsEvent
             ......................... hostname passed test FrsEvent
          Starting test: DFSREvent
             ......................... hostname passed test DFSREvent
          Starting test: SysVolCheck
             ......................... hostname passed test SysVolCheck
          Starting test: KccEvent
             ......................... hostname passed test KccEvent
          Starting test: KnowsOfRoleHolders
             ......................... hostname passed test
             KnowsOfRoleHolders
          Starting test: MachineAccount
             ......................... hostname passed test MachineAccount
          Starting test: NCSecDesc
             ......................... hostname passed test NCSecDesc
          Starting test: NetLogons
             * Warning BUILTIN\Administrators did not have the "Access this
             computer
             "*   from network" right.
             [hostname] An net use or LsaPolicy operation failed with error
             1, Incorrect function..
             ......................... hostname failed test NetLogons
          Starting test: ObjectsReplicated
             ......................... hostname passed test
             ObjectsReplicated
          Starting test: Replications
             ......................... hostname passed test Replications
          Starting test: RidManager
             ......................... hostname passed test RidManager
          Starting test: Services
             ......................... hostname passed test Services
          Starting test: SystemLog
             A warning event occurred.  EventID: 0x000003F6
                Time Generated: 03/04/2015   18:23:06
                Event String:
                Name resolution for the name ctldl.windowsupdate.com timed out after
     none of the configured DNS servers responded.
             ......................... hostname passed test SystemLog
          Starting test: VerifyReferences
             ......................... hostname passed test VerifyReferences
       Running partition tests on : ForestDnsZones
          Starting test: CheckSDRefDom
             ......................... ForestDnsZones passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... ForestDnsZones passed test
             CrossRefValidation
       Running partition tests on : DomainDnsZones
          Starting test: CheckSDRefDom
             ......................... DomainDnsZones passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... DomainDnsZones passed test
             CrossRefValidation
       Running partition tests on : Schema
          Starting test: CheckSDRefDom
             ......................... Schema passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... Schema passed test CrossRefValidation
       Running partition tests on : Configuration
          Starting test: CheckSDRefDom
             ......................... Configuration passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... Configuration passed test CrossRefValidation
       Running partition tests on : emcdsm
          Starting test: CheckSDRefDom
             ......................... emcdsm passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... emcdsm passed test CrossRefValidation
       Running enterprise tests on : domain.local
          Starting test: LocatorCheck
             ......................... domain.local passed test LocatorCheck
          Starting test: Intersite
             ......................... domain.local passed test Intersite
    C:\Windows\SYSVOL\sysvol>

  • Processing of Group Policy Failed - Single DC error 1058

    I have been getting the error every 5 mins for awhile: 
    The processing of Group Policy failed. Windows attempted to read the file \\xx.company\sysvol\xxx.company\Policies\{0000000-2323-2222-2222-333333}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this
    event is resolved. This issue may be transient and could be caused by one or more of the following: 
    a) Name Resolution/Network Connectivity to the current domain controller. 
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller). 
    c) The Distributed File System (DFS) client has been disabled.
    So - this is a single DC 2008R2.  It started (I think) back when I joined another server on the domain and did a DCPromo to help build some redundancy.  DFS was/is not enabled, do I need to set this up to resolve this?
    User are able to login and policy are working, I only see this error on the DC, but other than the error everything seems to be working fine.  I can access the share \\xx.company\sysvol\xxx.company\Policies\ and see it from all systems on the domain.
    I looked for the Burflags to see if that would help but since there is no DFS there was nothing in the registry. 
    So at this point, I removed the secondary server via DCpromo, going back to just the 1 server DC but I still get the error.  DNS works. When I do a DCDiag everything looks ok except the SysVol - I get about 10 of these
          Starting test: SystemLog
             An error event occurred.  EventID: 0x00000422
                Time Generated: 03/17/2015   14:49:41
                Event String:
                The processing of Group Policy failed... blah blah - same as above. 
    I looked at this link because of the combination of the 2 errors - Error 1058 and 00422 but its suggesting Authoritative restore, but I don't have the replication.  
    Now I am wondering if there is a left over connection somewhere in the system that doesn't know that there isn't another DC on the network?
    So - any suggestions?  Thanks in advance.

    Hi,
    >>Now I am wondering if there is a left over connection somewhere in the system that doesn't know that there isn't another DC on the network?
    Did we clean up the metadata of the removed domain controller? If not, we can follow the article below to do this.
    Clean Up Server Metadata
    https://technet.microsoft.com/en-us/library/cc816907(v=ws.10).aspx
    Besides, on the existing domain controller, check Applications and Services Logs\FRS or DFSR logs in Event Viewer. If the issue persists, we can follow the method below to do an authoritative restore for Sysvol.
    If we use FRS to replicate Sysvol, we can try to follow the article below to an authoritative restore for Sysvol.
    Using the BurFlags registry key to reinitialize File Replication Service replica sets
    https://support.microsoft.com/en-us/kb/290762
    If we use DFSR to replicate Sysvol, we can try to follow the article below to do an authoritative restore for Sysvol.
    How to force an authoritative and non-authoritative synchronization for DFSR-replicated SYSVOL (like "D4/D2" for FRS)
    https://support.microsoft.com/en-us/kb/2218556
    Best regards,
    Frank Shen
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • Fireworks 8 Installation Problem via Group Policy

    Hi,
    We are trying deploy Studio 8 across our site using the
    provided MSI's and Group Policy following this guide -
    http://www.adobe.com/cfusion/knowledgebase/index.cfm?id=332882
    I have created the mst files for all products and set them to
    be deployed by group policy. Dreamweaver, Flash, Contribute, Flash
    Video Encoder and Flash Extensions Manager all install fine however
    Fireworks will not, looking in the event log it doesn't even
    attempt to install. All folders have the same permissions, the MSI
    & MSTs are all part of the same Group Policy Object using the
    "Software Installation" method with the same permissions.
    Fireworks will install using MSIEXEC from the command line so
    the package and mst are fine.
    Has anyone else come across this problem?
    Thanks
    Matt

    We are having the same issue here at our NSW High School. I
    have traced the problem to be that Fireworks wants to deploy in
    Chinese (instead of English) and because of this it will not
    install. I am looking for a way to convert the msi file to an mst
    so I can choose English as the default install language.
    Hope this info is useful

  • Installation blocked by group policy designed to prevent CryptoLocker

    We have followed the steps outlined by bleepingcomputer.com to prevent as best we can the CryptoLocker virus.  Link to article: http://www.bleepingcomputer.com/virus-removal/cryptolocker-ransomware-information#prevent
    Please update your Reader installer to not use %AppData%\Local\Temp\.  The CryptoLocker prevention method involves blocking that and the following paths.  I know many businesses using these techniques.
    Block CryptoLocker executable in %AppData%
    Path: %AppData%\*.exe
    Security Level: Disallowed
    Description: Don't allow executables to run from %AppData%.
    Block CryptoLocker executable in %LocalAppData%
    Path if using Windows XP: %UserProfile%\Local Settings\*.exe
    Path if using Windows Vista/7/8: %LocalAppData%\*.exe
    Security Level: Disallowed
    Description: Don't allow executables to run from %AppData%.
    Block Zbot executable in %AppData%
    Path: %AppData%\*\*.exe
    Security Level: Disallowed
    Description: Don't allow executables to run from immediate subfolders of %AppData%.
    Block Zbot executable in %LocalAppData%
    Path if using Windows XP: %UserProfile%\Local Settings\*\*.exe
    Path if using Windows Vista/7/8: %LocalAppData%\*\*.exe
    Security Level: Disallowed
    Description: Don't allow executables to run from immediate subfolders of %AppData%.
    Block executables run from archive attachments opened with WinRAR:
    Path if using Windows XP: %UserProfile%\Local Settings\Temp\Rar*\*.exe
    Path if using Windows Vista/7/8: %LocalAppData%\Temp\Rar*\*.exe
    Security Level: Disallowed
    Description: Block executables run from archive attachments opened with WinRAR.
    Block executables run from archive attachments opened with 7zip:
    Path if using Windows XP: %UserProfile%\Local Settings\Temp\7z*\*.exe
    Path if using Windows Vista/7/8: %LocalAppData%\Temp\7z*\*.exe
    Security Level: Disallowed
    Description: Block executables run from archive attachments opened with 7zip.
    Block executables run from archive attachments opened with WinZip:
    Path if using Windows XP: %UserProfile%\Local Settings\Temp\wz*\*.exe
    Path if using Windows Vista/7/8: %LocalAppData%\Temp\wz*\*.exe
    Security Level: Disallowed
    Description: Block executables run from archive attachments opened with WinZip.
    Block executables run from archive attachments opened using Windows built-in Zip support:
    Path if using Windows XP: %UserProfile%\Local Settings\Temp\*.zip\*.exe
    Path if using Windows Vista/7/8: %LocalAppData%\Temp\*.zip\*.exe
    Security Level: Disallowed
    Description: Block executables run from archive attachments opened using Windows built-in Zip support.

    Hi, I am using a toshiba personal laptop, windows 7 home premuim. No one else uses it, nor have i brought it to any buisness , other home, etc.
    I have been blocked by group policy for 3 months.  I have spend over 200 dollars on ITs to only tell me they have never seen this before, and to buy a new laptop.. I have no idea why i am the admin, and only user yet all i can open is aol.
    I am at my wits end, and will go buy another laptop, deffenitly nothing like this one.. I have lost alot of time and money trying to fix this, late payments etc
    thanks for any input
    aimee
    oh my isp is cox, and i have a router
    reading this I am able to identify that you are contaminated with malware, it may has also affected your recovery
    try recovery to factory fresh and then install Microsoft Security Essentials so that you have 1/2 a chance next time
    Corsair Carbide 300R with window
    Corsair TX850V2 70A@12V
    Asus M5A99FX PRO R2.0 CFX/SLI
    AMD Phenom II 965 C3 Black Edition @ 4.0 GHz
    G.SKILL RipjawsX DDR3-2133 8 GB
    EVGA GTX 6600 Ti FTW Signature 2(Gk104 Kepler)
    Asus PA238QR IPS LED HDMI DP 1080p
    ST2000DM001 & Windows 8.1 Enterprise x64
    Microsoft Wireless Desktop 2000
    Wacom Bamboo CHT470M
    Place your rig specifics into your signature like I have, makes it 100x easier to understand!
    Hardcore Games Legendary is the Only Way to Play!

