Group Policy Event ID 1085 Warnings
I am getting the following error on Windows 7 Ultimate after tweaking something in Group Policy.
Log Name: System
Source: Microsoft-Windows-GroupPolicy
Date: 2010/05/18 05:00:57 PM
Event ID: 1085
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: Grant
Description:
Windows failed to apply the TCPIP settings. TCPIP settings might have its own log file. Please click on the "More information" link.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" />
<EventID>1085</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>1</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2010-05-18T15:00:57.932839400Z" />
<EventRecordID>20382</EventRecordID>
<Correlation ActivityID="{1E2EA952-32AA-4686-A4A2-EA32699F0B5D}" />
<Execution ProcessID="1016" ThreadID="272" />
<Channel>System</Channel>
<Computer>Grant</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="SupportInfo1">1</Data>
<Data Name="SupportInfo2">3961</Data>
<Data Name="ProcessingMode">2</Data>
<Data Name="ProcessingTimeInMilliseconds">1903</Data>
<Data Name="ErrorCode">1062</Data>
<Data Name="ErrorDescription">The service has not been started. </Data>
<Data Name="DCName">
</Data>
<Data Name="ExtensionName">TCPIP</Data>
<Data Name="ExtensionId">{cdeafc3d-948d-49dd-ab12-e578ba4af7aa}</Data>
</EventData>
</Event>
Log Name: Microsoft-Windows-GroupPolicy/Operational
Source: Microsoft-Windows-GroupPolicy
Date: 2010/05/18 05:00:57 PM
Event ID: 7016
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Grant
Description:
Completed TCPIP Extension Processing in 1887 milliseconds.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" />
<EventID>7016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>2</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2010-05-18T15:00:57.932839400Z" />
<EventRecordID>13612</EventRecordID>
<Correlation ActivityID="{1E2EA952-32AA-4686-A4A2-EA32699F0B5D}" />
<Execution ProcessID="1016" ThreadID="272" />
<Channel>Microsoft-Windows-GroupPolicy/Operational</Channel>
<Computer>Grant</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="CSEElaspedTimeInMilliSeconds">1887</Data>
<Data Name="ErrorCode">1062</Data>
<Data Name="CSEExtensionName">TCPIP</Data>
<Data Name="CSEExtensionId">{CDEAFC3D-948D-49DD-AB12-E578BA4AF7AA}</Data>
</EventData>
</Event>
It seems to be related to a service not being started (or disabled.) How can I find out which one and fix this?
May 18th, 2010 11:36am
I searched technet's manuals and only found a reference for Windows XP.
http://support.microsoft.com/kb/898062/en-us
I suggest reversing your changes and get some manuals that are oriented around corporate policies. Policies are based mostly on servers.
Vote if answered or helpful, I am running for Office (joke)!
IT/Developer, Windows/Linux/Mainframe Need a some parts finish the new server, see the site for remaining items needed
Free Windows Admin Tool Kit Click here and download it now
May 18th, 2010 6:34pm
Hi,
Is Group Policy object applied successfully on the Windows 7 machine?
According to the event log, most likely, this issue occurs because the Group Policy client-side extension tries to load the history file that is stored at the following
location:
..\users\All Users\Microsoft\Group Policy\History\<GUID>\Preferences
However, when the history file is corrupted or unreadable, the group policy preference settings are not applied successfully.
To work around this issue, follow these steps:
1. Delete the corrupted XML file or local XML file which size is 0 kb in the following location:
..\users\All Users\Microsoft\Group Policy\History\< GUID >\Preferences
2. Run the following command at the command prompt to refresh the group policy again
gpupdate /force
977564
Error message on a domain controller that is running Windows Server 2008: "The client-side extension could not remove user policy settings for 'Domain Name {GUID}' because it failed with error code '0x8007000d The data is invalid.'"
http://support.microsoft.com/default.aspx?scid=kb;EN-US;977564
Hope it helps.
Novak
May 18th, 2010 10:24pm
I have reversed any and all changes I have made and no dice. Must be something hiding somewhere still ...
