Event 1000 every 5 minutes followed by event 1704

[Stefano]

Dear friends,
i have a problem and i have read that many other users have the same
but i haven't fine any working solution.
I have a domain with 2 DC
In the first DC all works fine but in the second i got Event ID 1000
every 5 minutes

.... system registry
\\mydomain\sysvol\mydomain\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\registry.pol
with (5).
after 5 or 6 times i got this other event 1704

but after 20 minuts all starts again.

I have a DFS root with 3 replication node inside it that replicate
directories from the second DC to first.

Thanks to all
Stefano

 

[Tim Springston \(MSFT\)]

Hi Stefano-

The error is an access denied when the machine tries to reapply the Default
Domain Policy on your DC (evevery 5 minutes is the default for that). It
sounds like something on your machine may be intermittently preventing
access to this file.

I would suggest enable auditing of that file
(%systemroot%\sysvol\sysvol\mydomain\Policies\{31B2F340-016D-11D2-945F-00C04
FB984F9}\Machine\registry.pol) to see what may be causing that access
denied.

An alternative is that it could be something happening to a service or
services intermittently. But I'd start off with the auditing.

 

[Stefano]

Hi Tim
i have enable the auditing of the file for every success or denied
event but nothing result.
I have follow the q285923 and the q290647 with no success.
Any other directions ?
Thanks again
Stefano