  • Applying Software Installation Policy Is Taking Long Time During Boot Process

    1 of my servers is having slow boot up issue. I have enabled user environment debugging and the gpsvc.log file has been generated. I have also used the Windows Performance Analyzer to capture logs and results came back that the GP Client is taking a long
    time in the boot process. So, I reckoned the slow boot is due to GPO but I am not sure where to look from this log file.
    I have only paste part of the gpsvc.log file here due to limitation in the number of characters allowed to be posted. Would appreciate some good advise on this issue that I am facing.
    GPSVC(34c.408) 04:03:30:109 ReadExtStatus: Reading Previous Status for extension {FB2CA36D-0B40-4307-821B-A13B252DE56C}
    GPSVC(34c.408) 04:03:30:109 ReadExtStatus: Reading Previous Status for extension {fbf687e6-f063-4d9f-9f4f-fd9a26acdd5f}
    GPSVC(34c.408) 04:03:30:109 GetMachineToken:  Looping for authentication again.
    GPSVC(34c.408) 04:03:30:109 ProcessGPOs: Logging Data for Target <SW01E772>.
    GPSVC(34c.408) 04:03:30:109 GPLockPolicySection: Sid = (null), dwTimeout= 30000, dwFlags= 0
    GPSVC(34c.408) 04:03:30:109 LockPolicySectioncalled for user <Machine>
    GPSVC(34c.408) 04:03:30:109 Sync Lock Called
    GPSVC(34c.408) 04:03:30:109 Writer Lock got immediately.
    GPSVC(34c.408) 04:03:30:109 Lock taken successfully
    GPSVC(34c.408) 04:03:30:109 UnLockPolicySectioncalled for user <Machine>
    GPSVC(34c.408) 04:03:30:109 UnLockedsuccessfully
    GPSVC(34c.408) 04:03:30:109 ProcessGPOs: OpenThreadTokenfailed with error 1008, assuming thread is not impersonating
    GPSVC(34c.408) 04:03:30:109 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:30:109 ProcessGPOs: Processing extension Registry
    GPSVC(34c.408) 04:03:30:125 ReadStatus: Read Extension's Previous status successfully.
    GPSVC(34c.408) 04:03:30:125 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:30:125 CheckGPOs: No GPO changes and nosecurity group membership change and extension Registry has NoGPOChangesset.
    GPSVC(34c.408) 04:03:30:125 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:30:125 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:30:125 ProcessGPOs: Processing extension Wireless Group Policy
    GPSVC(34c.408) 04:03:30:125CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:30:125 CheckGPOs: No GPO changes but couldn't read extension Wireless Group Policy's status or policy time.
    GPSVC(34c.408) 04:03:30:125 ProcessGPOs: Extension Wireless Group Policy skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:30:125 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:30:125 ProcessGPOs: Processing extension Group Policy Environment
    GPSVC(34c.408) 04:03:30:125 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:30:125 CheckGPOs: No GPO changes but couldn't read extension Group Policy Environment's status or policy time.
    GPSVC(34c.408) 04:03:30:125 ProcessGPOs: Extension Group Policy Environment skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:30:125 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:30:125 ProcessGPOs: Processing extension Group Policy Local Users and Groups
    GPSVC(34c.408) 04:03:30:125 ReadStatus: Read Extension's Previous status successfully.
    GPSVC(34c.408) 04:03:30:125 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:30:156 GPLockPolicySection: Sid = (null), dwTimeout= 30000, dwFlags= 0
    GPSVC(34c.408) 04:03:30:156 LockPolicySectioncalled for user <Machine>
    GPSVC(34c.408) 04:03:30:156 Sync Lock Called
    GPSVC(34c.408)04:03:30:156 Writer Lock got immediately.
    GPSVC(34c.408) 04:03:30:156 Lock taken successfully
    GPSVC(34c.408) 04:03:30:156 ProcessGPOList: Entering for extension Group Policy Local Users and Groups
    GPSVC(34c.408) 04:03:30:156 MachinePolicyCallback: Settingstatus UI to Applying Group Policy Local Users and Groups policy...
    GPSVC(34c.408) 04:03:30:156 ProcessGPOList: No changes. CSEwill not be passed in the IwbemServicesintfptr
    GPSVC(34c.364)04:03:30:156 Message Status = <Applying Group Policy Local Users and Groups policy...>
    GPSVC(34c.364) 04:03:30:156 Setting GPsessionstate = 1
    GPSVC(34c.408) 04:03:31:796 ProcessGroupPolicyCompletedExInternal: Entering. Extension = {17D89FEC-5C44-4972-B12D-241CAEF74509}, dwStatus= 0x0
    GPSVC(34c.408) 04:03:31:953 GetWbemServices: CoCreateInstancesucceeded
    GPSVC(34c.408) 04:03:36:031 ConnectToNameSpace: ConnectServerreturned 0x0
    GPSVC(34c.408) 04:03:36:140 ProcessGroupPolicyCompletedExInternal: Extension {17D89FEC-5C44-4972-B12D-241CAEF74509} was able to log data. Error = 0x0, dwRet= 0. Clearing the dirty bit
    GPSVC(34c.408) 04:03:36:500 ProcessGroupPolicyCompletedExInternal: Finished processing extension <Group Policy Local Users and Groups> at 44203 ticks (ms)
    GPSVC(34c.408) 04:03:36:500 ProcessGroupPolicyCompletedExInternal: Leaving. Extension = {17D89FEC-5C44-4972-B12D-241CAEF74509}, Return status dwRet= 0x0
    GPSVC(34c.408) 04:03:36:500 ProcessGPOList: Extension Group Policy Local Users and Groups returned 0x0.
    GPSVC(34c.408) 04:03:36:500 ProcessGPOList: Extension Group Policy Local Users and Groups status was not updated because there was no changes and no transition or rsopwasn't enabled
    GPSVC(34c.408) 04:03:36:500 UnLockPolicySectioncalled for user <Machine>
    GPSVC(34c.408) 04:03:36:500 UnLockedsuccessfully
    GPSVC(34c.408) 04:03:36:531 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:531 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:531 ProcessGPOs: Processing extension Group Policy Device Settings
    GPSVC(34c.408) 04:03:36:531 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:531 CheckGPOs: No GPO changes but couldn't read extension Group Policy Device Settings'sstatus or policy time.
    GPSVC(34c.408) 04:03:36:531 ProcessGPOs: Extension Group Policy Device Settings skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:36:531 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:531 ProcessGPOs: Processing extension Folder Redirection
    GPSVC(34c.408) 04:03:36:531 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:531 CheckGPOs: No GPO changes but couldn't read extension Folder Redirection's status or policy time.
    GPSVC(34c.408) 04:03:36:531 ProcessGPOs: Extension Folder Redirection skipped with flags 0x7.
    GPSVC(34c.408) 04:03:36:531 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:531 ProcessGPOs: Processing extension Microsoft Disk Quota
    GPSVC(34c.408) 04:03:36:531 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:531 CheckGPOs: No GPO changes but couldn't read extension Microsoft Disk Quota's status or policy time.
    GPSVC(34c.408) 04:03:36:531 ProcessGPOs: Extension Microsoft Disk Quota skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:36:531 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:531 ProcessGPOs: Processing extension Group Policy Network Options
    GPSVC(34c.408) 04:03:36:531CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:546 CheckGPOs: No GPO changes but couldn't read extension Group Policy Network Options'sstatus or policy time.
    GPSVC(34c.408) 04:03:36:546 ProcessGPOs: Extension Group Policy Network Options skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:36:546 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:546 ProcessGPOs: Processing extension QoSPacket Scheduler
    GPSVC(34c.408) 04:03:36:546 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:546 CheckGPOs: No GPO changes but couldn't read extension QoSPacket Scheduler's status or policy time.
    GPSVC(34c.408) 04:03:36:546 ProcessGPOs: Extension QoSPacket Scheduler skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:36:546 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:546 ProcessGPOs: Processing extension Scripts
    GPSVC(34c.408) 04:03:36:546 ReadStatus: Read Extension's Previous status successfully.
    GPSVC(34c.408) 04:03:36:546 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:546 CheckGPOs: No GPO changes and no security group membership change and extension Scripts has NoGPOChangesset.
    GPSVC(34c.408) 04:03:36:546 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:546 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:546 ProcessGPOs: Processing extension Remote Desktop USB Redirection
    GPSVC(34c.408) 04:03:36:546 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:546 CheckGPOs: No GPO changes but couldn't read extension Remote Desktop USB Redirection's status or policy time.
    GPSVC(34c.408) 04:03:36:546 ProcessGPOs: Extension Remote Desktop USB Redirection skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:36:546 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:546 ProcessGPOs: Processing extension Internet Explorer Zonemapping
    GPSVC(34c.408) 04:03:36:562 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:562 CheckGPOs: No GPO changes but couldn't read extension Internet Explorer Zonemapping'sstatus or policy time.
    GPSVC(34c.408) 04:03:36:562 ProcessGPOs: Extension Internet Explorer Zonemappingskipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:36:562 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:562 ProcessGPOs: Processing extension Group Policy Drive Maps
    GPSVC(34c.408) 04:03:36:562 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:562 CheckGPOs: No GPO changes but couldn't read extension Group Policy Drive Maps'sstatus or policy time.
    GPSVC(34c.408) 04:03:36:562 ProcessGPOs: Extension Group Policy Drive Maps skipped withflags 0x7.
    GPSVC(34c.408) 04:03:36:562 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:562 ProcessGPOs: Processingextension Group Policy Folders
    GPSVC(34c.408) 04:03:36:562 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:562 CheckGPOs: No GPO changes but couldn't read extension Group Policy Folders'sstatus or policy time.
    GPSVC(34c.408) 04:03:36:562 ProcessGPOs: Extension Group Policy Folders skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:36:562 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:562 ProcessGPOs: Processing extension Group Policy Network Shares
    GPSVC(34c.408) 04:03:36:562 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:562 CheckGPOs: No GPO changes but couldn't read extension Group Policy Network Shares's status or policy time.
    GPSVC(34c.408) 04:03:36:562 ProcessGPOs: Extension Group Policy Network Shares skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:36:562 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:562 ProcessGPOs: Processing extension Group Policy Files
    GPSVC(34c.408) 04:03:36:562 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:562 CheckGPOs: No GPO changes but couldn't readextension Group Policy Files's status or policy time.
    GPSVC(34c.408) 04:03:36:562 ProcessGPOs: Extension Group Policy Files skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:36:562 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:562 ProcessGPOs: Processing extension Group Policy Data Sources