Free Windows Admin Tool Kit Click here and download it now
May 20th, 2010 7:58am
Sounds like a great solution, only that folder does not even exist on my Windows 7 machine. I am not running a network, just gpedit.msc.
May 20th, 2010 8:00am
Hi,
Is the machine in a domain or a workgroup?
At this stage, please rename the corrupted file via following article:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;977564
If the issue persists, please also perform a System Restore for a test.
Thanks,
Novak
Free Windows Admin Tool Kit Click here and download it now
May 20th, 2010 11:09pm
The machine is standalone, so part of a workgroup by definition. I do not have a Group Policy folder in my ProgramData\Microsoft folder.
Also ... system restore is disabled :(
May 21st, 2010 8:01am
GPSVC(7c.484) 16:05:10:589 ProcessGPOs: -----------------------
GPSVC(7c.484) 16:05:10:589 ProcessGPOs: Processing extension TCPIP
GPSVC(7c.484) 16:05:10:589 ReadStatus: Read Extension's Previous status successfully.
GPSVC(7c.484) 16:05:10:589 CompareGPOLists: One list is empty
GPSVC(7c.484) 16:05:10:589 GPLockPolicySection: Sid = (null), dwTimeout = 30000, dwFlags = 0
GPSVC(7c.484) 16:05:10:589 LockPolicySection called for user <Machine>
GPSVC(7c.484) 16:05:10:589 Sync Lock Called
GPSVC(7c.484) 16:05:10:589 Writer Lock got immediately.
GPSVC(7c.484) 16:05:10:589 Lock taken successfully
GPSVC(7c.484) 16:05:10:589 ProcessGPOList: Entering for extension TCPIP
GPSVC(7c.484) 16:05:10:589 MachinePolicyCallback: Setting status UI to Applying TCPIP policy...
GPSVC(7c.484) 16:05:10:589 GetWbemServices: CoCreateInstance succeeded
GPSVC(7c.150) 16:05:10:667 Target = Machine
GPSVC(7c.324) 16:05:10:667 Target = Machine, ChangeNumber 0
GPSVC(7c.150) 16:05:10:714 Target = Machine
GPSVC(7c.150) 16:05:10:714 Target = Machine, ChangeNumber 0
GPSVC(22c.27c) 16:05:10:776 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x744
GPSVC(22c.27c) 16:05:10:776 Client_InitialRegisterForNotification: User = machine, changenumber = 0
GPSVC(7c.150) 16:05:10:776 Target = Machine
GPSVC(22c.27c) 16:05:10:776 Client_RegisterForNotification: User = machine, changenumber = 0
GPSVC(22c.27c) 16:05:10:776 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(7c.154) 16:05:10:776 Target = Machine, ChangeNumber 0
GPSVC(7c.154) 16:05:10:808 Sid = (null), dwTimeout = 1, dwFlags = 268435459
GPSVC(7c.154) 16:05:10:808 LockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:808 Async Lock called
GPSVC(7c.154) 16:05:10:808 Reader Lock got immediately. m_cReadersInLock : 1
GPSVC(7c.154) 16:05:10:808 Sid = (null), dwTimeout = 1, dwFlags = 268435459
GPSVC(7c.154) 16:05:10:808 LockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:808 Async Lock called
GPSVC(7c.154) 16:05:10:808 Reader Lock got immediately. m_cReadersInLock : 2
GPSVC(7c.154) 16:05:10:808 Sid = (null)
GPSVC(7c.154) 16:05:10:808 UnLockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:808 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(7c.154) 16:05:10:808 UnLocked successfully
GPSVC(7c.154) 16:05:10:808 Sid = (null), dwTimeout = 1, dwFlags = 268435459
GPSVC(7c.154) 16:05:10:808 LockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:808 Async Lock called
GPSVC(7c.154) 16:05:10:808 Reader Lock got immediately. m_cReadersInLock : 2
GPSVC(7c.154) 16:05:10:823 Sid = (null)
GPSVC(7c.154) 16:05:10:823 UnLockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:823 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(7c.154) 16:05:10:823 UnLocked successfully
GPSVC(7c.154) 16:05:10:823 Sid = (null), dwTimeout = 1, dwFlags = 268435459
GPSVC(7c.154) 16:05:10:823 LockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:823 Async Lock called
GPSVC(7c.154) 16:05:10:823 Reader Lock got immediately. m_cReadersInLock : 2
