Re: Userenv 1030 & LSASRV 40961 Errors

From: "James" <poseiden1@xxxxxxxxx>
Date: 28 Dec 2006 09:17:47 -0800

Here is the Userenv Log:

USERENV(478.ccc) 09:16:47:491 LibMain: Process Name:
C:\WINDOWS\system32\gpupdate.exe
USERENV(478.1588) 09:16:47:522 RefreshPolicyEx: Entering with force
refresh 1
USERENV(478.110c) 09:16:47:522 RefreshPolicyEx: Entering with force
refresh 0
USERENV(478.1588) 09:16:47:522 RefreshPolicyEx: Leaving.
USERENV(2e8.9b8) 09:16:47:522 ProcessGPOs:
USERENV(478.110c) 09:16:47:522 RefreshPolicyEx: Leaving.
USERENV(2e8.a0c) 09:16:47:522 ProcessGPOs:
USERENV(2e8.9b8) 09:16:47:538 ProcessGPOs:
USERENV(2e8.a0c) 09:16:47:538 ProcessGPOs:
USERENV(2e8.9b8) 09:16:47:538 ProcessGPOs: Starting computer Group
Policy (Background) processing...
USERENV(2e8.a0c) 09:16:47:538 ProcessGPOs: Starting user Group Policy
(Background) processing...
USERENV(2e8.9b8) 09:16:47:553 ProcessGPOs:
USERENV(2e8.a0c) 09:16:47:553 ProcessGPOs:
USERENV(2e8.9b8) 09:16:47:553 ProcessGPOs:
USERENV(2e8.a0c) 09:16:47:553 ProcessGPOs:
USERENV(2e8.9b8) 09:16:47:553 EnterCriticalPolicySectionEx: Entering
with timeout 600000 and flags 0x0
USERENV(2e8.a0c) 09:16:47:553 EnterCriticalPolicySectionEx: Entering
with timeout 600000 and flags 0x0
USERENV(2e8.9b8) 09:16:47:553 EnterCriticalPolicySectionEx: Machine
critical section has been claimed. Handle = 0xb10
USERENV(2e8.a0c) 09:16:47:553 EnterCriticalPolicySectionEx: User
critical section has been claimed. Handle = 0xa40
USERENV(2e8.9b8) 09:16:47:569 EnterCriticalPolicySectionEx: Leaving
successfully.
USERENV(2e8.a0c) 09:16:47:569 EnterCriticalPolicySectionEx: Leaving
successfully.
USERENV(2e8.9b8) 09:16:47:569 ProcessGPOs: Machine role is 2.
USERENV(2e8.a0c) 09:16:47:569 ProcessGPOs: Machine role is 2.
USERENV(2e8.9b8) 09:16:47:569 PingComputer: Adapter speed 100000000 bps
USERENV(2e8.9b8) 09:16:47:584 PingComputer: First time: 0
USERENV(2e8.9b8) 09:16:47:584 PingComputer: Fast link. Exiting.
USERENV(2e8.a0c) 09:16:47:584 PingComputer: Adapter speed 100000000 bps
USERENV(2e8.9b8) 09:16:47:584 ProcessGPOs: network name is 181.20.0.0
USERENV(2e8.a0c) 09:16:47:584 PingComputer: First time: 0
USERENV(2e8.9b8) 09:16:47:600 ProcessGPOs: User name is:
CN=computername,CN=Computers,DC=domain,DC=local, Domain name is:
domain
USERENV(2e8.a0c) 09:16:47:600 PingComputer: Fast link. Exiting.
USERENV(2e8.9b8) 09:16:47:600 ProcessGPOs: Domain controller is:
\\server.domain.local Domain DN is domain.local
USERENV(2e8.a0c) 09:16:47:600 ProcessGPOs: User name is: CN=User
Name,OU=IT,DC=domain,DC=local, Domain name is: domain
USERENV(2e8.9b8) 09:16:47:600 ReadGPExtensions: Rsop entry point not
found for gptext.dll.
USERENV(2e8.a0c) 09:16:47:616 ProcessGPOs: Domain controller is:
\\server.domain.local Domain DN is domain.local
USERENV(2e8.9b8) 09:16:47:616 ReadGPExtensions: Rsop entry point not
found for dskquota.dll.
USERENV(2e8.a0c) 09:16:47:616 ReadGPExtensions: Rsop entry point not
found for gptext.dll.
USERENV(2e8.9b8) 09:16:47:616 ReadGPExtensions: Rsop entry point not
found for gptext.dll.
USERENV(2e8.a0c) 09:16:47:631 ReadGPExtensions: Rsop entry point not
found for dskquota.dll.
USERENV(2e8.9b8) 09:16:47:631 ReadGPExtensions: Rsop entry point not
found for iedkcs32.dll.
USERENV(2e8.a0c) 09:16:47:631 ReadGPExtensions: Rsop entry point not
found for gptext.dll.
USERENV(2e8.9b8) 09:16:47:647 ReadGPExtensions: Rsop entry point not
found for scecli.dll.
USERENV(2e8.a0c) 09:16:47:647 ReadGPExtensions: Rsop entry point not
found for iedkcs32.dll.
USERENV(2e8.9b8) 09:16:47:647 ReadGPExtensions: Rsop entry point not
found for C:\WINDOWS\System32\cscui.dll.
USERENV(2e8.a0c) 09:16:47:647 ReadGPExtensions: Rsop entry point not
found for scecli.dll.
USERENV(2e8.9b8) 09:16:47:663 ReadGPExtensions: Rsop entry point not
found for gptext.dll.
USERENV(2e8.a0c) 09:16:47:663 ReadGPExtensions: Rsop entry point not
found for C:\WINDOWS\System32\cscui.dll.
USERENV(2e8.9b8) 09:16:47:663 ReadExtStatus: Reading Previous Status
for extension {35378EAC-683F-11D2-A89A-00C04FBBCFA2}
USERENV(2e8.a0c) 09:16:47:663 ReadGPExtensions: Rsop entry point not
found for gptext.dll.
USERENV(2e8.9b8) 09:16:47:663 ReadStatus: Read Extension's Previous