    GPSVC(34c.408) 04:03:36:562 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:578 CheckGPOs:No GPO changes but couldn't read extension Group Policy Data Sources's status or policy time.
    GPSVC(34c.408) 04:03:36:578 ProcessGPOs: Extension Group Policy Data Sources skipped because bothdeleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:36:578 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:578 ProcessGPOs: Processing extension Group Policy Ini Files
    GPSVC(34c.408) 04:03:36:578 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:578 CheckGPOs: No GPO changes but couldn't read extension Group Policy Ini Files's status or policy time.
    GPSVC(34c.408) 04:03:36:578 ProcessGPOs: Extension GroupPolicy Ini Files skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:36:578 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:578 ProcessGPOs: Processing extension Internet Explorer User Accelerators
    GPSVC(34c.408) 04:03:36:578 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:578 CheckGPOs: No GPO changes but couldn't readextension Internet Explorer User Accelerators's status or policy time.
    GPSVC(34c.408) 04:03:36:578 ProcessGPOs: Extension Internet Explorer User Accelerators skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:36:578 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:578 ProcessGPOs: Processing extension Security
    GPSVC(34c.408) 04:03:36:578ReadStatus: Read Extension's Previous status successfully.
    GPSVC(34c.408) 04:03:36:578 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:578 CheckGPOs: No GPO changes and no security group membership change and extension Security has NoGPOChanges set.
    GPSVC(34c.408) 04:03:36:578 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:578 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:578 ProcessGPOs: Processing extension Deployed Printer Connections
    GPSVC(34c.408) 04:03:36:578 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:578 CheckGPOs: No GPO changes but couldn't read extension Deployed Printer Connections's status or policy time.
    GPSVC(34c.408) 04:03:36:578 ProcessGPOs: Extension Deployed Printer Connections skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:36:578 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:593 ProcessGPOs: Processing extension Group Policy Services
    GPSVC(34c.408) 04:03:36:593 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:593 CheckGPOs: No GPO changes but couldn't read extension Group Policy Services's status or policy time.
    GPSVC(34c.408) 04:03:36:593 ProcessGPOs: Extension Group Policy Services skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:36:593 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:593 ProcessGPOs: Processing extension Internet Explorer Branding
    GPSVC(34c.408) 04:03:36:593 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:593 CheckGPOs: No GPO changes but couldn't read extension Internet Explorer Branding's status or policy time.
    GPSVC(34c.408) 04:03:36:593 ProcessGPOs: Extension Internet Explorer Branding skipped with flags 0x7.
    GPSVC(34c.408) 04:03:36:593 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:593 ProcessGPOs: Processing extension Group PolicyFolder Options
    GPSVC(34c.408) 04:03:36:593 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:593 CheckGPOs: No GPO changes but couldn't read extension Group Policy Folder Options's status or policy time.
    GPSVC(34c.408) 04:03:36:593 ProcessGPOs: Extension Group Policy Folder Options skipped because bothdeleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:36:593 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:593 ProcessGPOs: Processing extension Group Policy Scheduled Tasks
    GPSVC(34c.408) 04:03:36:593 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:593 CheckGPOs: No GPO changes but couldn't read extension Group Policy Scheduled Tasks's status or policy time.
    GPSVC(34c.408) 04:03:36:593 ProcessGPOs: Extension Group Policy Scheduled Tasks skipped because both deletedand changed GPO lists are empty.
    GPSVC(34c.408) 04:03:36:593 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:593 ProcessGPOs: Processing extension Group Policy Registry
    GPSVC(34c.408) 04:03:36:593 ReadStatus: Read Extension's Previous status successfully.
    GPSVC(34c.408) 04:03:36:593 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:625 GPLockPolicySection: Sid = (null), dwTimeout = 30000, dwFlags = 0
    GPSVC(34c.408)04:03:36:625 LockPolicySection called for user <Machine>
    GPSVC(34c.408) 04:03:36:625 Sync Lock Called
    GPSVC(34c.408) 04:03:36:625 Writer Lock got immediately.
    GPSVC(34c.408) 04:03:36:625 Locktaken successfully
    GPSVC(34c.408) 04:03:36:625 ProcessGPOList: Entering for extension Group Policy Registry
    GPSVC(34c.408) 04:03:36:625 MachinePolicyCallback: Setting status UI to Applying Group Policy Registry policy...
    GPSVC(34c.408) 04:03:36:625 ProcessGPOList: No changes. CSE will not be passed in the IwbemServices intf ptr
    GPSVC(34c.364) 04:03:36:625 Setting GPsession state =1
    GPSVC(34c.408) 04:03:36:765 ProcessGroupPolicyCompletedExInternal: Entering. Extension = {B087BE9D-ED37-454F-AF9C-04291E351182}, dwStatus = 0x0
    GPSVC(34c.408) 04:03:36:796 GetWbemServices: CoCreateInstance succeeded
    GPSVC(34c.408) 04:03:36:812 ConnectToNameSpace: ConnectServer returned 0x0
    GPSVC(34c.408) 04:03:36:812 ProcessGroupPolicyCompletedExInternal: Extension {B087BE9D-ED37-454F-AF9C-04291E351182} was able to log data. Error = 0x0, dwRet = 0. Clearing the dirty bit
    GPSVC(34c.408) 04:03:36:843 ProcessGroupPolicyCompletedExInternal: Finished processing extension <Group Policy Registry> at 44546 ticks (ms)
    GPSVC(34c.408) 04:03:36:843 ProcessGroupPolicyCompletedExInternal: Leaving. Extension = {B087BE9D-ED37-454F-AF9C-04291E351182}, Return status dwRet = 0x0
    GPSVC(34c.408) 04:03:36:843 ProcessGPOList: Extension Group Policy Registry returned 0x0.
    GPSVC(34c.408) 04:03:36:843 ProcessGPOList: Extension Group Policy Registry status was not updated because there was no changes and no transition or rsop wasn'tenabled
    GPSVC(34c.408) 04:03:36:843 UnLockPolicySection called for user <Machine>
    GPSVC(34c.408) 04:03:36:843 UnLocked successfully
    GPSVC(34c.408) 04:03:36:875 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:875 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:875 ProcessGPOs: Processing extension 802.3 Group Policy
    GPSVC(34c.408) 04:03:36:875 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:875 CheckGPOs: No GPO changes but couldn't read extension 802.3 Group Policy's status or policy time.
    GPSVC(34c.408) 04:03:36:875 ProcessGPOs: Extension 802.3 Group Policy skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:36:875 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:875 ProcessGPOs: Processing extension Group Policy Printers
    GPSVC(34c.408) 04:03:36:875 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:875 CheckGPOs: No GPO changes but couldn't read extension Group Policy Printers's status or policy time.
    GPSVC(34c.408) 04:03:36:875 ProcessGPOs: Extension Group Policy Printers skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:36:875 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:875 ProcessGPOs: Processing extension Group Policy Shortcuts
    GPSVC(34c.408) 04:03:36:875 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:875 CheckGPOs: No GPO changes but couldn't read extension Group Policy Shortcuts's status or policy time.
    GPSVC(34c.408) 04:03:36:875 ProcessGPOs: Extension Group Policy Shortcuts skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:36:875 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:36:890 ProcessGPOs: Processing extension Software Installation
    GPSVC(34c.408) 04:03:36:890 ReadStatus: Read Extension's Previous status successfully.
    GPSVC(34c.408) 04:03:36:890 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:36:890 GPLockPolicySection: Sid = (null), dwTimeout = 30000, dwFlags = 0
    GPSVC(34c.408) 04:03:36:890 LockPolicySection called for user <Machine>
    GPSVC(34c.408) 04:03:36:890 Sync Lock Called
    GPSVC(34c.408) 04:03:36:890 Writer Lock got immediately.
    GPSVC(34c.408) 04:03:36:890 Lock taken successfully
    GPSVC(34c.408) 04:03:36:890 ProcessGPOList: Entering for extension Software Installation
    GPSVC(34c.408) 04:03:36:890 MachinePolicyCallback: Setting status UI to Applying Software Installation policy...
    GPSVC(34c.408) 04:03:36:890ProcessGPOList: No changes. CSE will not be passed in the IwbemServices intf ptr
    GPSVC(34c.364) 04:03:36:890 Message Status = <Applying Software Installation policy...>
    GPSVC(34c.364) 04:03:36:890 Setting GPsession state = 1
    GPSVC(34c.408) 04:03:37:312 ProcessGPOList: Extension Software Installation returned 0x0.
    GPSVC(34c.408) 04:03:37:312 ProcessGPOList: Extension Software Installation status was not updated because there was no changes and no transition or rsop wasn't enabled
    GPSVC(34c.408) 04:03:37:312UnLockPolicySection called for user <Machine>
    GPSVC(34c.408) 04:03:37:312 UnLocked successfully
    GPSVC(34c.408) 04:03:37:328 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:37:328 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:37:328 ProcessGPOs: Processing extension TCPIP
    GPSVC(34c.408) 04:03:37:328 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:37:328 CheckGPOs: No GPO changes but couldn't read extension TCPIP's status or policy time.
    GPSVC(34c.408) 04:03:37:328 ProcessGPOs: Extension TCPIP skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:37:328 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:37:328 ProcessGPOs: Processing extension Internet Explorer Machine Accelerators
    GPSVC(34c.408) 04:03:37:328 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:37:328 CheckGPOs: No GPO changes but couldn't read extension Internet Explorer Machine Accelerators's status or policy time.
    GPSVC(34c.408) 04:03:37:328 ProcessGPOs: Extension Internet Explorer Machine Accelerators skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:37:328 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:37:328 ProcessGPOs: Processing extension IP Security
    GPSVC(34c.408) 04:03:37:328 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:37:328 CheckGPOs: No GPO changes but couldn't read extension IP Security's status or policy time.
    GPSVC(34c.408) 04:03:37:328 ProcessGPOs: Extension IP Security skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:37:328 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:37:328 ProcessGPOs: Processing extension Group Policy Internet Settings
    GPSVC(34c.408) 04:03:37:343 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:37:343 CheckGPOs: No GPO changes but couldn't read extension Group Policy Internet Settings's status or policy time.
    GPSVC(34c.408) 04:03:37:343 ProcessGPOs: Extension Group Policy Internet Settings skipped with flags 0x7.