GPSVC(7c.154) 16:05:10:823 Sid = (null)
GPSVC(7c.154) 16:05:10:823 UnLockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:823 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(7c.154) 16:05:10:823 UnLocked successfully
GPSVC(7c.154) 16:05:10:823 Sid = (null), dwTimeout = 1, dwFlags = 268435459
GPSVC(7c.154) 16:05:10:823 LockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:823 Async Lock called
GPSVC(7c.154) 16:05:10:823 Reader Lock got immediately. m_cReadersInLock : 2
GPSVC(7c.154) 16:05:10:823 Sid = (null)
GPSVC(7c.154) 16:05:10:823 UnLockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:823 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(7c.154) 16:05:10:823 UnLocked successfully
GPSVC(7c.154) 16:05:10:823 Sid = (null), dwTimeout = 1, dwFlags = 268435459
GPSVC(7c.154) 16:05:10:823 LockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:823 Async Lock called
GPSVC(7c.154) 16:05:10:823 Reader Lock got immediately. m_cReadersInLock : 2
GPSVC(7c.154) 16:05:10:823 Sid = (null)
GPSVC(7c.154) 16:05:10:823 UnLockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:823 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(7c.154) 16:05:10:823 UnLocked successfully
GPSVC(7c.154) 16:05:10:823 Sid = (null), dwTimeout = 1, dwFlags = 268435459
GPSVC(7c.154) 16:05:10:823 LockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:823 Async Lock called
GPSVC(7c.154) 16:05:10:823 Reader Lock got immediately. m_cReadersInLock : 2
GPSVC(7c.154) 16:05:10:823 Sid = (null)
GPSVC(7c.154) 16:05:10:823 UnLockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:823 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(7c.154) 16:05:10:823 UnLocked successfully
GPSVC(7c.154) 16:05:10:823 Sid = (null), dwTimeout = 1, dwFlags = 268435459
GPSVC(7c.154) 16:05:10:823 LockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:823 Async Lock called
GPSVC(7c.154) 16:05:10:823 Reader Lock got immediately. m_cReadersInLock : 2
GPSVC(7c.154) 16:05:10:823 Sid = (null)
GPSVC(7c.154) 16:05:10:823 UnLockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:823 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(7c.154) 16:05:10:823 UnLocked successfully
GPSVC(7c.154) 16:05:10:823 Sid = (null), dwTimeout = 1, dwFlags = 268435459
GPSVC(7c.154) 16:05:10:823 LockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:823 Async Lock called
GPSVC(7c.154) 16:05:10:823 Reader Lock got immediately. m_cReadersInLock : 2
GPSVC(7c.154) 16:05:10:823 Sid = (null)
GPSVC(7c.154) 16:05:10:839 UnLockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:839 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(7c.154) 16:05:10:839 UnLocked successfully
GPSVC(7c.154) 16:05:10:839 Sid = (null), dwTimeout = 1, dwFlags = 268435459
GPSVC(7c.154) 16:05:10:839 LockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:839 Async Lock called
GPSVC(7c.154) 16:05:10:839 Reader Lock got immediately. m_cReadersInLock : 2
GPSVC(7c.154) 16:05:10:839 Sid = (null)
GPSVC(7c.154) 16:05:10:839 UnLockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:839 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(7c.154) 16:05:10:839 UnLocked successfully
GPSVC(7c.154) 16:05:10:839 Sid = (null), dwTimeout = 1, dwFlags = 268435459
GPSVC(7c.154) 16:05:10:839 LockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:839 Async Lock called
GPSVC(7c.154) 16:05:10:839 Reader Lock got immediately. m_cReadersInLock : 2
GPSVC(7c.154) 16:05:10:839 Sid = (null)
GPSVC(7c.154) 16:05:10:839 UnLockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:839 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(7c.154) 16:05:10:839 UnLocked successfully
GPSVC(7c.154) 16:05:10:839 Sid = (null), dwTimeout = 1, dwFlags = 268435459