status successfully.
USERENV(2e8.9b8) 09:16:47:678 ReadExtStatus: Reading Previous Status
for extension {0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}
USERENV(2e8.9b8) 09:16:47:678 ReadExtStatus: Reading Previous Status
for extension {25537BA6-77A8-11D2-9B6C-0000F8080861}
USERENV(2e8.9b8) 09:16:47:678 ReadExtStatus: Reading Previous Status
for extension {3610eda5-77ef-11d2-8dc5-00c04fa31a66}
USERENV(2e8.9b8) 09:16:47:678 ReadExtStatus: Reading Previous Status
for extension {426031c0-0b47-4852-b0ca-ac3d37bfcb39}
USERENV(2e8.9b8) 09:16:47:678 ReadExtStatus: Reading Previous Status
for extension {42B5FAAE-6536-11d2-AE5A-0000F87571E3}
USERENV(2e8.9b8) 09:16:47:694 ReadExtStatus: Reading Previous Status
for extension {4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}
USERENV(2e8.9b8) 09:16:47:694 ReadExtStatus: Reading Previous Status
for extension {827D319E-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(2e8.9b8) 09:16:47:694 ReadStatus: Read Extension's Previous
status successfully.
USERENV(2e8.9b8) 09:16:47:694 ReadExtStatus: Reading Previous Status
for extension {A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}
USERENV(2e8.9b8) 09:16:47:694 ReadExtStatus: Reading Previous Status
for extension {B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(2e8.9b8) 09:16:47:709 ReadStatus: Read Extension's Previous
status successfully.
USERENV(2e8.9b8) 09:16:47:709 ReadExtStatus: Reading Previous Status
for extension {C631DF4C-088F-4156-B058-4375F0853CD8}
USERENV(2e8.9b8) 09:16:47:709 ReadExtStatus: Reading Previous Status
for extension {c6dc5466-785a-11d2-84d0-00c04fb169f7}
USERENV(2e8.9b8) 09:16:47:709 ReadExtStatus: Reading Previous Status
for extension {e437bc1c-aa7d-11d2-a382-00c04f991e27}
USERENV(2e8.a0c) 09:16:47:788 ReadExtStatus: Reading Previous Status
for extension {35378EAC-683F-11D2-A89A-00C04FBBCFA2}
USERENV(2e8.a0c) 09:16:47:803 ReadStatus: Read Extension's Previous
status successfully.
USERENV(2e8.a0c) 09:16:47:803 ReadExtStatus: Reading Previous Status
for extension {0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}
USERENV(2e8.a0c) 09:16:47:803 ReadExtStatus: Reading Previous Status
for extension {25537BA6-77A8-11D2-9B6C-0000F8080861}
USERENV(2e8.a0c) 09:16:47:803 ReadExtStatus: Reading Previous Status
for extension {3610eda5-77ef-11d2-8dc5-00c04fa31a66}
USERENV(2e8.a0c) 09:16:47:803 ReadExtStatus: Reading Previous Status
for extension {426031c0-0b47-4852-b0ca-ac3d37bfcb39}
USERENV(2e8.a0c) 09:16:47:803 ReadExtStatus: Reading Previous Status
for extension {42B5FAAE-6536-11d2-AE5A-0000F87571E3}
USERENV(2e8.a0c) 09:16:47:819 ReadStatus: Read Extension's Previous
status successfully.
USERENV(2e8.a0c) 09:16:47:819 ReadExtStatus: Reading Previous Status
for extension {4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}
USERENV(2e8.a0c) 09:16:47:819 ReadExtStatus: Reading Previous Status
for extension {827D319E-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(2e8.a0c) 09:16:47:819 ReadExtStatus: Reading Previous Status
for extension {A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}
USERENV(2e8.a0c) 09:16:47:819 ReadStatus: Read Extension's Previous
status successfully.
USERENV(2e8.a0c) 09:16:47:819 ReadExtStatus: Reading Previous Status
for extension {B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(2e8.a0c) 09:16:47:834 ReadExtStatus: Reading Previous Status
for extension {C631DF4C-088F-4156-B058-4375F0853CD8}
USERENV(2e8.a0c) 09:16:47:834 ReadExtStatus: Reading Previous Status
for extension {c6dc5466-785a-11d2-84d0-00c04fb169f7}
USERENV(2e8.a0c) 09:16:47:834 ReadExtStatus: Reading Previous Status
for extension {e437bc1c-aa7d-11d2-a382-00c04f991e27}
USERENV(2e8.a0c) 09:16:47:834 ProcessGPOs: Calling GetGPOInfo for
normal policy mode
USERENV(2e8.a0c) 09:16:47:834 GetGPOInfo:
********************************
USERENV(2e8.a0c) 09:16:47:850 GetGPOInfo: Entering...
USERENV(2e8.a0c) 09:16:47:850 GetGPOInfo: Server connection
established.
USERENV(2e8.a0c) 09:16:47:866 GetGPOInfo: Bound successfully.
USERENV(2e8.a0c) 09:16:47:866 SearchDSObject: Searching
<OU=IT,DC=domain,DC=local>
USERENV(2e8.a0c) 09:16:47:866 SearchDSObject: Found GPO(s):