    GPSVC(34c.408) 04:03:37:343 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:37:343 ProcessGPOs: Processing extension Group Policy Start Menu Settings
    GPSVC(34c.408) 04:03:37:343 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:37:343 CheckGPOs: No GPO changes but couldn't read extension Group Policy Start Menu Settings's status or policy time.
    GPSVC(34c.408) 04:03:37:343 ProcessGPOs: Extension Group Policy Start Menu Settings skipped because both deleted and changed GPO listsare empty.
    GPSVC(34c.408) 04:03:37:343 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:37:343 ProcessGPOs: Processingextension Group Policy Regional Options
    GPSVC(34c.408) 04:03:37:343 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:37:343 CheckGPOs: No GPO changes but couldn't read extensionGroup Policy Regional Options's status or policy time.
    GPSVC(34c.408) 04:03:37:343 ProcessGPOs: Extension Group Policy RegionalOptions skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:37:343 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:37:343 ProcessGPOs: Processing extension Group Policy Power Options
    GPSVC(34c.408) 04:03:37:343 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:37:343 CheckGPOs: No GPO changes but couldn't read extension Group Policy Power Options's status or policy time.
    GPSVC(34c.408) 04:03:37:343 ProcessGPOs: Extension Group Policy Power Options skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:37:343 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:37:343 ProcessGPOs: Processing extension Audit Policy Configuration
    GPSVC(34c.408) 04:03:37:343 CompareGPOLists: The lists are the same.
    GPSVC(34c.408) 04:03:37:343 CheckGPOs: No GPO changes but couldn't read extension Audit Policy Configuration's status or policy time.
    GPSVC(34c.408) 04:03:37:343 ProcessGPOs: Extension Audit Policy Configuration skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:37:343 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:37:343 ProcessGPOs: Processing extension Group Policy Applications
    GPSVC(34c.408) 04:03:37:359 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:37:359 CheckGPOs: No GPO changes but couldn't read extension Group Policy Applications's status or policy time.
    GPSVC(34c.408) 04:03:37:359 ProcessGPOs: Extension Group Policy Applications skipped with flags 0x7.
    GPSVC(34c.408) 04:03:37:359 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:37:359 ProcessGPOs: Processing extension Enterprise QoS
    GPSVC(34c.408) 04:03:37:359 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:37:359 CheckGPOs: No GPO changes but couldn't read extension Enterprise QoS's status or policy time.
    GPSVC(34c.408) 04:03:37:359 ProcessGPOs: Extension Enterprise QoS skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:37:359 ProcessGPOs: -----------------------
    GPSVC(34c.408) 04:03:37:359 ProcessGPOs: Processing extensionCP
    GPSVC(34c.408) 04:03:37:359 CompareGPOLists:  The lists are the same.
    GPSVC(34c.408) 04:03:37:359 CheckGPOs: No GPO changes but couldn't read extension CP's status or policy time.
    GPSVC(34c.408) 04:03:37:359 ProcessGPOs: Extension CP skipped because both deleted and changed GPO lists are empty.
    GPSVC(34c.408) 04:03:37:359 gpGetFgPolicyRefreshInfo: Mode: 1, Reason: 7
    GPSVC(34c.408) 04:03:37:359 SetFgRefreshInfo: Previous Machine Fg policy Synchronous, Reason: SKU.
    GPSVC(34c.408) 04:03:37:359 SetFgRefreshInfo: Next Machine Fg policy Synchronous, Reason: SKU.
    GPSVC(34c.408) 04:03:37:359 ProcessGPOs: No WMI logging done in this policy cycle.
    GPSVC(34c.408) 04:03:37:359 ProcessGPOs: Boot/Logon Policy processing - checking if UBPM trigger events need to be fired
    GPSVC(34c.408) 04:03:37:375 CheckAndFireGPTriggerEvent: FiredPolicy present UBPM trigger event for Machine.
    GPSVC(34c.408) 04:03:37:375 Application complete with bConnectivityFailure = 0.
    GPSVC(34c.79c) 04:03:40:546 CGPNotify::RegisterForNotification: Entering with target Machine and event 0xc8c
    GPSVC(34c.79c) 04:03:40:546 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(34c.3a0) 04:03:40:546 Target = Machine
    GPSVC(34c.79c) 04:03:40:546 Client_RegisterForNotification: User =machine, changenumber = 0
    GPSVC(34c.79c) 04:03:40:546 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(3bc.ac8) 04:03:59:296 CGPNotify::RegisterForNotification: Entering withtarget Machine and event 0x1ac
    GPSVC(3bc.ac8) 04:03:59:296 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(34c.748) 04:03:59:296 Target = Machine
    GPSVC(3bc.ac8) 04:03:59:296 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(3bc.ac8) 04:03:59:296 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(34c.748) 04:03:59:343 Target = Machine
    GPSVC(34c.748) 04:03:59:343 Target = Machine,ChangeNumber 0
    GPSVC(34c.3ac) 04:03:59:515 Target = Machine
    GPSVC(34c.3ac) 04:03:59:531 Target = Machine, ChangeNumber 0
    GPSVC(34c.3ac) 04:03:59:531 Sid = (null), dwTimeout = 600000, dwFlags = 268435456
    GPSVC(34c.3ac) 04:03:59:531 LockPolicySection calledfor user <Machine>
    GPSVC(34c.3ac) 04:03:59:546 Async Lock called
    GPSVC(34c.3ac) 04:03:59:546 Reader Lock got immediately. m_cReadersInLock : 1
    GPSVC(34c.3ac) 04:03:59:546 Sid = (null)
    GPSVC(34c.3ac) 04:03:59:546 UnLockPolicySection called for user <Machine>
    GPSVC(34c.3ac) 04:03:59:546 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(34c.3ac) 04:03:59:546 Settinglock state as notLocked
    GPSVC(34c.3ac) 04:03:59:546 UnLocked successfully
    GPSVC(34c.bdc) 04:04:00:000 CGPNotify::RegisterForNotification: Entering with target Machine and event 0xd04
    GPSVC(34c.bdc) 04:04:00:000 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(34c.3ac) 04:04:00:000 Target =Machine
    GPSVC(34c.bdc) 04:04:00:000 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(34c.bdc) 04:04:00:000 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(34c.3ac) 04:04:00:000 Target = Machine, ChangeNumber 0
    GPSVC(34c.748) 04:04:01:140 Target = Machine
    GPSVC(34c.748) 04:04:01:140 Target = Machine, ChangeNumber 0
    GPSVC(154.41c) 04:05:25:509CGPNotify::RegisterForNotification: Entering with target Machine and event 0x458
    GPSVC(154.41c) 04:05:25:509 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(34c.3ac) 04:05:25:509 Target = Machine
    GPSVC(154.41c) 04:05:25:525 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(34c.3ac) 04:05:25:525 Target = Machine, ChangeNumber 0
    GPSVC(154.41c) 04:05:25:525 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(154.41c) 04:05:25:759 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x4e8
    GPSVC(154.41c) 04:05:25:759 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(34c.3ac) 04:05:25:759 Target = Machine
    GPSVC(154.41c) 04:05:25:775 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(154.41c) 04:05:25:775 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(34c.3ac) 04:05:25:775 Target = Machine, ChangeNumber 0
    GPSVC(34c.3ac) 04:05:59:217 Target = Machine
    GPSVC(34c.3ac)04:05:59:233 Target = Machine, ChangeNumber 0
    GPSVC(3bc.3cc) 04:05:59:389 CGPNotify::UnregisterNotification: Entering with event 0x1ac
    GPSVC(3bc.3cc) 04:05:59:389 CGPNotify::AbortAsyncRegistration: No asyn registration is pending
    GPSVC(3bc.3cc) 04:05:59:405 CGPNotify::UnregisterNotification: Canceling pending calls
    GPSVC(3bc.3cc) 04:05:59:420 Client_CompleteNotificationCall: failed with 0x4c7
    GPSVC(3bc.3cc) 04:05:59:420 CGPNotify::UnregisterNotification: Cancelled pending calls
    GPSVC(3bc.3cc) 04:05:59:420 CGPNotify::UnregisterNotification: Exiting with dwStatus = 0x0
    GPSVC(34c.360) 04:06:00:827 Target = Machine
    GPSVC(34c.360) 04:06:00:827 Target = Machine, ChangeNumber 0
    GPSVC(34c.360) 04:06:01:155 Target = Machine
    GPSVC(34c.360) 04:06:01:171 Target = Machine, ChangeNumber 0
    GPSVC(34c.fe8) 04:06:02:124 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x218
    GPSVC(34c.fe8) 04:06:02:140 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(34c.360) 04:06:02:155 Target = Machine
    GPSVC(34c.fe8) 04:06:02:155 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(34c.fe8) 04:06:02:171 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(34c.da4) 05:06:16:856 Target = Machine
    GPSVC(34c.da4) 05:06:16:856 Target = Machine, ChangeNumber 0
    GPSVC(34c.da4) 05:06:16:856 Target = S-1-5-20
    GPSVC(34c.da4) 05:06:16:856 Could not find user by sid, finding user by session id
    GPSVC(34c.da4) 05:06:16:856 Caller requesting for user notification/lock is from session 0
    GPSVC(34c.da4) 05:06:16:856 Target = S-1-5-20, ChangeNumber 0
    GPSVC(34c.da4) 05:06:16:856 Could not find user by sid, finding user by session id
    GPSVC(34c.de8) 05:06:16:856 Target = S-1-5-20
    GPSVC(34c.de8) 05:06:16:856 Could not find user by sid, finding user by session id
    GPSVC(34c.de8) 05:06:16:872 Callerrequesting for user notification/lock is from session 0
    GPSVC(34c.de8) 05:06:16:872 Target = S-1-5-20, ChangeNumber 0
    GPSVC(34c.de8) 05:06:16:872 Could not find user by sid, finding user by session id
    GPSVC(34c.de8) 05:06:16:872 Caller requesting for usernotification/lock is from session 0
    GPSVC(34c.da4) 05:06:16:872Target = S-1-5-20
    GPSVC(34c.da4) 05:06:16:872 Could not find user by sid, finding user by session id
    GPSVC(34c.da4) 05:06:16:872 Caller requesting for user notification/lock is from session 0
    GPSVC(34c.da4) 05:06:16:872 Target = S-1-5-20, ChangeNumber 0
    GPSVC(34c.da4) 05:06:16:872 Could not find user by sid, finding user by session id
    GPSVC(34c.da4) 05:06:16:872 Caller requesting for user notification/lock is from session 0
    GPSVC(34c.de8) 05:06:16:887 Target = S-1-5-20
    GPSVC(34c.de8) 05:06:16:887 Could notfind user by sid, finding user by session id
    GPSVC(34c.de8) 05:06:16:887 Caller requesting for user notification/lock is from session 0
    GPSVC(34c.de8) 05:06:16:887 Target = S-1-5-20, ChangeNumber 0
    GPSVC(34c.de8) 05:06:16:887 Could not find user by sid, finding user by session id
    GPSVC(34c.de8) 05:06:16:887 Caller requesting for user notification/lock is from session 0
    GPSVC(34c.da4) 05:06:26:981 Setting GPsession state = 1
    GPSVC(34c.de8) 05:06:32:341 SID = S-1-5-21-206128196-3657029889-627342018-7757
    GPSVC(34c.de8) 05:06:32:356 bMachine = 0
    GPSVC(34c.de8) 05:06:32:356 Setting GPsession state = 1
    GPSVC(34c.de8) 05:06:32:356 Message Status = <Applying user settings...>
    GPSVC(34c.778) 05:06:32:356 StartTime For network wait: 32140ms
    GPSVC(34c.778) 05:06:32:356 Current Time: 3819953ms
    GPSVC(34c.de8) 05:06:32:356 Setting GPsession state = 1
    GPSVC(34c.778) 05:06:32:356 MaxTimeToWaitForNetwork: 5212ms
    GPSVC(34c.778) 05:06:32:356 TimeRemainingToWaitForNetwork: 0ms
    GPSVC(34c.778) 05:06:32:356 UserPolicy: Waiting for machine policy wait for network event with timeout 0 ms
    GPSVC(34c.778) 05:06:32:388 GPLockPolicySection: Sid = (null), dwTimeout = 30000, dwFlags = 65538
    GPSVC(34c.778) 05:06:32:388 LockPolicySection called for user <Machine>

