Event Id 1000 every 5 minutes

[Jimmy]

I am getting the following error in the App log every 5
minutes.

WIndows cannot access the registry information at
\\mydomain\sysvol\mydomain\policies\{31B2F340-016D-11D2-
945F-00C04FB984F9}\MACHINE\REGISTRY.POL

This happened I installed sp4. I have checked permissions
and the bindings as the KB suggested. No luck..Any ideas?
Thanks.

 

[Guest]

Permissions on Sysvol is the most common reason for this. Make absolutely certain that at least Authenticated Users have Read on both the NTFS and share level permissions throughout Sysvol

Other things that cause this -
- DFS client service is disable
- TCP/IP Netbios helper server is disable
- Time ske
- Authenticated Users group (which includes machine accounts) doesn't have the Bypass Traverse Checking user right

 

[Guest]

I dont know what I am missing. Like I said, this was not a
problem until SP4 was installed. I went thru KB 290647
which describes your solution, checked the services you
recommended, and updated the time via another dc that is
running sp3 and not experiencing this. any other ideas??

-----Original Message-----
Permissions on Sysvol is the most common reason for this.

Make absolutely certain that at least Authenticated Users
have Read on both the NTFS and share level permissions
throughout Sysvol.

Other things that cause this -
- DFS client service is disabled
- TCP/IP Netbios helper server is disabled
- Time skew
- Authenticated Users group (which includes machine

accounts) doesn't have the Bypass Traverse Checking user
right.

--
Craig Landis [MSFT]
(e-mail address removed)

This posting is provided "AS IS" with no warranties, and confers no rights.
.

 

[Guest]

One more question. Should I be checking these suggestions
on the dc that has the errors on the event log, or all the
dc's. (I have 9). Thanks..

-----Original Message-----
Permissions on Sysvol is the most common reason for this.

Make absolutely certain that at least Authenticated Users
have Read on both the NTFS and share level permissions
throughout Sysvol.

Other things that cause this -
- DFS client service is disabled
- TCP/IP Netbios helper server is disabled
- Time skew
- Authenticated Users group (which includes machine

accounts) doesn't have the Bypass Traverse Checking user
right.

--
Craig Landis [MSFT]
(e-mail address removed)

This posting is provided "AS IS" with no warranties, and confers no rights.
.

 

[David Everett [MSFT]]

Is there an error code at the end of the Userenv 1000 description?

For Example:
Description:
Windows cannot access the registry information at
\\kolbent.local\sysvol\kolbent.local\Policies\{31B2F340-016D-11D2-945F-00C04
FB984F9}
\Machine\registry.pol with (53). <-----What is the error you are getting
here?

Are you getting any Errors from SceCli in the application log? If you are
what is the Event ID: and the Description in this event?

Do you have any third-party network clients installed? If you do, does the
error go away if you uninstall it?

Do you have more than one NIC enabled on the machine getting these errors?
--
David Everett
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.

One more question. Should I be checking these suggestions
on the dc that has the errors on the event log, or all the
dc's. (I have 9). Thanks..

-----Original Message-----
Permissions on Sysvol is the most common reason for this.

Make absolutely certain that at least Authenticated Users
have Read on both the NTFS and share level permissions
throughout Sysvol.

Other things that cause this -
- DFS client service is disabled
- TCP/IP Netbios helper server is disabled
- Time skew
- Authenticated Users group (which includes machine

accounts) doesn't have the Bypass Traverse Checking user
right.

--
Craig Landis [MSFT]
(e-mail address removed)

This posting is provided "AS IS" with no warranties, and confers no rights.
.