<[LDAP://CN={C1B52100-69A3-4942-800B-6FCBF38D39A0},CN=Policies,CN=System,DC=domain,DC=local;0]>
USERENV(2e8.a0c) 09:16:47:866 ProcessGPO:
==============================
USERENV(2e8.a0c) 09:16:47:866 ProcessGPO: Deferring search for

<LDAP://CN={C1B52100-69A3-4942-800B-6FCBF38D39A0},CN=Policies,CN=System,DC=domain,DC=local>
USERENV(2e8.a0c) 09:16:47:881 SearchDSObject: Searching
<DC=domain,DC=local>
USERENV(2e8.a0c) 09:16:47:881 SearchDSObject: Found GPO(s):

<[LDAP://cn={91BA5BB2-35E6-4FFC-8A96-FAC3C7D74362},cn=policies,cn=system,DC=domain,DC=local;0][LDAP://cn={31B2F340-016D-11D2-945F-00C04FB984F

9},cn=policies,cn=system,DC=domain,DC=local;0]>
USERENV(2e8.a0c) 09:16:47:881 ProcessGPO:
==============================
USERENV(2e8.a0c) 09:16:47:881 ProcessGPO: Deferring search for

<LDAP://cn={91BA5BB2-35E6-4FFC-8A96-FAC3C7D74362},cn=policies,cn=system,DC=domain,DC=local>
USERENV(2e8.a0c) 09:16:47:881 ProcessGPO:
==============================
USERENV(2e8.a0c) 09:16:47:881 ProcessGPO: Deferring search for

<LDAP://cn={31B2F340-016D-11D2-945F-00C04FB984F9},cn=policies,cn=system,DC=domain,DC=local>
USERENV(2e8.9b8) 09:16:47:897 ProcessGPOs: Calling GetGPOInfo for
normal policy mode
USERENV(2e8.a0c) 09:16:47:897 GetGPOInfo: Leaving with 0
USERENV(2e8.9b8) 09:16:47:897 GetGPOInfo: Entering...
USERENV(2e8.a0c) 09:16:47:897 GetGPOInfo:
********************************
USERENV(2e8.a0c) 09:16:47:913 ProcessGPOs: GetGPOInfo failed.
USERENV(2e8.a0c) 09:16:47:913 ProcessGPOs: No WMI logging done in this
policy cycle.
USERENV(2e8.9b8) 09:16:47:913 GetGPOInfo: Server connection
established.
USERENV(2e8.a0c) 09:16:47:913 ProcessGPOs: Processing failed with error
0.
USERENV(2e8.a0c) 09:16:47:928 LeaveCriticalPolicySection: Critical
section 0xa40 has been released.
USERENV(2e8.9b8) 09:16:47:928 GetGPOInfo: Bound successfully.
USERENV(2e8.a0c) 09:16:47:928 ProcessGPOs: User Group Policy has been
applied.
USERENV(2e8.a0c) 09:16:47:928 ProcessGPOs: Leaving with 0.
USERENV(2e8.a0c) 09:16:47:928 GPOThread: Next refresh will happen in
118 minutes
USERENV(2e8.9b8) 09:16:47:944 SearchDSObject: Searching
<DC=domain,DC=local>
USERENV(2e8.9b8) 09:16:47:944 SearchDSObject: Found GPO(s):

<[LDAP://cn={91BA5BB2-35E6-4FFC-8A96-FAC3C7D74362},cn=policies,cn=system,DC=domain,DC=local;0][LDAP://cn={31B2F340-016D-11D2-945F-00C04FB984F

9},cn=policies,cn=system,DC=domain,DC=local;0]>
USERENV(2e8.9b8) 09:16:47:944 ProcessGPO:
==============================
USERENV(2e8.9b8) 09:16:47:944 ProcessGPO: Deferring search for

<LDAP://cn={91BA5BB2-35E6-4FFC-8A96-FAC3C7D74362},cn=policies,cn=system,DC=domain,DC=local>
USERENV(2e8.9b8) 09:16:47:959 ProcessGPO:
==============================
USERENV(2e8.9b8) 09:16:47:959 ProcessGPO: Deferring search for

<LDAP://cn={31B2F340-016D-11D2-945F-00C04FB984F9},cn=policies,cn=system,DC=domain,DC=local>
USERENV(2e8.9b8) 09:16:47:959 SearchDSObject: Searching
<CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local>
USERENV(2e8.9b8) 09:16:47:975 SearchDSObject: Found GPO(s): < >
USERENV(2e8.9b8) 09:16:47:975 EvaluateDeferredGPOs: Searching for GPOs
in cn=policies,cn=system,DC=domain,DC=local
USERENV(2e8.9b8) 09:16:47:975 ProcessGPO:
==============================
USERENV(2e8.9b8) 09:16:47:975 ProcessGPO: Searching
<cn={91BA5BB2-35E6-4FFC-8A96-FAC3C7D74362},cn=policies,cn=system,DC=domain,DC=local>
USERENV(2e8.9b8) 09:16:47:975 ProcessGPO: Machine has access to this
GPO.
USERENV(2e8.9b8) 09:16:47:991 ProcessGPO: GPO passes the filter check.
USERENV(2e8.9b8) 09:16:47:991 ProcessGPO: Found functionality version
of: 2
USERENV(2e8.9b8) 09:16:47:991 ProcessGPO: Found file system path of:

