RE: Event Id 1000 every 5 minutes

From: Craig Landis [MSFT] (clandis_at_online.microsoft.com)
Date: 03/07/04


Date: Sat, 6 Mar 2004 22:26:05 -0800

Permissions on Sysvol is the most common reason for this. Make absolutely certain that at least Authenticated Users have Read on both the NTFS and share level permissions throughout Sysvol.

Other things that cause this -
- DFS client service is disabled
- TCP/IP Netbios helper server is disabled
- Time skew
- Authenticated Users group (which includes machine accounts) doesn't have the Bypass Traverse Checking user right.

-- 
Craig Landis [MSFT]
clandis@online.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no rights. 


Relevant Pages

  • Re: Share Permissions on NETLOGON and SYSVOL
    ... to the SYSVOL share for replication or something else... ... >permissions to the shares as recommended. ... >everyone and authenticated users groups. ... >> Share Permissions on NETLOGON and SYSVOL ...
    (microsoft.public.windows.server.security)
  • Re: Share Permissions on NETLOGON and SYSVOL
    ... I would suggest leaving it with everyone and authenticated users for read ... permissions to the shares as recommended. ... security and sysvol "share" permissions were never listed as a concern. ...
    (microsoft.public.windows.server.security)
  • Re: Share Permissions on NETLOGON and SYSVOL
    ... > to the SYSVOL share for replication or something else... ... >>permissions to the shares as recommended. ... >>everyone and authenticated users groups. ... >>> 2000 Domain Controllers, we are a Child Domain within an Active ...
    (microsoft.public.windows.server.security)
  • Re: Event Id 1000 every 5 minutes
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... >>Permissions on Sysvol is the most common reason for this. ... > Make absolutely certain that at least Authenticated Users ... > have Read on both the NTFS and share level permissions ...
    (microsoft.public.win2000.group_policy)
  • Re: Share Permissions on NETLOGON and SYSVOL
    ... precisely Authenticated Users. ... >>> Share Permissions on NETLOGON and SYSVOL ... >>> shares, and Authenticated Users has Full Control on SYSVOL. ...
    (microsoft.public.windows.server.security)