Discussion Locked

Event Log Error 1001

0 helpful
4 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I get the following in my Event Log on my remote domain controller (global catalog server as well) every 5 minutes...

Security policy cannot be propagated. Cannot access the template. Error code = 3.
\\xxxxx\sysvol\xxxxx\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.

What's insane is that the domain controller can access that file directly, yet the error claims the file can't be propogated. I've followed all the TechNet suggestions to the letter. This one has me stumped...

4 replies

by skersey

Check the policy to verify that it isn't specifying an unresolve-able SID (i.e an account that was deleted, but not removed for the policy)

by bobby gillette

The error only occurs on my remote dc... I removed IIS early on and already made the necessary change to the Default Domain Controllers policy to remove references to the deleted accounts...

by scottfrancis

To fix this check the following:

Change the binding order of the network adapters so that the adapter that is listed at the top of the Connections list has File and Printer Sharing bound to it:
Click Start, point to Settings, click Control Panel, and then double click Network and Dial-up Connections.
On the Advanced menu, click Advanced Settings.
In the Connections box, click the network adapter with File and Printer Sharing bound to it.
Click the arrow buttons on the right side to movethe adapter to the top of the list.
Click OK.

That should solve your problem.

This discussion is closed to new replies.