<\\domain.local\SysVol\domain.local\Policies\{91BA5BB2-35E6-4FFC-8A96-FAC3C7D74362}>
USERENV(2e8.9b8) 09:16:48:038 ProcessGPO: Found common name of:
<{91BA5BB2-35E6-4FFC-8A96-FAC3C7D74362}>
USERENV(2e8.9b8) 09:16:48:038 ProcessGPO: Found display name of:
<WSUS Clients Policy>
USERENV(2e8.9b8) 09:16:48:038 ProcessGPO: Found machine version of:
GPC is 11, GPT is 11
USERENV(2e8.9b8) 09:16:48:038 ProcessGPO: Found flags of: 1
USERENV(2e8.9b8) 09:16:48:038 ProcessGPO: Found extensions:
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}]
USERENV(2e8.9b8) 09:16:48:053 ProcessGPO:
==============================
USERENV(2e8.9b8) 09:16:48:053 ProcessGPO:
==============================
USERENV(2e8.9b8) 09:16:48:053 ProcessGPO: Searching
<cn={31B2F340-016D-11D2-945F-00C04FB984F9},cn=policies,cn=system,DC=domain,DC=local>
USERENV(2e8.9b8) 09:16:48:053 ProcessGPO: Machine has access to this
GPO.
USERENV(2e8.9b8) 09:16:48:053 ProcessGPO: GPO passes the filter check.
USERENV(2e8.9b8) 09:16:48:069 ProcessGPO: Found functionality version
of: 2
USERENV(2e8.9b8) 09:16:48:069 ProcessGPO: Found file system path of:

<\\domain.local\sysvol\domain.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(2e8.9b8) 09:16:48:069 ProcessGPO: Found common name of:
<{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(2e8.9b8) 09:16:48:084 ProcessGPO: Found display name of:
<Default Domain Policy>
USERENV(2e8.9b8) 09:16:48:084 ProcessGPO: Found machine version of:
GPC is 215, GPT is 215
USERENV(2e8.9b8) 09:16:48:084 ProcessGPO: Found flags of: 0
USERENV(2e8.9b8) 09:16:48:084 ProcessGPO: Found extensions:

[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA

-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
USERENV(2e8.9b8) 09:16:48:084 ProcessGPO:
==============================
USERENV(2e8.9b8) 09:16:48:100 GetGPOInfo: GPO Local Group Policy
doesn't contain any data since the version number is 0. It will be

skipped.
USERENV(2e8.9b8) 09:16:48:100 GetGPOInfo: Leaving with 1
USERENV(2e8.9b8) 09:16:48:100 GetGPOInfo:
********************************
USERENV(2e8.9b8) 09:16:48:100 ProcessGPOs: Logging Data for Target
<computername>.
USERENV(2e8.9b8) 09:16:48:100 GetWbemServices: CoCreateInstance
succeeded
USERENV(2e8.9b8) 09:16:48:116 ConnectToNameSpace: ConnectServer
returned 0x0
USERENV(2e8.9b8) 09:16:48:147 LogExtSessionStatus: Successfully logged
Extension Session data
USERENV(2e8.9b8) 09:16:48:147 CSessionLogger::Log: restoring old
security grps
USERENV(2e8.9b8) 09:16:48:178 LogRsopData: Successfully logged Rsop
data
USERENV(2e8.9b8) 09:16:48:178 ProcessGPOs: Logged Rsop Data
successfully.
USERENV(2e8.9b8) 09:16:48:209 ProcessGPOs: OpenThreadToken failed with
error 1008, assuming thread is not impersonating
USERENV(2e8.9b8) 09:16:48:209 ProcessGPOs: -----------------------
USERENV(2e8.9b8) 09:16:48:225 ProcessGPOs: Processing extension
Registry
USERENV(2e8.9b8) 09:16:48:225 ReadStatus: Read Extension's Previous
status successfully.
USERENV(2e8.9b8) 09:16:48:225 CompareGPOLists: The lists are the same.
USERENV(2e8.9b8) 09:16:48:225 CheckGPOs: No GPO changes but called in
force refresh flag or extension Registry needs to run force refresh in

foreground processing
USERENV(2e8.9b8) 09:16:48:225 ProcessGPOList: Entering for extension
Registry
USERENV(2e8.9b8) 09:16:48:225 ProcessGPOList: Passing in the force
refresh flag to Extension Registry
USERENV(2e8.9b8) 09:16:48:256 LogExtSessionStatus: Successfully logged
Extension Session data
USERENV(2e8.9b8) 09:16:48:256 EnterCriticalPolicySectionEx: Entering
with timeout 60000 and flags 0x2
USERENV(2e8.9b8) 09:16:48:256 EnterCriticalPolicySectionEx: Machine
critical section has been claimed. Handle = 0xb2c
USERENV(2e8.9b8) 09:16:48:256 EnterCriticalPolicySectionEx: Leaving
successfully.
USERENV(2e8.9b8) 09:16:48:272 ResetPolicies: Entering.
USERENV(2e8.9b8) 09:16:48:272 ParseRegistryFile: Entering with
<C:\Documents and Settings\All Users\ntuser.pol>.
USERENV(2e8.9b8) 09:16:48:272 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\WindowsUpdate\ElevateNonAdmins
USERENV(2e8.9b8) 09:16:48:272 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\WindowsUpdate\WUServer
USERENV(2e8.9b8) 09:16:48:272 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\WindowsUpdate\WUStatusServer
USERENV(2e8.9b8) 09:16:48:288 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\WindowsUpdate\AU\NoAutoUpdate
USERENV(2e8.9b8) 09:16:48:288 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\WindowsUpdate\AU\AUOptions
USERENV(2e8.9b8) 09:16:48:288 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\WindowsUpdate\AU\ScheduledInstallDay
USERENV(2e8.9b8) 09:16:48:288 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\WindowsUpdate\AU\ScheduledInstallTime
USERENV(2e8.9b8) 09:16:48:303 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\WindowsUpdate\AU\NoAutoRebootWithLoggedOnUsers
USERENV(2e8.9b8) 09:16:48:303 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\WindowsUpdate\AU\UseWUServer
USERENV(2e8.9b8) 09:16:48:303 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\WindowsUpdate\AU\AutoInstallMinorUpdates
USERENV(2e8.9b8) 09:16:48:303 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\System\RunLogonScriptSync
USERENV(2e8.9b8) 09:16:48:319 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\SystemCertificates\EFS\EFSBlob
USERENV(2e8.9b8) 09:16:48:319 DeleteRegistryValue: Deleted

