Server Error (Very troublesome)

[Warren]

OK, this could get long winded...
I have 7 Windows 2000 standard servers running in
terminal server application mode with Citrix installed.
(I guess these were also ghosted machines.) The event
log will get filled with the following errors.
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 8/19/2003
Time: 4:01:28 PM
User: NT AUTHORITY\SYSTEM
Computer: NAMSATSRV03
Description:
Windows cannot access the registry information at
\\namsa.int\sysvol\namsa.int\Policies\{31B2F340-016D-11D2-
945F-00C04FB984F9}\User\registry.pol with (53).

I saw a Microsoft article that stated this was a binding
error. Now some servers only have 1 Nic in them.
But..if I open regedit, and look at
HLM\System\CurrentControlSet\Services\TCPIP\Parameters\Int
erfaces I see 6 items there. I can tell which one is the
real card. If I delete the other 5 errors, I can get the
errors to go away. But, within an hour those registry
enteries are back, and the error returns.

Any Ideas?
Thanks

 

[Benny Fu]

Dear Warren,

Thank you for your posting.

Based on the description, this error can be caused by the following reasons:

1. Novell Client installed
2. Network card driver
3. The %SystemRoot%\SYSVOL\Domain\Policies Group Policy directory structure
is missing or is incorrect.

From your thread, I understand that you checked the
HLM\System\CurrentControlSet\Services\TCPIP\Parameters\Int
erfaces registry. However, there will be several items for one network
card. For the network cards installed on your computer, please check the
following registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapte
rs

You can see the network cards now.

To resolve the issue, please perform the following steps:

1. Uninstall the Novell Client if it was installed
2. Update the latest network card driver.
3. The directory must be restored to allow replication between domain
controllers. This directory can either be restored from a backup or it can
be recreated.

271213 Event ID 1000 and 1001 Repeat Every 5 Minutes in the Event Log
http://support.microsoft.com/?id=271213

290647 Event ID 1000, 1001 Is Logged Every Five Minutes in the Application
http://support.microsoft.com/?id=290647

259398 SceCli Event ID 1001 and UserEnv Event ID 1000 When Dfs Client Is
http://support.microsoft.com/?id=259398

Hope the above information is helpful.

Thanks and have a good day!

Regards,

Benny Fu
Microsoft Online Partner Support
Microsoft Corporation
Get Secure! - www.microsoft.com/security

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Content-Class: urn:content-classes:message
| From: "Warren" <[email protected]>
| Sender: "Warren" <[email protected]>
| Subject: Server Error (Very troublesome)
| Date: Tue, 19 Aug 2003 13:13:12 -0700
| Lines: 29
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| Thread-Index: AcNmjlC3WOAzMB2GRIawggm4a6pvVw==
| Newsgroups: microsoft.public.win2000.general
| Path: cpmsftngxa06.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.general:69318
| NNTP-Posting-Host: TK2MSFTNGXA08 10.40.1.160
| X-Tomcat-NG: microsoft.public.win2000.general
|
| OK, this could get long winded...
| I have 7 Windows 2000 standard servers running in
| terminal server application mode with Citrix installed.
| (I guess these were also ghosted machines.) The event
| log will get filled with the following errors.
| Event Type: Error
| Event Source: Userenv
| Event Category: None
| Event ID: 1000
| Date: 8/19/2003
| Time: 4:01:28 PM
| User: NT AUTHORITY\SYSTEM
| Computer: NAMSATSRV03
| Description:
| Windows cannot access the registry information at
| \\namsa.int\sysvol\namsa.int\Policies\{31B2F340-016D-11D2-
| 945F-00C04FB984F9}\User\registry.pol with (53).
|
| I saw a Microsoft article that stated this was a binding
| error. Now some servers only have 1 Nic in them.
| But..if I open regedit, and look at
| HLM\System\CurrentControlSet\Services\TCPIP\Parameters\Int
| erfaces I see 6 items there. I can tell which one is the
| real card. If I delete the other 5 errors, I can get the
| errors to go away. But, within an hour those registry
| enteries are back, and the error returns.
|
| Any Ideas?
| Thanks
|