Computer hasitations and lockups

[UnixBme]

Users on both XP and 2000 are complaining the their PCs are sputting
and sputtering along. On one PC the lady tells me it happens when she
opens Office applications. Their event logs are filled with Userenv
and COM+ messages. I find it interesting that informational VirusScan
Enterprise McSheild and Security policy/GPO messages appear near the
same time and similar frequency as the COM+ messages. I have no idea
about the causes of Userenv messages.

Event Type: Warning
Event Source: EventSystem
Event Category: (52)
Event ID: 4356
Date: 8/5/2004
Time: 10:23:41 AM
User: N/A
Description:
The COM+ Event System failed to create an instance of the subscriber
partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:{6295DF2D-35EE-11D1-8707-00C04FD93327}.
CoGetObject returned HRESULT 8000401A.


Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1096
Date: 8/4/2004
Time: 10:37:46 AM
User: NT AUTHORITY\SYSTEM
Description:
Windows cannot access the registry policy file,
\\<removed>\sysvol\<removed>\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\registry.pol.
(Access is denied. ).

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1043
Date: 8/4/2004
Time: 8:39:46 AM
User: NT AUTHORITY\SYSTEM
Description:
Windows cannot access the registry information at
\\<removed>\sysvol\<removed>\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\registry.pol.
(Access is denied. ).

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 7/20/2004
Time: 3:45:03 AM
User: NT AUTHORITY\SYSTEM
Description:
Windows cannot access the registry information at
\\<removed>\sysvol\<removed>\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\registry.pol
with (5).

 

[Steven L Umbach]

I don't know if this is your problem but it is worth checking out. Some virus removal
programs reset security settings on the sysvol folder for either share, ntfs, or
both. Your Event ID's indicate that access to the sysvol folder or at least the
default domain GPO for computer is being denied. I suppose you could also have
corruption of your default domain GPO. Look for any Event ID's that may be pertinent
on your domain controllers and try to open and edit the default domain GPO to see if
you can successfully make a change for computer configuration/security policy. ---
Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;312031 --- shows what sysvol
permissions should be.

Users on both XP and 2000 are complaining the their PCs are sputting
and sputtering along. On one PC the lady tells me it happens when she
opens Office applications. Their event logs are filled with Userenv
and COM+ messages. I find it interesting that informational VirusScan
Enterprise McSheild and Security policy/GPO messages appear near the
same time and similar frequency as the COM+ messages. I have no idea
about the causes of Userenv messages.

Event Type: Warning
Event Source: EventSystem
Event Category: (52)
Event ID: 4356
Date: 8/5/2004
Time: 10:23:41 AM
User: N/A
Description:
The COM+ Event System failed to create an instance of the subscriber
partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:{6295DF2D-35EE-11D1-8707-00C04FD
93327}.
CoGetObject returned HRESULT 8000401A.


Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1096
Date: 8/4/2004
Time: 10:37:46 AM
User: NT AUTHORITY\SYSTEM
Description:
Windows cannot access the registry policy file,

(Access is denied. ).

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1043
Date: 8/4/2004
Time: 8:39:46 AM
User: NT AUTHORITY\SYSTEM
Description:
Windows cannot access the registry information at