Software\Policies\Microsoft\SystemCertificates\EFS\Certificates\1FD112AE145A04D0507B25BC3137CC2C3A0A2AEB\Blob
USERENV(2e8.9b8) 09:16:48:319 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\SystemCertificates\EFS\CRLs\
USERENV(2e8.9b8) 09:16:48:319 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\SystemCertificates\EFS\CTLs\
USERENV(2e8.9b8) 09:16:48:334 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\W32time\Parameters\NtpServer
USERENV(2e8.9b8) 09:16:48:334 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\W32time\Parameters\Type
USERENV(2e8.9b8) 09:16:48:334 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\W32time\TimeProviders\NtpClient\CrossSiteSyncFlags
USERENV(2e8.9b8) 09:16:48:334 DeleteRegistryValue: Deleted

Software\Policies\Microsoft\W32time\TimeProviders\NtpClient\ResolvePeerBackoffMinutes
USERENV(2e8.9b8) 09:16:48:334 DeleteRegistryValue: Deleted

Software\Policies\Microsoft\W32time\TimeProviders\NtpClient\ResolvePeerBackoffMaxTimes
USERENV(2e8.9b8) 09:16:48:350 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\W32time\TimeProviders\NtpClient\SpecialPollInterval
USERENV(2e8.9b8) 09:16:48:350 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\W32time\TimeProviders\NtpClient\EventLogFlags
USERENV(2e8.9b8) 09:16:48:350 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\W32time\TimeProviders\NtpClient\Enabled
USERENV(2e8.9b8) 09:16:48:350 ParseRegistryFile: Leaving.
USERENV(2e8.9b8) 09:16:48:366 ResetPolicies: Leaving.
USERENV(2e8.9b8) 09:16:48:366 ParseRegistryFile: Entering with

<\\domain.local\SysVol\domain.local\Policies\{91BA5BB2-35E6-4FFC-8A96-FAC3C7D74362}\Machine\registry.pol>.
USERENV(2e8.9b8) 09:16:48:381 SetRegistryValue: ElevateNonAdmins => 1
[OK]
USERENV(2e8.9b8) 09:16:48:381 SetRegistryValue: WUServer =>
http://server:8530 [OK]
USERENV(2e8.9b8) 09:16:48:397 SetRegistryValue: WUStatusServer =>
http://server:8530 [OK]
USERENV(2e8.9b8) 09:16:48:397 SetRegistryValue: NoAutoUpdate => 0 [OK]
USERENV(2e8.9b8) 09:16:48:397 SetRegistryValue: AUOptions => 4 [OK]
USERENV(2e8.9b8) 09:16:48:413 SetRegistryValue: ScheduledInstallDay =>
0 [OK]
USERENV(2e8.9b8) 09:16:48:413 SetRegistryValue: ScheduledInstallTime =>
10 [OK]
USERENV(2e8.9b8) 09:16:48:413 SetRegistryValue:
NoAutoRebootWithLoggedOnUsers => 1 [OK]
USERENV(2e8.9b8) 09:16:48:428 SetRegistryValue: UseWUServer => 1 [OK]
USERENV(2e8.9b8) 09:16:48:428 SetRegistryValue: AutoInstallMinorUpdates
=> 1 [OK]
USERENV(2e8.9b8) 09:16:48:428 ParseRegistryFile: Leaving.
USERENV(2e8.9b8) 09:16:48:428 AllocAdmFileInfo: Adding File name

<\\domain.local\SysVol\domain.local\Policies\{91BA5BB2-35E6-4FFC-8A96-FAC3C7D74362}\Adm\conf.adm>
to the Adm list.
USERENV(2e8.9b8) 09:16:48:444 AllocAdmFileInfo: Adding File name

<\\domain.local\SysVol\domain.local\Policies\{91BA5BB2-35E6-4FFC-8A96-FAC3C7D74362}\Adm\inetres.adm>
to the Adm list.
USERENV(2e8.9b8) 09:16:48:444 AllocAdmFileInfo: Adding File name

<\\domain.local\SysVol\domain.local\Policies\{91BA5BB2-35E6-4FFC-8A96-FAC3C7D74362}\Adm\system.adm>
to the Adm list.
USERENV(2e8.9b8) 09:16:48:444 AllocAdmFileInfo: Adding File name

<\\domain.local\SysVol\domain.local\Policies\{91BA5BB2-35E6-4FFC-8A96-FAC3C7D74362}\Adm\wmplayer.adm>
to the Adm list.
USERENV(2e8.9b8) 09:16:48:459 AllocAdmFileInfo: Adding File name

<\\domain.local\SysVol\domain.local\Policies\{91BA5BB2-35E6-4FFC-8A96-FAC3C7D74362}\Adm\wuau.adm>
to the Adm list.
USERENV(2e8.9b8) 09:16:48:459 ParseRegistryFile: Entering with

