Problem with RSOP

[kingassur]

Hi

I have a problem with a Windows Server 2003 Standard
Edition, Domain Controller.
I receive every 5 minutes the following error message:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1091
Date: 1/9/2004
Time: 11:58:15 AM
User: NT AUTHORITY\SYSTEM
Computer: CDMS0001
Description:
The Group Policy client-side extension Security failed to
log RSOP (Resultant Set of Policy) data. Please look for
any errors reported earlier by that extension.

[Vsevolod Titov [MSFT]]

Sounds like something is wrong with WMI. Can you launch RSOP snap-in
(rsop.msc) and see if it displays anything at all? If basic RSOP
functionality works, then enable debug tracing for security extension and
for Group Policy Engine and analyze log files they produce. The settings are
below in the table I copied from GP troubleshooting doc
(http://download.microsoft.com/download/5/f/9/5f949309-c0f8-4a92-bd65-64ce312e2a92/gpmc_troubleshooting.doc).
Table 4 Client Log Files for Troubleshooting Group Policy -

Output from:
Is located in this file:
Enable verbose logging by adding this key or value.
.to this registry key

Group Policy core (UserEnv) and registry CSE
%windir%\debug\usermode
\UserEnv.log
UserEnvDebugLevel = REG_DWORD 0x10002
HKEY_LOCAL_MACHINE
\Software
\Microsoft
\Windows NT
\CurrentVersion
\Winlogon

Security CSE
%windir%\security\logs
\winlogon.log
ExtensionDebugLevel = REG_DWORD 0x2
HKEY_LOCAL_MACHINE
\Software
\Microsoft
\Windows NT
\CurrentVersion
\Winlogon
\GpExtensions
\{827d319e-6eac-11d2-a4ea-00c04f79f83a}\

--
V.T.
This posting is provided "AS IS" with no warranties, and confers no rights.

"kingassur" <anon...@discussions.microsoft.com> wrote in message
news:0d5301c3d92b$960f1da0$a401...@phx.gbl...

[Vsevolod Titov [MSFT]]

The table I pasted appears to be jammed. You can just look at the original
gpmc_troubleshooting.doc to see the table as it supposed to be seen.

--
V.T.
This posting is provided "AS IS" with no warranties, and confers no rights.

"Vsevolod Titov [MSFT]" <vti...@online.microsoft.com> wrote in message
news:uE9%23ZLW2D...@TK2MSFTNGP10.phx.gbl...

[Eric Voskuil]

WRT the "template file error", my educated guess is this results from the
RSoP snap-in attempting to merge WMI data that it collects from the query,
with detail information that resides in the GPO (template data, like ADM
template). I know that this is the case with ADM templates in ADM policy,
and may very well be the case with security settings as well. If so, the
only soultion would be to ensure that the file(s) of the correct versions
reside in the GPO(s) - all of them, since the WMI/RSoP data may be reporting
against multiple GPOs. It also may be that these detail settings are not
pulled from the GPO, I can't say for sure WRT non-ADM policies.

You may also want to try GPMC instead. It uses the same WMI data, but it
uses some different techniques and error handling to merge the WMI data with
details about the policies. It may give a more descriptive error or even
work properly.

This is a general problem with the implementations of some MS extensions,
since it's easy for descriptive data to get out of sync with WMI/RSoP data.
For this reason, we always write all of the settings descriptive details to
the WMI repository along with the other data - that way the only data
required for presentation is RSoP data that exists in the query.

WRT the failed to log RSoP data event log message, 5 minutes is the default
refresh interval for DCs, so it's just failing to write RSoP data for the
security extension each time policy runs. If you are also setting ADM
template policy, and/or other types, and arean't getting this error for
them, there isn't a general RSoP failure. That means there is either
corruption of the WMI namespace for security settings only, or some other
non WMI problem. Technically this error means that the extension was
supposed to write data, but finished processing and never did so. This may
have happened for the same reason that is causing the problem above (or the
problem above may be an error that results from the error on RSoP data for
Security - but that is not the type of error we would expect). I believe
that some of the MS client-side extensions attempt to match up template data
with WMI settings, and if the template file(s) was missing, it might cause
such a problem.

You might want to reconfigure one of the security settings in each of the
GPOs that are affecting this DC and see if it corrects the problem. I'm not
sure how to repair the WMI namespace, but it should be doable using some
admin tool against the MOF files on the machine.

Regards,

Eric Voskuil
Policy Maker
http://www.autoprof.com/policy

<kin...@gmx.net> wrote in message
news:uDN8tzb2...@TK2MSFTNGP11.phx.gbl...
> Hi thanks yours answers , when I start the rsop.msc I receivethe following
> error message:
> Computer Configuration, Windows Settings, Security Settings "Windows
cannot
> open template files"
>
>
> "Vsevolod Titov [MSFT]" <vti...@online.microsoft.com> schrieb im
Newsbeitrag
> news:O$DTAUW2D...@TK2MSFTNGP10.phx.gbl...