Event 1018 "Windows cannot impersonate the user"

P

Paul J. Hurley

I have been seeing a run of "Windows cannot impersonate the user" errors
logged in the Application section of the Event Viewer on my WinXP Pro
system. Specifically, the error is a Userenv error with Event ID 1081:

Windows cannot impersonate the user. (The handle is invalid. ). Group
Policy processing aborted.

This message can appear when the machine is in use or when idle. Clicking
the "For more information" link just takes me to a "no additional
information about this issue" help page. Googling the message is not much
help either. One suggestion was to run the hive cleanup service, but this
doesn't make any difference.

I considered setting an alert in the MMC, but I can't seem to find a way to
alert on a specific Userenv ID.

I'm afraid this might be a malware issue, but none of my assorted
scanners/cleaners find anything out of the ordinary. I'm at a bit of a
loss here. Any suggestions would be greatly appreciated.

Paul
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top