<\\domain.local\sysvol\domain.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\registry.pol>.
USERENV(2e8.9b8) 09:16:48:475 SetRegistryValue: RunLogonScriptSync => 1
[OK]
USERENV(2e8.9b8) 09:16:48:475 SetRegistryValue: EFSBlob was set
successfully
USERENV(2e8.9b8) 09:16:48:491 SetRegistryValue: Blob was set
successfully
USERENV(2e8.9b8) 09:16:48:491 SetRegistryValue: NtpServer =>
time.windows.com,0x1 [OK]
USERENV(2e8.9b8) 09:16:48:491 SetRegistryValue: Type => NTP [OK]
USERENV(2e8.9b8) 09:16:48:506 SetRegistryValue: CrossSiteSyncFlags => 1
[OK]
USERENV(2e8.9b8) 09:16:48:506 SetRegistryValue:
ResolvePeerBackoffMinutes => 10 [OK]
USERENV(2e8.9b8) 09:16:48:506 SetRegistryValue:
ResolvePeerBackoffMaxTimes => 7 [OK]
USERENV(2e8.9b8) 09:16:48:522 SetRegistryValue: SpecialPollInterval =>
2400 [OK]
USERENV(2e8.9b8) 09:16:48:522 SetRegistryValue: EventLogFlags => 0
[OK]
USERENV(2e8.9b8) 09:16:48:522 SetRegistryValue: Enabled => 1 [OK]
USERENV(2e8.9b8) 09:16:48:522 ParseRegistryFile: Leaving.
USERENV(2e8.9b8) 09:16:48:538 AllocAdmFileInfo: Adding File name

<\\domain.local\sysvol\domain.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\conf.adm>
to the Adm list.
USERENV(2e8.9b8) 09:16:48:538 AllocAdmFileInfo: Adding File name

<\\domain.local\sysvol\domain.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\inetres.adm>
to the Adm list.
USERENV(2e8.9b8) 09:16:48:538 AllocAdmFileInfo: Adding File name

<\\domain.local\sysvol\domain.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\system.adm>
to the Adm list.
USERENV(2e8.9b8) 09:16:48:553 AllocAdmFileInfo: Adding File name

<\\domain.local\sysvol\domain.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\wmplayer.adm>
to the Adm list.
USERENV(2e8.9b8) 09:16:48:553 AllocAdmFileInfo: Adding File name

<\\domain.local\sysvol\domain.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\wuau.adm>
to the Adm list.
USERENV(2e8.9b8) 09:16:48:741 LogRegistry RsopData: Successfully logged
registry Rsop data
USERENV(2e8.9b8) 09:16:48:772 CAdmFileLogger::Log: Logging

\\domain.local\sysvol\domain.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\wuau.adm
USERENV(2e8.9b8) 09:16:48:772 CAdmFileLogger::Log: Logging

\\domain.local\sysvol\domain.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\wmplayer.adm
USERENV(2e8.9b8) 09:16:48:772 CAdmFileLogger::Log: Logging

\\domain.local\sysvol\domain.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\system.adm
USERENV(2e8.9b8) 09:16:48:772 CAdmFileLogger::Log: Logging

\\domain.local\sysvol\domain.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\inetres.adm
USERENV(2e8.9b8) 09:16:48:788 CAdmFileLogger::Log: Logging

\\domain.local\sysvol\domain.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\conf.adm
USERENV(2e8.9b8) 09:16:48:788 CAdmFileLogger::Log: Logging

\\domain.local\SysVol\domain.local\Policies\{91BA5BB2-35E6-4FFC-8A96-FAC3C7D74362}\Adm\wuau.adm
USERENV(2e8.9b8) 09:16:48:788 CAdmFileLogger::Log: Logging

\\domain.local\SysVol\domain.local\Policies\{91BA5BB2-35E6-4FFC-8A96-FAC3C7D74362}\Adm\wmplayer.adm
USERENV(2e8.9b8) 09:16:48:803 CAdmFileLogger::Log: Logging

\\domain.local\SysVol\domain.local\Policies\{91BA5BB2-35E6-4FFC-8A96-FAC3C7D74362}\Adm\system.adm
USERENV(2e8.9b8) 09:16:48:803 CAdmFileLogger::Log: Logging

\\domain.local\SysVol\domain.local\Policies\{91BA5BB2-35E6-4FFC-8A96-FAC3C7D74362}\Adm\inetres.adm
USERENV(2e8.9b8) 09:16:48:803 CAdmFileLogger::Log: Logging

