userenv GPO flood

[J Torres]

I'm having the issue with all the computers in the
domain. They all get this userenv error:

The Group Policy client-side extension IP Security was
passed flags (17) and returned a failure status code of
(8219).

The userlog has the following errors:
USERENV(a4.408) 05:01:47:056 ProcessGPOs: Extension IP
Security ProcessGroupPolicy failed, status 0x201b.

I've seen this in a bunch of posting but no solution was
ever given. Did anybody have any luck yet?

JT

 

[Tom Ausburne]

This probably comes from assigning but not configuring an IPSEC policy
Check to see if this is the case.

If policies were assigned but then deleted you can probably assign an
IPsec
item on the Default Domain Controllers policy and then close the
policy.
Then re-open the policy and unassign the IPSEC policy.
Use Secedit to refresh the machine policy.

Tom Ausburne (MSFT)
Windows 2000 Directory Services
This posting is provided "AS IS" with no warranties, and confers no
rights.