    Hi,
    Any update?
    Just checking in to see if the suggestions were helpful. Please let us know if you would like further assistance.
    Best Regards,
    Andy Qi
    TechNet Subscriber Support
    If you are
    TechNet Subscription user and have any feedback on our support quality, please send your feedback
    here.
    Andy Qi
    TechNet Community Support

  • Group Policy processing failure on 2008 when MIX Domain 2003 with DC 2008

    Dear I try to add additional Windows 2008 Domain to My Domain controller 2003  and I ma Receiving Group policy error in DC 2008  With Event ID 1055
    The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following: 
    a) Name Resolution failure on the current domain controller. 
    b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).
    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
      <Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" /> 
      <EventID>1055</EventID> 
      <Version>0</Version> 
      <Level>2</Level> 
      <Task>0</Task> 
      <Opcode>1</Opcode> 
      <Keywords>0x8000000000000000</Keywords> 
      <TimeCreated SystemTime="2014-03-06T14:36:44.411955300Z" /> 
      <EventRecordID>3859</EventRecordID> 
      <Correlation ActivityID="{28DAD258-26D0-4C1E-A4B7-F37DEE04C8F1}" /> 
      <Execution ProcessID="952" ThreadID="3276" /> 
      <Channel>System</Channel> 
      <Computer>PRIMARYDC.Qtit.com</Computer> 
      <Security UserID="S-1-5-18" /> 
      </System>
    - <EventData>
      <Data Name="SupportInfo1">1</Data> 
      <Data Name="SupportInfo2">1632</Data> 
      <Data Name="ProcessingMode">0</Data> 
      <Data Name="ProcessingTimeInMilliseconds">1578</Data> 
      <Data Name="ErrorCode">5</Data> 
      <Data Name="ErrorDescription">Access is denied.</Data> 
      </EventData>
      </Event>
    I install See KB939820 for a hotfix applicable to Microsoft DC 2003 regrading to he KRBTGT account 
    Refer Url : http://support.microsoft.com/kb/939820 
    I run dcdiag /v on  and repadmin /showrepl at DC 2008
    the dcdiag /v result
    Directory Server Diagnosis
    Performing initial setup:
       Trying to find home server...
       * Verifying that the local machine PRIMARYDC, is a Directory Server. 
       Home Server = PRIMARYDC
       * Connecting to directory service on server PRIMARYDC.
       * Identified AD Forest. 
       Collecting AD specific global data 
       * Collecting site info.
       Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=Qtit,DC=com,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
       The previous call succeeded 
       Iterating through the sites 
       Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com
       Getting ISTG and options for the site
       * Identifying all servers.
       Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=Qtit,DC=com,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
       The previous call succeeded....
       The previous call succeeded
       Iterating through the list of servers 
       Getting information for the server CN=NTDS Settings,CN=SECONDAD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com 
       objectGuid obtained
       InvocationID obtained
       dnsHostname obtained
       site info obtained
       All the info for the server collected
       Getting information for the server CN=NTDS Settings,CN=PRIMARYDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com 
       objectGuid obtained
       InvocationID obtained
       dnsHostname obtained
       site info obtained
       All the info for the server collected
       * Identifying all NC cross-refs.
       * Found 2 DC(s). Testing 1 of them.
       Done gathering initial info.
    Doing initial required tests
       Testing server: Default-First-Site-Name\PRIMARYDC
          Starting test: Connectivity
             * Active Directory LDAP Services Check
             Determining IP4 connectivity 
             * Active Directory RPC Services Check
             ......................... PRIMARYDC passed test Connectivity
    Doing primary tests
       Testing server: Default-First-Site-Name\PRIMARYDC
          Starting test: Advertising
             The DC PRIMARYDC is advertising itself as a DC and having a DS.
             The DC PRIMARYDC is advertising as an LDAP server
             The DC PRIMARYDC is advertising as having a writeable directory
             The DC PRIMARYDC is advertising as a Key Distribution Center
             The DC PRIMARYDC is advertising as a time server
             The DS PRIMARYDC is advertising as a GC.
             ......................... PRIMARYDC passed test Advertising
          Test omitted by user request: CheckSecurityError
          Test omitted by user request: CutoffServers
          Starting test: FrsEvent
             * The File Replication Service Event log test 
             There are warning or error events within the last 24 hours after the
             SYSVOL has been shared.  Failing SYSVOL replication problems may cause
             Group Policy problems. 
             A warning event occurred.  EventID: 0x800034C8
                Time Generated: 03/06/2014   10:18:56
                Event String:
                The File Replication Service has detected an enabled disk write cache on the drive containing the directory c:\windows\ntfrs\jet on the computer PRIMARYDC. The File Replication Service might not recover when power to
    the drive is interrupted and critical updates are lost.
             A warning event occurred.  EventID: 0x800034C8
                Time Generated: 03/06/2014   10:53:21
                Event String:
                The File Replication Service has detected an enabled disk write cache on the drive containing the directory c:\windows\ntfrs\jet on the computer PRIMARYDC. The File Replication Service might not recover when power to
    the drive is interrupted and critical updates are lost.
             ......................... PRIMARYDC passed test FrsEvent
          Starting test: DFSREvent
             The DFS Replication Event Log. 
             Skip the test because the server is running FRS.
             ......................... PRIMARYDC passed test DFSREvent
          Starting test: SysVolCheck
             * The File Replication Service SYSVOL ready test 
             File Replication Service's SYSVOL is ready 
             ......................... PRIMARYDC passed test SysVolCheck
          Starting test: KccEvent
             * The KCC Event log test
             Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
             ......................... PRIMARYDC passed test KccEvent
          Starting test: KnowsOfRoleHolders
             Role Schema Owner = CN=NTDS Settings,CN=SECONDAD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com
             Role Domain Owner = CN=NTDS Settings,CN=SECONDAD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com
             Role PDC Owner = CN=NTDS Settings,CN=SECONDAD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com
             Role Rid Owner = CN=NTDS Settings,CN=SECONDAD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com
             Role Infrastructure Update Owner = CN=NTDS Settings,CN=SECONDAD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com
             ......................... PRIMARYDC passed test KnowsOfRoleHolders
          Starting test: MachineAccount
             Checking machine account for DC PRIMARYDC on DC PRIMARYDC.
             * SPN found :LDAP/PRIMARYDC.Qtit.com/Qtit.com
             * SPN found :LDAP/PRIMARYDC.Qtit.com
             * SPN found :LDAP/PRIMARYDC
             * SPN found :LDAP/PRIMARYDC.Qtit.com/QTIT
             * SPN found :LDAP/e3d8c76c-1b59-4de6-9f7f-c438df9a2863._msdcs.Qtit.com
             * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/e3d8c76c-1b59-4de6-9f7f-c438df9a2863/Qtit.com
             * SPN found :HOST/PRIMARYDC.Qtit.com/Qtit.com
             * SPN found :HOST/PRIMARYDC.Qtit.com
             * SPN found :HOST/PRIMARYDC
             * SPN found :HOST/PRIMARYDC.Qtit.com/QTIT
             * SPN found :GC/PRIMARYDC.Qtit.com/Qtit.com
             ......................... PRIMARYDC passed test MachineAccount
          Starting test: NCSecDesc
             * Security Permissions check for all NC's on DC PRIMARYDC.
             The forest is not ready for RODC. Will skip checking ERODC ACEs.
             * Security Permissions Check for
               DC=ForestDnsZones,DC=Qtit,DC=com
                (NDNC,Version 3)
             Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have 
                Replicating Directory Changes In Filtered Set
             access rights for the naming context:
             DC=ForestDnsZones,DC=Qtit,DC=com
             * Security Permissions Check for
               DC=DomainDnsZones,DC=Qtit,DC=com
                (NDNC,Version 3)
             Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have 
                Replicating Directory Changes In Filtered Set
             access rights for the naming context:
             DC=DomainDnsZones,DC=Qtit,DC=com
             * Security Permissions Check for
               CN=Schema,CN=Configuration,DC=Qtit,DC=com
                (Schema,Version 3)
             * Security Permissions Check for
               CN=Configuration,DC=Qtit,DC=com
                (Configuration,Version 3)
             * Security Permissions Check for
               DC=Qtit,DC=com
                (Domain,Version 3)
             ......................... PRIMARYDC failed test NCSecDesc
          Starting test: NetLogons
             * Network Logons Privileges Check
             Verified share \\PRIMARYDC\netlogon
             Verified share \\PRIMARYDC\sysvol
             ......................... PRIMARYDC passed test NetLogons
          Starting test: ObjectsReplicated
             PRIMARYDC is in domain DC=Qtit,DC=com
             Checking for CN=PRIMARYDC,OU=Domain Controllers,DC=Qtit,DC=com in domain DC=Qtit,DC=com on 1 servers
                Object is up-to-date on all servers.
             Checking for CN=NTDS Settings,CN=PRIMARYDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com in domain CN=Configuration,DC=Qtit,DC=com on 1 servers
                Object is up-to-date on all servers.
             ......................... PRIMARYDC passed test ObjectsReplicated
          Test omitted by user request: OutboundSecureChannels
          Starting test: Replications
             * Replications Check
             * Replication Latency Check
                DC=ForestDnsZones,DC=Qtit,DC=com
                   Latency information for 18 entries in the vector were ignored.
                      18 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  
                DC=DomainDnsZones,DC=Qtit,DC=com
                   Latency information for 18 entries in the vector were ignored.
                      18 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  
                CN=Schema,CN=Configuration,DC=Qtit,DC=com
                   Latency information for 20 entries in the vector were ignored.
                      20 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  
                CN=Configuration,DC=Qtit,DC=com
                   Latency information for 20 entries in the vector were ignored.
                      20 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  
                DC=Qtit,DC=com
                   Latency information for 20 entries in the vector were ignored.
                      20 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  
             * Replication Site Latency Check 
             ......................... PRIMARYDC passed test Replications
          Starting test: RidManager
             * Available RID Pool for the Domain is 14607 to 1073741823
             * SecondAD.Qtit.com is the RID Master
             * DsBind with RID Master was successful
             * rIDAllocationPool is 14107 to 14606
             * rIDPreviousAllocationPool is 14107 to 14606
             * rIDNextRID: 14124
             ......................... PRIMARYDC passed test RidManager
          Starting test: Services
             * Checking Service: EventSystem
             * Checking Service: RpcSs
             * Checking Service: NTDS
             * Checking Service: DnsCache
             * Checking Service: NtFrs
             * Checking Service: IsmServ
             * Checking Service: kdc
             * Checking Service: SamSs
             * Checking Service: LanmanServer
             * Checking Service: LanmanWorkstation
             * Checking Service: w32time
             * Checking Service: NETLOGON
             ......................... PRIMARYDC passed test Services
          Starting test: SystemLog
             * The System Event log test
             A warning event occurred.  EventID: 0x0000A001
                Time Generated: 03/06/2014   16:04:05
                Event String:
                The Security System could not establish a secured connection with the server ldap/PRIMARYDC.Qtit.com/[email protected]. No authentication protocol was available.
             An error event occurred.  EventID: 0x0000041F
                Time Generated: 03/06/2014   16:06:35
                Event String:
                The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following: 
                a) Name Resolution failure on the current domain controller. 
                b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).
             An error event occurred.  EventID: 0x0000041F
                Time Generated: 03/06/2014   16:11:36
                Event String:
                The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following: 
                a) Name Resolution failure on the current domain controller. 
                b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).
             An error event occurred.  EventID: 0x0000041F
                Time Generated: 03/06/2014   16:16:38
                Event String:
                The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following: 
                a) Name Resolution failure on the current domain controller. 
                b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).
             An error event occurred.  EventID: 0x0000041F
                Time Generated: 03/06/2014   16:21:39
                Event String:
                The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following: 
                a) Name Resolution failure on the current domain controller. 
                b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).
             An error event occurred.  EventID: 0x0000041F
                Time Generated: 03/06/2014   16:26:41
                Event String:
                The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following: 
                a) Name Resolution failure on the current domain controller. 
                b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).
             An error event occurred.  EventID: 0x00000457
                Time Generated: 03/06/2014   16:30:46
                Event String:
                Driver TOSHIBA e-STUDIO16/20/25 PCL 6 required for printer TOSHIBA e-STUDIO16/20/25 PCL 6 is unknown. Contact the administrator to install the driver before you log in again.
             An error event occurred.  EventID: 0x00000457
                Time Generated: 03/06/2014   16:30:48
                Event String:
                Driver Microsoft XPS Document Writer v4 required for printer Microsoft XPS Document Writer is unknown. Contact the administrator to install the driver before you log in again.
             An error event occurred.  EventID: 0x00000457
                Time Generated: 03/06/2014   16:30:49
                Event String:
                Driver Send to Microsoft OneNote 15 Driver required for printer Send To OneNote 2013 is unknown. Contact the administrator to install the driver before you log in again.
             An error event occurred.  EventID: 0x00000457
                Time Generated: 03/06/2014   16:31:14
                Event String:
                Driver Send to Microsoft OneNote 15 Driver required for printer Send To OneNote 2013 is unknown. Contact the administrator to install the driver before you log in again.
             An error event occurred.  EventID: 0x00000457
                Time Generated: 03/06/2014   16:31:16
                Event String:
                Driver Microsoft XPS Document Writer v4 required for printer Microsoft XPS Document Writer is unknown. Contact the administrator to install the driver before you log in again.
             An error event occurred.  EventID: 0x00000457
                Time Generated: 03/06/2014   16:31:16
                Event String:
                Driver WebEx Document Loader required for printer WebEx Document Loader is unknown. Contact the administrator to install the driver before you log in again.
             An error event occurred.  EventID: 0x0000041F
                Time Generated: 03/06/2014   16:31:42
                Event String:
                The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following: 
                a) Name Resolution failure on the current domain controller. 
                b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).
             ......................... PRIMARYDC failed test SystemLog
          Test omitted by user request: Topology
          Test omitted by user request: VerifyEnterpriseReferences
          Starting test: VerifyReferences
             The system object reference (serverReference)
             CN=PRIMARYDC,OU=Domain Controllers,DC=Qtit,DC=com and backlink on
             CN=PRIMARYDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com
             are correct. 
             The system object reference (serverReferenceBL)
             CN=PRIMARYDC,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=Qtit,DC=com
             and backlink on
             CN=NTDS Settings,CN=PRIMARYDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=Qtit,DC=com
             are correct. 
             The system object reference (frsComputerReferenceBL)
             CN=PRIMARYDC,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=Qtit,DC=com
             and backlink on CN=PRIMARYDC,OU=Domain Controllers,DC=Qtit,DC=com are
             correct. 
             ......................... PRIMARYDC passed test VerifyReferences
          Test omitted by user request: VerifyReplicas
          Test omitted by user request: DNS
          Test omitted by user request: DNS
       Running partition tests on : ForestDnsZones
          Starting test: CheckSDRefDom
             ......................... ForestDnsZones passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... ForestDnsZones passed test
             CrossRefValidation
       Running partition tests on : DomainDnsZones
          Starting test: CheckSDRefDom
             ......................... DomainDnsZones passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... DomainDnsZones passed test
             CrossRefValidation
       Running partition tests on : Schema
          Starting test: CheckSDRefDom
             ......................... Schema passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... Schema passed test CrossRefValidation
       Running partition tests on : Configuration
          Starting test: CheckSDRefDom
             ......................... Configuration passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... Configuration passed test CrossRefValidation
       Running partition tests on : Qtit
          Starting test: CheckSDRefDom
             ......................... Qtit passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... Qtit passed test CrossRefValidation
       Running enterprise tests on : Qtit.com
          Test omitted by user request: DNS
          Test omitted by user request: DNS
          Starting test: LocatorCheck
             GC Name: \\PRIMARYDC.Qtit.com
             Locator Flags: 0xe00031fc
             PDC Name: \\SecondAD.Qtit.com
             Locator Flags: 0xe00001bd
             Time Server Name: \\PRIMARYDC.Qtit.com
             Locator Flags: 0xe00031fc
             Preferred Time Server Name: \\PRIMARYDC.Qtit.com
             Locator Flags: 0xe00031fc
             KDC Name: \\PRIMARYDC.Qtit.com
             Locator Flags: 0xe00031fc
             ......................... Qtit.com passed test LocatorCheck
          Starting test: Intersite
             Skipping site Default-First-Site-Name, this site is outside the scope
             provided by the command line arguments provided. 
             ......................... Qtit.com passed test Intersite
    repadmin /showrepl Result
    ******************************8
    ==== INBOUND NEIGHBORS ===================================
    DC=Qtit,DC=com
        Default-First-Site-Name\SECONDAD via RPC
            DSA object GUID: c5ef6e17-77f0-43f6-8d39-5497c563f
            Last attempt @ 2014-03-06 16:41:04 was successful.
    CN=Configuration,DC=Qtit,DC=com
        Default-First-Site-Name\SECONDAD via RPC
            DSA object GUID: c5ef6e17-77f0-43f6-8d39-5497c563f
            Last attempt @ 2014-03-06 16:41:39 was successful.
    CN=Schema,CN=Configuration,DC=Qtit,DC=com
        Default-First-Site-Name\SECONDAD via RPC
            DSA object GUID: c5ef6e17-77f0-43f6-8d39-5497c563f
            Last attempt @ 2014-03-06 15:53:01 was successful.
    DC=DomainDnsZones,DC=Qtit,DC=com
        Default-First-Site-Name\SECONDAD via RPC
            DSA object GUID: c5ef6e17-77f0-43f6-8d39-5497c563f
            Last attempt @ 2014-03-06 16:27:31 was successful.
    DC=ForestDnsZones,DC=Qtit,DC=com
        Default-First-Site-Name\SECONDAD via RPC
            DSA object GUID: c5ef6e17-77f0-43f6-8d39-5497c563f
            Last attempt @ 2014-03-06 15:53:01 was successful.
    I try to down the DC 2003 and access \\Qtit.com it success open the syslog on DC 2008
    Any help or advice 