GPSVC(7c.154) 16:05:10:839 LockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:839 Async Lock called
GPSVC(7c.154) 16:05:10:839 Reader Lock got immediately. m_cReadersInLock : 2
GPSVC(7c.154) 16:05:10:839 Sid = (null)
GPSVC(7c.154) 16:05:10:839 UnLockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:839 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(7c.154) 16:05:10:839 UnLocked successfully
GPSVC(7c.154) 16:05:10:839 Sid = (null), dwTimeout = 1, dwFlags = 268435459
GPSVC(7c.154) 16:05:10:839 LockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:839 Async Lock called
GPSVC(7c.154) 16:05:10:839 Reader Lock got immediately. m_cReadersInLock : 2
GPSVC(7c.154) 16:05:10:839 Sid = (null)
GPSVC(7c.154) 16:05:10:839 UnLockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:839 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(7c.154) 16:05:10:839 UnLocked successfully
GPSVC(7c.154) 16:05:10:839 Sid = (null), dwTimeout = 1, dwFlags = 268435459
GPSVC(7c.154) 16:05:10:839 LockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:839 Async Lock called
GPSVC(7c.154) 16:05:10:839 Reader Lock got immediately. m_cReadersInLock : 2
GPSVC(7c.154) 16:05:10:839 Sid = (null)
GPSVC(7c.154) 16:05:10:839 UnLockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:839 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(7c.154) 16:05:10:839 UnLocked successfully
GPSVC(7c.154) 16:05:10:839 Sid = (null), dwTimeout = 1, dwFlags = 268435459
GPSVC(7c.154) 16:05:10:839 LockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:839 Async Lock called
GPSVC(7c.154) 16:05:10:839 Reader Lock got immediately. m_cReadersInLock : 2
GPSVC(7c.154) 16:05:10:839 Sid = (null)
GPSVC(7c.154) 16:05:10:839 UnLockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:839 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(7c.154) 16:05:10:839 UnLocked successfully
GPSVC(7c.154) 16:05:10:839 Sid = (null), dwTimeout = 1, dwFlags = 268435459
GPSVC(7c.154) 16:05:10:839 LockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:839 Async Lock called
GPSVC(7c.154) 16:05:10:839 Reader Lock got immediately. m_cReadersInLock : 2
GPSVC(7c.154) 16:05:10:854 Sid = (null)
GPSVC(7c.154) 16:05:10:854 UnLockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:854 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(7c.154) 16:05:10:854 UnLocked successfully
GPSVC(7c.154) 16:05:10:854 Sid = (null), dwTimeout = 1, dwFlags = 268435459
GPSVC(7c.154) 16:05:10:854 LockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:854 Async Lock called
GPSVC(7c.154) 16:05:10:854 Reader Lock got immediately. m_cReadersInLock : 2
GPSVC(7c.154) 16:05:10:854 Sid = (null)
GPSVC(7c.154) 16:05:10:854 UnLockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:854 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(7c.154) 16:05:10:854 UnLocked successfully
GPSVC(7c.154) 16:05:10:854 Sid = (null), dwTimeout = 1, dwFlags = 268435459
GPSVC(7c.154) 16:05:10:854 LockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:854 Async Lock called
GPSVC(7c.154) 16:05:10:854 Reader Lock got immediately. m_cReadersInLock : 2
GPSVC(7c.154) 16:05:10:854 Sid = (null)
GPSVC(7c.154) 16:05:10:854 UnLockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:854 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(7c.154) 16:05:10:854 UnLocked successfully
GPSVC(7c.154) 16:05:10:870 Sid = (null)
GPSVC(7c.154) 16:05:10:870 UnLockPolicySection called for user <Machine>
GPSVC(7c.154) 16:05:10:870 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(7c.154) 16:05:10:870 Setting lock state as notLocked
GPSVC(7c.154) 16:05:10:870 UnLocked successfully
GPSVC(7c.484) 16:05:11:619 ConnectToNameSpace: ConnectServer returned 0x0
GPSVC(7c.484) 16:05:11:619 ReadStatus: Read Extension's Previous status successfully.
