Windows Forum

Ask something
Discussion Locked

Continuous AppEvent Log Errors

0 helpful
7 replies

by artcabot

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

We're getting the following two errors every five minutes on our Domain Controller:

Source: SceCli EventID: 1202
User: NA
Security policies are propagated with warning. 0x5 : Access is denied.
Please look for more details in TroubleShooting section in Security Help.

Followed by:
Source:Userenv EventID: 1000
User: NT AUTHORITY\SYSTEM
The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (5).

The Microsoft Knowledge Base said to be sure the Group Policy was applied and it is, the Default Policy in fact. The only other Group Policy that's applied is to the OU that contains our Terminal Server.

Suggestions anyone?

7 replies

by artcabot

Still haven't solved it, but this is a great site and easily worth the points! Thanks.

by artcabot

The EventID site is really a great resource! Unfortunately, the MSKB article Q256000 it reference didn't help. I got a location of C:\WINNT\SYSVOL for the %SYSVOL% environmental variable, but couldn't discern how to get %DSDIT% or %DSLOG% since there are no shares by those names. What's the default location for these since we installed our server using defaults?

by amparisi

Check out article(s) Q284461, Q279432, or Q256000.

I've seen issues when a user account(s) gets deleted and IIS or other services check permissions, generate these messages.

This discussion is closed to new replies.