Error 1085 when Group Policy refreshes

From: Edward Forgacs (edward.forgacs_at_optusnet.com.au)
Date: 06/07/04 

Date: Mon, 7 Jun 2004 10:42:43 +1000

When the group policy refreshes, the following error is logged:

Event ID 1085
The Group Policy client-side extension Security failed to execute. Please
look for any errors reported earlier by that extension.
-------

The error that was reported earlier is this:

Security policies were propagated with warning. 0x4b8 : An extended error
has occurred. Please review the detailed log security\logs\winlogon.log
under Windows root to troubleshoot the application of security policy.
-----

The errors in winlogon.log:

...
 Configure S-1-5-21-1123561945-854245398-1957994488-1008.
Error 1168: Element not found.
 Some user rights are not defined in SecEdit.
Error 1168: Element not found.
  Error configuring S-1-5-21-1123561945-854245398-1957994488-1008.
...
User Rights configuration was completed with one or more errors.
-----

Relevant Pages

  • Re: Bit of advice on current AD structure.
    ... If you can do everything you need to do from a GPO and security standpoint there is no reason to move to something more complex. ... So you need to figure out what your security and group policy strategy is, then make your design. ... I am really disliking native delegation of security for user objects more and more as new apps come out and having rights to the users gives you rights to harm the apps, things like Exchange come to mind here where an admin who can directly manipulate user objects can cause nightmares for folks managing the Exchange Service. ...
    (microsoft.public.windows.server.active_directory)
  • Re: restrictions in effect
    ... I wonder if some security software installed on that client PC is causing your inability to change the home page. ... You could control the home page with a group policy, but it seems like that would be applying elsewhere besides this one PC. ... Then for the printing thing, I think I'd start by going to the IE Internet Options, Advanced tab, and click "Restore advanced settings." ...
    (microsoft.public.windows.server.sbs)
  • Re: lets vote for better security
    ... Liberals and security professionals who occassionally wear a black hat. ... Then MSFT started disabling things by default and a lot of the community ... Since when is an app responsible for the ... :>: default installation and be disable-able by Group Policy. ...
    (microsoft.public.security)
  • Re: Windows Update Error on XP 64bit: update is redirected from v6
    ... Proxycfg settings WORKED. ... Microsoft Windows 2000 Operating System Group Policy Result tool ... The user is a member of the following security groups: ...
    (microsoft.public.windowsupdate)
  • Re: lockdown desktop without Group Policy
    ... security groups were removed from the list. ... I can now no longer edit group policy. ... Logon as an administrator ... Create a new local group named "GP Editors" ...
    (microsoft.public.windows.terminal_services)