\\domain.local\SysVol\domain.local\Policies\{91BA5BB2-35E6-4FFC-8A96-FAC3C7D74362}\Adm\conf.adm
USERENV(2e8.9b8) 09:16:48:819 LogAdmRsopData: Successfully logged Adm
data
USERENV(2e8.9b8) 09:16:48:819 LeaveCriticalPolicySection: Critical
section 0xb2c has been released.
USERENV(2e8.9b8) 09:16:48:819 ProcessGPOList: Extension Registry was
able to log data. RsopStatus = 0x0, dwRet = 0, Clearing the dirty bit
USERENV(2e8.9b8) 09:16:48:850 ProcessGPOs: -----------------------
USERENV(2e8.9b8) 09:16:48:850 ProcessGPOs: -----------------------
USERENV(2e8.9b8) 09:16:48:850 ProcessGPOs: Processing extension
Wireless
USERENV(2e8.9b8) 09:16:48:866 CompareGPOLists: The lists are the same.
USERENV(2e8.9b8) 09:16:48:866 CheckGPOs: No GPO changes but couldn't
read extension Wireless's status or policy time.
USERENV(2e8.9b8) 09:16:48:866 ProcessGPOs: Extension Wireless skipped
because both deleted and changed GPO lists are empty.
USERENV(2e8.9b8) 09:16:48:866 ProcessGPOs: -----------------------
USERENV(2e8.9b8) 09:16:48:866 ProcessGPOs: Processing extension Folder
Redirection
USERENV(2e8.9b8) 09:16:48:866 CompareGPOLists: The lists are the same.
USERENV(2e8.9b8) 09:16:48:881 CheckGPOs: No GPO changes but couldn't
read extension Folder Redirection's status or policy time.
USERENV(2e8.9b8) 09:16:48:881 ProcessGPOs: Extension Folder Redirection
skipped with flags 0x110007.
USERENV(2e8.9b8) 09:16:48:881 ProcessGPOs: -----------------------
USERENV(2e8.9b8) 09:16:48:881 ProcessGPOs: Processing extension
Microsoft Disk Quota
USERENV(2e8.9b8) 09:16:48:881 CompareGPOLists: The lists are the same.
USERENV(2e8.9b8) 09:16:48:897 CheckGPOs: No GPO changes but couldn't
read extension Microsoft Disk Quota's status or policy time.
USERENV(2e8.9b8) 09:16:48:897 ProcessGPOs: Extension Microsoft Disk
Quota skipped because both deleted and changed GPO lists are empty.
USERENV(2e8.9b8) 09:16:48:897 ProcessGPOs: -----------------------
USERENV(2e8.9b8) 09:16:48:897 ProcessGPOs: Processing extension QoS
Packet Scheduler
USERENV(2e8.9b8) 09:16:48:897 CompareGPOLists: The lists are the same.
USERENV(2e8.9b8) 09:16:48:897 CheckGPOs: No GPO changes but couldn't
read extension QoS Packet Scheduler's status or policy time.
USERENV(2e8.9b8) 09:16:48:913 ProcessGPOs: Extension QoS Packet
Scheduler skipped because both deleted and changed GPO lists are empty.
USERENV(2e8.9b8) 09:16:48:913 ProcessGPOs: -----------------------
USERENV(2e8.9b8) 09:16:48:913 ProcessGPOs: Processing extension Scripts
USERENV(2e8.9b8) 09:16:48:913 CompareGPOLists: The lists are the same.
USERENV(2e8.9b8) 09:16:48:913 CheckGPOs: No GPO changes but couldn't
read extension Scripts's status or policy time.
USERENV(2e8.9b8) 09:16:48:928 ProcessGPOs: Extension Scripts skipped
because both deleted and changed GPO lists are empty.
USERENV(2e8.9b8) 09:16:48:928 ProcessGPOs: -----------------------
USERENV(2e8.9b8) 09:16:48:928 ProcessGPOs: Processing extension
Internet Explorer Zonemapping
USERENV(2e8.9b8) 09:16:48:928 CompareGPOLists: The lists are the same.
USERENV(2e8.9b8) 09:16:48:928 CheckGPOs: No GPO changes but couldn't
read extension Internet Explorer Zonemapping's status or policy time.
USERENV(2e8.9b8) 09:16:48:928 ProcessGPOs: Extension Internet Explorer
Zonemapping skipped because both deleted and changed GPO lists are

empty.
USERENV(2e8.9b8) 09:16:48:944 ProcessGPOs: -----------------------
USERENV(2e8.9b8) 09:16:48:944 ProcessGPOs: Processing extension
Security
USERENV(2e8.9b8) 09:16:48:944 ReadStatus: Read Extension's Previous
status successfully.
USERENV(2e8.9b8) 09:16:48:944 CompareGPOLists: The lists are the same.
USERENV(2e8.9b8) 09:16:48:944 CheckGPOs: No GPO changes but called in
force refresh flag or extension Security needs to run force refresh in

foreground processing
USERENV(2e8.9b8) 09:16:48:959 ProcessGPOList: Entering for extension
Security
USERENV(2e8.9b8) 09:16:48:959 ProcessGPOList: Passing in the force
refresh flag to Extension Security
USERENV(2e8.9b8) 09:16:48:975 LogExtSessionStatus: Successfully logged
Extension Session data
USERENV(2e8.9b8) 09:16:50:272 ProcessGPOList: Extension Security
returned 0x0.
USERENV(2e8.9b8) 09:16:50:272 ProcessGPOList: Extension Security was
able to log data. RsopStatus = 0x0, dwRet = 0, Clearing the dirty bit
USERENV(2e8.9b8) 09:16:50:288 ProcessGPOs: -----------------------
USERENV(2e8.9b8) 09:16:50:303 ProcessGPOs: -----------------------
USERENV(2e8.9b8) 09:16:50:303 ProcessGPOs: Processing extension
Internet Explorer Branding
USERENV(2e8.9b8) 09:16:50:303 CompareGPOLists: The lists are the same.
USERENV(2e8.9b8) 09:16:50:303 CheckGPOs: No GPO changes but couldn't
read extension Internet Explorer Branding's status or policy time.
USERENV(2e8.9b8) 09:16:50:303 ProcessGPOs: Extension Internet Explorer
Branding skipped with flags 0x110007.
USERENV(2e8.9b8) 09:16:50:303 ProcessGPOs: -----------------------
USERENV(2e8.9b8) 09:16:50:319 ProcessGPOs: Processing extension EFS
recovery
USERENV(2e8.9b8) 09:16:50:319 ReadStatus: Read Extension's Previous
status successfully.
USERENV(2e8.9b8) 09:16:50:319 CompareGPOLists: The lists are the same.
USERENV(2e8.9b8) 09:16:50:319 CheckGPOs: No GPO changes but called in
force refresh flag or extension EFS recovery needs to run force refresh