    Hi,
    Were there other error codes logged in Event Viewer?
    Regarding Event ID 1055, the following article can be referred to for troubleshooting.
    Event ID 1055 — Group Policy Preprocessing (Security)
    http://technet.microsoft.com/en-us/library/cc727272(v=ws.10).aspx
    Based on the report you posted, this issue may be related to FRS replication service. As a result, we can use ntfrsutl tool to check whether the replication service is healthy.
    Regarding this point, the following articles can be referred to for more information.
    Troubleshooting File Replication Service
    http://technet.microsoft.com/en-us/library/bb727056.aspx
    Ntfrsutl
    http://technet.microsoft.com/en-us/library/hh875636.aspx
    In addition, we can also try doing a non-authoritative Sysvol restore on Windows Server 2008 DC to see whether the issue persists.
    Using the BurFlags registry key to reinitialize File Replication Service replica sets
    http://support.microsoft.com/kb/290762/en-us
    Hope it helps.
    Best regards,
    Frank Shen

  • Deployment of software through Group policy does not work

    Hi all,
    I am trying to deploy a program through Group policy, specifically winrar, any client computer is able to install the program. Please find below the events from the workstation:
    Log Name:      Application
    Source:        Microsoft-Windows-WMI
    Date:          4/27/2014 10:06:01 PM
    Event ID:      10
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      IRCLIENT0001.corp.healthcareinnovation.com
    Description:
    Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because
    of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
    Log Name:      System
    Source:        Microsoft-Windows-GroupPolicy
    Date:          4/27/2014 10:04:49 PM
    Event ID:      1085
    Task Category: None
    Level:         Warning
    Keywords:      
    User:          SYSTEM
    Computer:      IRCLIENT0001.corp.healthcareinnovation.com
    Description:
    Windows failed to apply the Software Installation settings. Software Installation settings might have its own log file. Please click on the "More information" link.
    Log Name:      System
    Source:        Application Management Group Policy
    Date:          4/27/2014 10:04:49 PM
    Event ID:      108
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          SYSTEM
    Computer:      IRCLIENT0001.corp.healthcareinnovation.com
    Description:
    Failed to apply changes to software installation settings.  Software changes could not be applied.  A previous log entry with details should exist.  The error was : %%1612
    Log Name:      System
    Source:        Application Management Group Policy
    Date:          4/27/2014 10:04:48 PM
    Event ID:      102
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          SYSTEM
    Computer:      IRCLIENT0001.corp.healthcareinnovation.com
    Description:
    The install of application WinRAR from policy Basic Computers GPO failed.  The error was : %%1612
    I am using windows server 2008 R2 and all my clients are running Windows 7 Enterprise and they are working over a domain, note that I am using VMware.
    Below there are a list of the troubleshooting steps that have been already applied:
    *Disable the the firewall both in the server and in the clients 
    *Grant read access to the folder where the the program is shared for installation, it was added the authenticated users and domain computers.
    *Group policy modifications: 
    -> User Account Control
    Policy Setting Winning GPO 
    - User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode Elevate without prompting Basic Computers GPO 
    - User Account Control: Detect application installations and prompt for elevation Disabled Basic Computers GPO 
    - User Account Control: Only elevate UIAccess applications that are installed in secure locations Disabled Basic Computers GPO 
    - User Account Control: Run all administrators in Admin Approval Mode Disabled Basic Computers GPO 
    --> System/Group Policy
    Policy Setting Winning GPO 
    - Startup policy processing wait time Enabled Basic Computers GPO 
    Amount of time to wait (in seconds): 120 
    --> System/Logon
    Policy Setting Winning GPO 
    - Always wait for the network at computer startup and logon Enabled Basic Computers GPO 
    Thank you very much for your time.

    Hi Marco,
    Based on your description, we can enable diagnostic logging of Group Policy Software Installation processing to troubleshoot the issue.
    Regarding this point, the following article can be referred to for more information.
    How to troubleshoot software installations by using Windows application management debug logging
    http://support.microsoft.com/kb/249621
    Once you get the log, you may upload it to OneDrive and provide us the download link.
    In addition, the following article provides a step-to-step guidance for deploying software via group policy and can be referred to for double check.
    How to use Group Policy to remotely install software in Windows Server 2008 and in Windows Server 2003
    http://support.microsoft.com/kb/816102
    Best regards,
    Frank Shen

  • Group Policy Managed Software Windows 8.1

    Hi
    Is software installation/assigned applications in group policy supported in Windows 8.1 as they don't seem to work correctly.  We either have them hanging at startup or they reinstall each time even though its already installed it.
    I can't find anything searching online regarding Windows 8.1 and deploying software this way with group policy.

