Group Policy Errors

[Guest]

I keep getting errors in my application log Event ID 1202 and Event ID 1085,
I have read every article I can find on how to fix this and cant seem to
clear it up.

Everytime I to a GPUPDATE, these two errors occur again, now after 3 years
it seems my group password policies are not working. Does anyone have a
solution that I can do on a mass scale. This is affecting every client on my
network? If its a policy problem, is there a way I can just reset my entire
policy structure and start over????

Thank you, please help

 

[Guest]

Hi Steve,

I'm sure you have done this, but try renaming:
C:\WINDOWS\security\Database\secedit.sdb file to secedit.old
Then open CMD and run “gpupdate.exe /forceâ€
run gpupdate 2-3 times

If that doesn't work, try:

Run: rsop.msc
see if you have any issues there....

 

[Guest]

I ran your suggestion.. I hadnt renamed the sdb file before, there was also
and update.sdb in there as well... I still get the errors

When I run rsop.msc My computer policy comes up with a Yes Explanation mark,
but I does no tell me anything that is wrong.

One fact that I am doing which may be the wrong approach, I am using
Restricted groups to make Domain Users, Administrators on the local machine.
Could I have wiped out a critical security component??? Current, the local
administrators group is set to Domain\DomainUsers.

 

[Steven L Umbach]

Every computer in the domain is getting the same errors?? If not is this a
domain controller?? If you have not done so yet check the advice at
http://www.event.id.net found for those errors after inputting the Event ID
and source. --- Steve

 

[Guest]

I came accross this KB
http://support.microsoft.com/KB/898062

When looking at the rsop.msc right click on Computer configuration and go
to policies. The second tab under there should give you error info.

 

[Guest]

what do you get from a gpresult?

I ran your suggestion.. I hadnt renamed the sdb file before, there was also
and update.sdb in there as well... I still get the errors

When I run rsop.msc My computer policy comes up with a Yes Explanation mark,
but I does no tell me anything that is wrong.

One fact that I am doing which may be the wrong approach, I am using
Restricted groups to make Domain Users, Administrators on the local machine.
Could I have wiped out a critical security component??? Current, the local
administrators group is set to Domain\DomainUsers.