GPSVC(7c.484) 16:05:11:634 LogExtSessionStatus: Successfully logged Extension Session data
GPSVC(7c.484) 16:05:11:634 ProcessGPOList: Extension TCPIP returned 0x426.
GPSVC(7c.484) 16:05:11:634 ProcessGPOList: Extension TCPIP doesn't support rsop logging
GPSVC(7c.484) 16:05:11:634 UnLockPolicySection called for user <Machine>
GPSVC(7c.484) 16:05:11:634 UnLocked successfully
GPSVC(7c.484) 16:05:11:634 ProcessGPOs: Extension TCPIP ProcessGroupPolicy failed, status 0x426.
GPSVC(7c.484) 16:05:11:634 ProcessGPOs: -----------------------
In case that helps ...
Free Windows Admin Tool Kit Click here and download it now
May 21st, 2010 10:22am
Managed to get the error to go away by removing my ntuser.pol files from All Users and my own profile, also cleared the system32\grouppolicy folder. Not ideal, but it worked.
May 21st, 2010 11:50am
I get the error too.
What tcpip service is disabled?
I see it it running...TCP/IP Protocol Driver running.
Windows failed to apply the TCPIP settings. TCPIP settings might have its own log file. Please click on the "More information" link.
Component Status
Component Name
Status
Last Process Time
Group Policy Infrastructure
Success
1/1/2011 2:04:27 AM
Registry
Success
1/1/2011 2:04:27 AM
TCPIP
Failed (no data)
1/1/2011 2:04:27 AM
TCPIP failed due to the error listed below.
The service has not been started.
Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between 1/1/2011 2:04:27 AM and 1/1/2011 2:04:27 AM.
Free Windows Admin Tool Kit Click here and download it now
January 1st, 2011 5:15am
See my earlier post about the XP policies.Elected! Your votes and support have got me my 2010 MVP!
Developer |
Windows IT | Chess |
Economics | Hardcore Games |
Vegan Advocate | PC Reviews
January 1st, 2011 9:15am
I have this error too.
It's the only error I cant fix.
help
System
-
Provider
[ Name]
Microsoft-Windows-GroupPolicy
[ Guid]
{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}
EventID
1085
Version
0
Level
3
Task
0
Opcode
1
Keywords
0x8000000000000000
-
TimeCreated
[ SystemTime]
2011-02-24T15:07:39.914153900Z
EventRecordID
224735
-
Correlation
[ ActivityID]
{5A03FFA4-05BE-4CD8-BDDC-852B7367FA27}
-
Execution
[ ProcessID]
216
[ ThreadID]
696
Channel
System
Computer
mycomp
-
Security
[ UserID]
S-1-5-18
-
EventData
SupportInfo1
1
SupportInfo2
3961
ProcessingMode
2
ProcessingTimeInMilliseconds
1778
ErrorCode
1062
ErrorDescription
The service has not been started.
DCName
ExtensionName
TCPIP
ExtensionId
{cdeafc3d-948d-49dd-ab12-e578ba4af7aa}
Free Windows Admin Tool Kit Click here and download it now
February 24th, 2011 10:14am
I found the issue was the 'IP Helper' services was disabled.
October 20th, 2011 2:09pm
AWESOME!! Thank you so much!! That was the issue for me too!!
Free Windows Admin Tool Kit Click here and download it now
September 20th, 2012 11:29am