    > Is software installation/assigned applications in group policy supported
    > in Windows 8.1 as they don't seem to work correctly.  We either have
    > them hanging at startup or they reinstall each time even though its
    > already installed it.
    Does it work correctly with older OS versions? Maybe it's not an issue
    of Win 8.1, but of the MSI itself?
    Unfortunately, GPO MSI deployment debug logging is broken in Windows 8
    and above, so you'll have a hard time digging that down...
    Martin
    Mal ein
    GUTES Buch über GPOs lesen?
    NO THEY ARE NOT EVIL, if you know what you are doing:
    Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))

  • Windows 7 Group Policy Processing - EventID 1058

    I am having an issue with Windows 7 clients refreshing group policy. When I run gpupdate the user policy refreshes and the moves on to the computer policies but fails displaying the error below.  Replication topology checks out, dcdiag returns
    no errors and sysvol permissions look ok too.  Curiously the same policies apply just fine on windows xp pro systems.  The Domain Controller is running Server 2008 Enterprise Edt R2 SP1, I see no 1030 eventid's on the domain controllers as others
    frequently report with this error.  The domain is running at Windows Server 2003 functional level but I have creaded a PolicyDefinitions folder in the sysvol for admx files etc.  Where to go from here? Does anyone have any suggestions/insight
    as to what the issue may be?
    The sysvol and the gpt.ini file is accessible from the Windows 7 client using UNC path.
    Thanks in advance for any assistance given.
    The error code listed is 0 which is not mentioned in this article
    http://social.technet.microsoft.com/wiki/contents/articles/1456.aspx
    ## Error details
    Log Name:      System
    Source:        Microsoft-Windows-GroupPolicy
    Date:          2/8/2012 2:38:09 PM
    Event ID:      1058
    Task Category: None
    Level:         Error
    Keywords:     
    User:          SYSTEM
    Computer:      win7box.abc123.net
    Description:
    The processing of Group Policy failed. Windows attempted to read the file
    \\abc123.net\SysVol\abc123.net\Policies\{EB062BE8-CAF6-47B4-9B8B-27A19268C520}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused
    by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" />
        <EventID>1058</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>0</Task>
        <Opcode>1</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2012-02-08T20:38:09.770740300Z" />
        <EventRecordID>3972</EventRecordID>
        <Correlation ActivityID="{24F60AA4-DC8D-4F6D-8787-9535072F03C0}" />
        <Execution ProcessID="996" ThreadID="1148" />
        <Channel>System</Channel>
        <Computer>win7box.abc123.net</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="SupportInfo1">4</Data>
        <Data Name="SupportInfo2">816</Data>
        <Data Name="ProcessingMode">0</Data>
        <Data Name="ProcessingTimeInMilliseconds">3354</Data>
        <Data Name="ErrorCode">0</Data>
        <Data Name="ErrorDescription">The operation completed successfully. </Data>
        <Data Name="DCName">DC.abc123.net</Data>
        <Data Name="GPOCNName">CN={EB062BE8-CAF6-47B4-9B8B-27A19268C520},CN=Policies,CN=System,DC=abc123,DC=net</Data>
        <Data Name="FilePath">\\abc123.net\SysVol\abc123.net\Policies\{EB062BE8-CAF6-47B4-9B8B-27A19268C520}\gpt.ini</Data>
      </EventData>
    </Event>
    ## DCDiag Results (No RODC's hence NCSecDesc error )
    Directory Server Diagnosis
    Performing initial setup:
       Trying to find home server...
       Home Server = DC
       * Identified AD Forest.
       Done gathering initial info.
    Doing initial required tests
       Testing server: North\DC
          Starting test: Connectivity
             ......................... DC passed test Connectivity
    Doing primary tests
       Testing server: North\DC
          Starting test: Advertising
             ......................... DC passed test Advertising
          Starting test: FrsEvent
             ......................... DC passed test FrsEvent
          Starting test: DFSREvent
             ......................... DC passed test DFSREvent
          Starting test: SysVolCheck
             ......................... DC passed test SysVolCheck
          Starting test: KccEvent
             ......................... DC passed test KccEvent
          Starting test: KnowsOfRoleHolders
             ......................... DC passed test KnowsOfRoleHolders
          Starting test: MachineAccount
             ......................... DC passed test MachineAccount
          Starting test: NCSecDesc
             Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
                Replicating Directory Changes In Filtered Set
             access rights for the naming context:
             DC=ForestDnsZones,DC=abc123,DC=net
             Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
                Replicating Directory Changes In Filtered Set
             access rights for the naming context:
             DC=DomainDnsZones,DC=abc123,DC=net
             ......................... DC failed test NCSecDesc
          Starting test: NetLogons
             ......................... DC passed test NetLogons
          Starting test: ObjectsReplicated
             ......................... DC passed test ObjectsReplicated
          Starting test: Replications
             ......................... DC passed test Replications
          Starting test: RidManager
             ......................... DC passed test RidManager
          Starting test: Services
             ......................... DC passed test Services
          Starting test: SystemLog
             ......................... DC passed test SystemLog
          Starting test: VerifyReferences
             ......................... DC passed test VerifyReferences
       Running partition tests on : ForestDnsZones
          Starting test: CheckSDRefDom
             ......................... ForestDnsZones passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... ForestDnsZones passed test
             CrossRefValidation
       Running partition tests on : DomainDnsZones
          Starting test: CheckSDRefDom
             ......................... DomainDnsZones passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... DomainDnsZones passed test
             CrossRefValidation
       Running partition tests on : Schema
          Starting test: CheckSDRefDom
             ......................... Schema passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... Schema passed test CrossRefValidation
       Running partition tests on : Configuration
          Starting test: CheckSDRefDom
             ......................... Configuration passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... Configuration passed test CrossRefValidation
       Running partition tests on : abc123
          Starting test: CheckSDRefDom
             ......................... abc123 passed test CheckSDRefDom
          Starting test: CrossRefValidation
             ......................... abc123 passed test CrossRefValidation
       Running enterprise tests on : abc123.net
          Starting test: LocatorCheck
             ......................... abc123.net passed test LocatorCheck
          Starting test: Intersite
             ......................... abc123.net passed test Intersite

    I shortened this down a good bit but here is the gist of it, my question is which context/user/account is being denied access to the .ini files?  I have never used the streams utility but I'll give it a whirl and report back what I get. Most of
    the cannot be accessed are probably just policies that are  not applicable to the machine but the gpt.ini errors are baffling me.
    New GPO - it appears that new GPOs are fine
    GPSVC(3e4.80c) 12:43:27:510 ProcessGPO:  Searching <cn={5D0EF3CD-7942-4A89-A879-4F9FDB3064BF},cn=policies,cn=system,DC=abc123,DC=net>
    GPSVC(3e4.80c) 12:43:27:510 ProcessGPO:  Machine has access to this GPO.
    GPSVC(3e4.80c) 12:43:27:510 ProcessGPO:  GPO passes the filter check.
    GPSVC(3e4.80c) 12:43:27:510 ProcessGPO:  Found functionality version of:  2
    GPSVC(3e4.80c) 12:43:27:510 ProcessGPO:  Found file system path of:  <\\abc123.net\SysVol\abc123.net\Policies\{5D0EF3CD-7942-4A89-A879-4F9FDB3064BF}>
    GPSVC(3e4.80c) 12:43:27:510 ProcessGPO:  Found common name of:  <{5D0EF3CD-7942-4A89-A879-4F9FDB3064BF}>
    GPSVC(3e4.80c) 12:43:27:510 ProcessGPO:  Found display name of:  <gpoC-Win7Test>
    GPSVC(3e4.80c) 12:43:27:510 ProcessGPO:  Found machine version of:  GPC is 0, GPT is 0
    GPSVC(3e4.80c) 12:43:27:510 ProcessGPO:  Found flags of:  0
    GPSVC(3e4.80c) 12:43:27:510 ProcessGPO:  No client-side extensions for this object.
    GPSVC(3e4.80c) 12:43:27:510 ProcessGPO:  GPO gpoC-Win7Test doesn't contain any data since the version number is 0.  It will be skipped.
    Older GPO's - not so fine
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={B34A8F23-269C-43D8-A097-2307729FBFF6},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  ==============================
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  Searching <CN={55338992-95C9-4FA2-80E4-0ED4A623EE09},CN=Policies,CN=System,DC=abc123,DC=net>
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  Machine has access to this GPO.
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  GPO passes the filter check.
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  Found functionality version of:  2
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  Found file system path of:  <\\abc123.net\SysVol\abc123.net\Policies\{55338992-95C9-4FA2-80E4-0ED4A623EE09}>
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  Found common name of:  <{55338992-95C9-4FA2-80E4-0ED4A623EE09}>
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  Found display name of:  <gpoS-RealPlayerEnt6 - Security>
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  Found machine version of:  GPC is 0, GPT is 0
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  Found flags of:  0
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  No client-side extensions for this object.
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  GPO gpoS-RealPlayerEnt6 - Security doesn't contain any data since the version number is 0.  It will be skipped.
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  ==============================
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={C92FD413-E891-47E0-B554-BD7F9209D036},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={FEF33797-46D0-452A-B3D7-0BEEC2330592},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={CCBFECA5-2FF8-4512-8CE4-108C4092D009},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={767959D5-7AB6-4D55-A02E-3F54439CC7DA},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={10DCAC5E-9904-41FF-B678-E8514F481E56},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={3229FD3D-868A-4406-AFAF-6449ADBB4749},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={1DD39B5C-B930-4750-8EC3-42D0FB89A3B9},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={E10350D2-F632-4D5E-9668-4151596B1D77},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={86C864C5-C861-42FC-B728-BAEE81C9A091},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={FE1162BF-9FE2-4F04-A514-80A8E6D5F7CD},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={F68214D3-33F3-4F76-BE26-306D0237A048},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={CA6B06CE-C546-41F1-87FB-9013701AEF00},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={C8C9EFA2-90AA-4162-9051-23FD83B5CF62},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={DE445C4F-9A0F-488F-8769-C041CF2184AA},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={7CDB465C-55AC-4CBC-9C18-F3ADACDFEB46},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={F4E0F78E-BE36-4793-A8B1-83B2D67083F1},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={53359F0A-8C9B-4831-936F-3D47C4CC2694},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={6793DBEE-47B0-458D-8F1C-D92EB7015733},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={93919120-7113-47C0-AA38-0561EAB18E42},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={5ABD1D9E-07E4-4A53-B854-A2FFC3B257CB},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={71E2B86C-A4A0-47C0-9D7F-BDD6220B9FA4},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={4401CF1C-7839-4496-BB87-304A8AB917FC},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={1244CA5A-D654-4ED6-9374-148F1F3DA8ED},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={42875CF2-B9E9-4EFA-90C2-7ACA8882F1B7},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={6DD428B6-6B19-4A53-B172-57DB3E15A38E},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={983BFDAD-65F0-42B4-807A-E78DF275C352},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={AFA31A2D-07D8-4CB4-BE86-067A9624E324},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={77C9CA17-6359-4355-9FDF-F605F0441245},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={75D43291-6FA2-4B98-8422-228DDB45571B},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={870C6FB3-74CD-46E8-9D4D-E6E6C0A2B52D},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={2144E4CF-01C1-4C5B-984B-E9BD4461406F},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={7D9DB917-1245-46BD-AEBF-163A2F0FCD06},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={B7431941-5DAA-4DD2-A569-35C31B92B677},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={D01BF1D1-33C8-4FC3-95C3-5948A1EE1647},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={57D4AD83-3BBF-43C2-9A3B-F71F3E52C2A6},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={A8DB7DAC-42F0-43FC-99E1-F1AC15006101},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={56574927-6DC5-48A7-82F9-A00E820335F6},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={2FB6858E-8B1C-4C89-83B2-0EEE97D9A72B},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={93C56E3F-5334-4325-A328-0CCAFED0828B},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={1B64E00F-D3B6-49B6-B6C8-7AD0A8C9AEFA},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={81B4E46C-8249-4547-BC75-9A1FB395E282},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={43D5184A-73C8-4BFD-9B09-33C70B8BC3C2},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  ==============================
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  Searching <CN={0ABE0BCF-0BC5-481E-AC86-5768D00901D5},CN=Policies,CN=System,DC=abc123,DC=net>
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  Machine has access to this GPO.
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  GPO passes the filter check.
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  Found functionality version of:  2
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  Found file system path of:  <\\abc123.net\SysVol\abc123.net\Policies\{0ABE0BCF-0BC5-481E-AC86-5768D00901D5}>
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  Couldn't find the group policy template file <\\abc123.net\SysVol\abc123.net\Policies\{0ABE0BCF-0BC5-481E-AC86-5768D00901D5}\gpt.ini>,
    error = 0x0. DC: DC2.abc123.net
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPO:  ==============================
    GPSVC(3e4.80c) 12:43:27:541 EvalList:  ProcessGPO failed
    GPSVC(3e4.80c) 12:43:27:541 GetGPOInfo:  EvaluateDeferredGPOs failed. Exiting
    GPSVC(3e4.80c) 12:43:27:541 GetGPOInfo:  Leaving with 0
    GPSVC(3e4.80c) 12:43:27:541 GetGPOInfo:  ********************************
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPOs: GetGPOInfo failed.
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPOs: No WMI logging done in this policy cycle.
    GPSVC(3e4.80c) 12:43:27:541 ProcessGPOs: Processing failed with error 87.
    GPSVC(3e4.80c) 12:43:27:557 Application complete with bConnectivityFailure = 0.
    GPSVC(3e4.80c) 12:43:27:557 Signalling 1 Refresh Policy callers
    GPSVC(f84.df4) 12:43:27:557 Exiting RefreshPolicyForPrincipal with status = 0
    GPSVC(3e4.80c) 12:43:27:557 GPLockPolicySection: Sid = (null), dwTimeout = 600000, dwFlags = 0
    GPSVC(3e4.80c) 12:43:27:557 LockPolicySection called for user <Machine>
    GPSVC(3e4.80c) 12:43:27:557 Sync Lock Called
    GPSVC(3e4.80c) 12:43:27:557 Writer Lock got immediately.
    GPSVC(3e4.80c) 12:43:27:557 Lock taken successfully
    GPSVC(3e4.80c) 12:43:27:557 UnLockPolicySection called for user <Machine>
    GPSVC(3e4.80c) 12:43:27:557 UnLocked successfully