in foreground processing
USERENV(2e8.9b8) 09:16:50:319 ProcessGPOList: Entering for extension
EFS recovery
USERENV(2e8.9b8) 09:16:50:334 ProcessGPOList: Passing in the force
refresh flag to Extension EFS recovery
USERENV(2e8.9b8) 09:16:50:334 ReadStatus: Read Extension's Previous
status successfully.
USERENV(2e8.9b8) 09:16:50:350 LogExtSessionStatus: Successfully logged
Extension Session data
USERENV(2e8.9b8) 09:16:50:350 ProcessGPOList: Extension EFS recovery
returned 0x0.
USERENV(2e8.9b8) 09:16:50:350 ProcessGPOList: Extension EFS recovery
doesn't support rsop logging
USERENV(2e8.9b8) 09:16:50:381 ProcessGPOs: -----------------------
USERENV(2e8.9b8) 09:16:50:381 ProcessGPOs: -----------------------
USERENV(2e8.9b8) 09:16:50:381 ProcessGPOs: Processing extension
Microsoft Offline Files
USERENV(2e8.9b8) 09:16:50:381 CompareGPOLists: The lists are the same.
USERENV(2e8.9b8) 09:16:50:381 CheckGPOs: No GPO changes but couldn't
read extension Microsoft Offline Files's status or policy time.
USERENV(2e8.9b8) 09:16:50:381 ProcessGPOs: Extension Microsoft Offline
Files skipped because both deleted and changed GPO lists are empty.
USERENV(2e8.9b8) 09:16:50:397 ProcessGPOs: -----------------------
USERENV(2e8.9b8) 09:16:50:397 ProcessGPOs: Processing extension
Software Installation
USERENV(2e8.9b8) 09:16:50:397 CompareGPOLists: The lists are the same.
USERENV(2e8.9b8) 09:16:50:397 CheckGPOs: No GPO changes but couldn't
read extension Software Installation's status or policy time.
USERENV(2e8.9b8) 09:16:50:397 ProcessGPOs: Extension Software
Installation skipped because both deleted and changed GPO lists are
empty.
USERENV(2e8.9b8) 09:16:50:397 ProcessGPOs: -----------------------
USERENV(2e8.9b8) 09:16:50:413 ProcessGPOs: Processing extension IP
Security
USERENV(2e8.9b8) 09:16:50:413 CompareGPOLists: The lists are the same.
USERENV(2e8.9b8) 09:16:50:413 CheckGPOs: No GPO changes but couldn't
read extension IP Security's status or policy time.
USERENV(2e8.9b8) 09:16:50:413 ProcessGPOs: Extension IP Security
skipped because both deleted and changed GPO lists are empty.
USERENV(2e8.9b8) 09:16:50:413 LeaveCriticalPolicySection: Critical
section 0xb10 has been released.
USERENV(2e8.147c) 09:16:50:584 PolicyChangedThread: Calling UpdateUser
with 1.
USERENV(2e8.9b8) 09:16:50:584 ProcessGPOs: Computer Group Policy has
been applied.
USERENV(2e8.9b8) 09:16:50:678 ProcessGPOs: Leaving with 1.
USERENV(13f0.220) 09:16:50:756 LibMain: Process Name:
C:\WINDOWS\system32\userinit.exe
USERENV(2e8.9b8) 09:16:50:772 EnterCriticalPolicySectionEx: Entering
with timeout 600000 and flags 0x0
USERENV(2e8.9b8) 09:16:50:866 EnterCriticalPolicySectionEx: Machine
critical section has been claimed. Handle = 0xb58
USERENV(2e8.9b8) 09:16:50:881 EnterCriticalPolicySectionEx: Leaving
successfully.
USERENV(2e8.147c) 09:16:50:928 PolicyChangedThread: Leaving
USERENV(2e8.9b8) 09:16:50:944 LeaveCriticalPolicySection: Critical
section 0xb58 has been released.
USERENV(2e8.9b8) 09:16:50:959 GPOThread: Next refresh will happen in
90 minutes
USERENV(820.1678) 09:16:57:053 LibMain: Process Name:
C:\WINDOWS\system32\NOTEPAD.EXE

.

References:
- Userenv 1030 & LSASRV 40961 Errors
  - From: James
- Re: Userenv 1030 & LSASRV 40961 Errors
  - From: James

Prev by Date: Re: Userenv 1030 & LSASRV 40961 Errors
Next by Date: Re: Userenv 1030 & LSASRV 40961 Errors
Previous by thread: Re: Userenv 1030 & LSASRV 40961 Errors
Next by thread: Re: Userenv 1030 & LSASRV 40961 Errors
Index(es):
- Date
- Thread

Relevant Pages

Re: Userenv 1030 & LSASRV 40961 Errors
... Policy processing... ... with timeout 600000 and flags 0x0 ... Extension Session data ...
(microsoft.public.windows.group_policy)
Re: Userenv 1030 & LSASRV 40961 Errors
... Policy processing... ... with timeout 600000 and flags 0x0 ... Extension Session data ...
(microsoft.public.windows.group_policy)
Windows cannot query for the list of Group Policy Objects Event log ID 1030
... I have some users that are not getting the user policy on some computers. ... timeout 600000 and flags 0x0 ... extension Registry's status or policy time. ...
(microsoft.public.windows.group_policy)
Re: Userenv 1030 & LSASRV 40961 Errors
... Windows cannot query for the list of Group Policy objects. ... Extension Session data ... refresh flag to Extension Registry ... Quota skipped because both deleted and changed GPO lists are empty. ...
(microsoft.public.windows.server.active_directory)
Userenv 1030 & LSASRV 40961 Errors
... Windows cannot query for the list of Group Policy objects. ... Extension Session data ... refresh flag to Extension Registry ... Quota skipped because both deleted and changed GPO lists are empty. ...
(microsoft.public.windows.server.active_directory)