  • Group policy to Delete unauthorised software per logon

    I have a group of  on-site engineers (domain users but have local administrators rights) who are using laptops. They are required to install software occasionally when they travel, therefore I need a way using group policy to remove all these software not installed by group policy.
    I only want the software(s) to be removed when they log-on to the company network/Domain/Active Directory. Can it be done per log-on?
    I understand that one way to do it is to remove the registry of all software not installed by group policy so that it cannot be used. .Software installed by group policy should not be affected. Drivers for hardware should not be affected. 
    Do you guys have any idea how to do so?
    This topic first appeared in the Spiceworks Community

    Hi Guys,I wrote below script for creating new user and granting it read only access but I'm getting attached error.Please help...Powershell$HostList = Get-Content C:\Users\malvika\Desktop\Hostnames.txtforeach ($server in $HostList){ $HostDetail = $server.Split(',') $HostName = ($server -split ',')[0] $userid = ($server -split ',')[1] $password = ($server -split ',')[2] $VCimpl = Get-VIServer -Server $HostName -User $userid -Password $password [Reflection.Assembly]::LoadWithPartialName("vmware.vim") # The name of the role to be assigned $roleLabel="Read-Only" #craete user New-VMHostAccount -Id Test -Password U!er -Description "Test User" #The name of the principal (user or group) that the role is assigned to $principal="Test" # set to false if principal is a user , not a group $principalIsGroup = $false $propagateToSubEntities = $true ...

  • Mandatory Profiles, Group Policy Preferences, Synchronous processing

    Hello,
    I'm using Windows 8.1 Update to setup a lab of computers that will use standard user accounts with Mandatory Profiles and Group Policy to lock them down. Everything is working great with the exception of Group Policy Preferences. I am using GPP printers
    to add a shared printer to the computer lab and set the default. Due to asynchronous processing, the GPPs are applied only every other time. Since they are mandatory profiles, the settings are wiped out every time.
    I have enabled the GPO setting "Always wait for network at startup and logon" but it doesn't seem to have any effect. The Mandatory Profile is assigned in the user's AD object.
    From everything I can find on the issue, the problem seems to stem from the synchronous processing/asynchronous processing of group policy preferences, which explains the consistent alternating working. Fast logon optimization is always off when using a
    roaming user profile, which is the case of these standard users, to my understanding. I also configured cached logons to '0', disabling cached logons. The computers (configured to automatically sign in with SysInternals' Autologon) received an error (no logon
    servers available) trying to sign in before the network was ready, showing that they are ignoring the setting. Even with waiting for the network and signing in manually, the GPP printers are only successfully added every other time.
    http://technet.microsoft.com/en-us/library/jj573586.aspx
    2008R2 functional level
    I have created and recreated GPOs to test creating them on the DC and a Windows 8.1 Update computer, with no change in outcome.
    I have also tried setting Startup policy processing wait time, run logon scripts synchronously, and GPP Printers processing behaviors. For the latest testing, I created a new OU with blocked inheritance and created a new GPO with just the key settings to
    wait for network, install the printers, and use the mandatory profile. It still only worked every other time.
    I am currently at a loss for a good way to add the printers to the mandatory profiles. I have hacked them into the HKCU of the mandatory profile but I feel that is a kludge solution and not very sustainable. I have tried a logon PowerShell script but had
    no luck.
    TL;DR: Win8.1Update, Mandatory Profiles, standard user: Every other restart, GPP Printers are added perfectly and the desired outcome is reached. Every other, other restart the printers are not added.

    Hi,
    I'll involve other engineer to this thread for more discussion about your problem. Please wait patient.
    Thank you for your understanding!
    Roger Lu
    TechNet Community Support

  • Group policy - 'install pending - reboot required'

    I have deployed software using GPO - Computer Configuration - Assigned software.  This has worked with flying colors for most computers on our domain - all running Windows 7 x86.  Only a select few computers have failed to get this software installed. 
    When I checked RSOP.msc, I get a message that the install is pending and awaiting reboot.  These machines have rebooted many times and yet the same message appears on RSOP and the software has yet to actually install.
    Where is it getting hung up?  Is there some sort of install cache that I can clear on the PC so GPO will try to send the install from scratch?
    We have tried several things to try to isolate variables:
    Tried gpupdate /force - I am prompted to reboot, and when I do so the software does not install
    Checked GP Result - shows that this software install policy was "applied" to the computer, yet it isn't installed
    Checked RSOP.msc, I get a message that the install is pending and awaiting reboot - reboots do not resolve this
    Added permissions for "everyone" at the distribution point NTFS and share (I doubt it's permissions anyway since installs were successful on most computers before we added more permissions)
    Tried adding a Computer Configuration/Administrative Templates/System/Group Policy/Startup policy processing wait time - 20 seconds (I tried this after reading this forum question -
    http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/2a2175bf-132f-46c2-bc5a-4c67932141e2/)
    Furthermore, every test I try to manufacture grabs the GPO and installs the software with success.  The only machines that fail are machines that aren't easy for me to access as people are using them during the workday. 
    I have grabbed the event viewer information for a failing PC "WOLF", these events show every time after logon as well:
    Warning 1/11/2012 2:40:25 PM Application Management Group Policy 101 None
    Log Name:      System
    Source:        Application Management Group Policy
    Date:          1/11/2012 2:40:25 PM
    Event ID:      101
    Task Category: None
    Level:         Warning
    Keywords:      Classic
    User:          SYSTEM
    Computer:      WOLF.domain.local
    Description:
    The assignment of application TeamViewer 6 (MSI Wrapper) from policy TeamViewer 6 MSI PDX failed.  The error was : %%1274
    Error 1/11/2012 2:40:25 PM Application Management Group Policy 103 None
    Log Name:      System
    Source:        Application Management Group Policy
    Date:          1/11/2012 2:40:25 PM
    Event ID:      103
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          SYSTEM
    Computer:      WOLF.domain.local
    Description:
    The removal of the assignment of application TeamViewer 6 (MSI Wrapper) from policy TeamViewer 6 MSI PDX failed.  The error was : %%2
    Warning 1/11/2012 2:40:25 PM Application Management Group Policy 108 None
    Log Name:      System
    Source:        Application Management Group Policy
    Date:          1/11/2012 2:40:25 PM
    Event ID:      108
    Task Category: None
    Level:         Warning
    Keywords:      Classic
    User:          SYSTEM
    Computer:      WOLF.domain.local
    Description:
    Failed to apply changes to software installation settings.  The installation of software deployed through Group Policy for this user has been delayed until the next logon because the changes must be applied before the user logon.  The error was :
    %%1274
    Warning 1/11/2012 2:40:25 PM GroupPolicy 1112 None
    Log Name:      System
    Source:        Microsoft-Windows-GroupPolicy
    Date:          1/11/2012 2:40:25 PM
    Event ID:      1112
    Task Category: None
    Level:         Warning
    Keywords:     
    User:          SYSTEM
    Computer:      WOLF.domain.local
    Description:
    The Group Policy Client Side Extension Software Installation was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the
    next startup or logon for this user, and this may result in slow startup and boot performance.
    Any help would be appreciated!
    Thanks,
    Elizabeth

    > TeamViewer 6 MSI PDX failed. The error was : %%1274
    Not really an error - more an information. Results from a "gpupdate" and
    means "reboot now, please".
    > from policy TeamViewer 6 MSI PDX failed. The error was : %%2
    File not found. That's odd... May need further investigation.
    > before the user logon. The error was : %%1274
    See above - reboot required.
    You may activate appmgmt debug logging and then post the resulting log
    file: In HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics,
    set AppmgmtDebugLevel (REG_DWORD) to 0x9b and examine
    %windir%\debug\usermode\appmgmt.log after the next reboot.
    If no other solution, you may try to cleanup the appmgmt history key so
    that all SW deployment GPOs will be processed again: Rename
    HKLM\Software\Microsoft\Windows\CurrentVersion\Group Policy\AppMgmt and
    recreate empty.
    sincerely, Martin
    A bissle "Experience", a bissle GMV... Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!

Maybe you are looking for

  • My iPod Touch 3rd Gen, Does not show up on iTunes Devises  4.3

    My iPod Touch, 3rd gen, does not show up on iTunes 10. I feel I have exhausted al avenues. Diagnotics passed all tests but - The Connection Not Found. Continued on with there Help suggestions with no success.

  • My new MacBook keeps freezing at the login. What possibly could be the problem?

    I have taken my computer to the store 3 times and the last time left it there for 4 days. Each time it miraculously works and there is no identified problem. I have not put any software on in for two months to see if it was the problem.  It randomly

  • LDAP Search returns only 1200 records

    Hi! I'm having trouble searching an LDAP registry containing about 20 000 records. If I configure a search that should return about 15000 records I only get 1200 with the following error message when iterating through the NamingEnumeration: Unexpecte

  • Database corrupt + ipod refuses to update

    windows said the ipod database was corrupt, and when i tried to add new songs, it didn't work. to try to solve this problem, i have downloaded a new ipod updater. ipod updater doesn't finish. after 30 minuts, it still says it needs to stay connected

  • Migrate database from UTF-8 to AL32UTF8

    We've heard that support for the UTF-8 characterset is going to peter out. Our databases are all in the UTF-8 characterset, so we are considering migrating to AL32UTF8. Any issues we need to consider, or is it simply a case of switching the database