Group Policy Event ID 1085 Warnings
I am getting the following error on Windows 7 Ultimate after tweaking something in Group Policy. Log Name: System Source: Microsoft-Windows-GroupPolicy Date: 2010/05/18 05:00:57 PM Event ID: 1085 Task Category: None Level: Warning Keywords: User: SYSTEM Computer: Grant Description: Windows failed to apply the TCPIP settings. TCPIP settings might have its own log file. Please click on the "More information" link. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" /> <EventID>1085</EventID> <Version>0</Version> <Level>3</Level> <Task>0</Task> <Opcode>1</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2010-05-18T15:00:57.932839400Z" /> <EventRecordID>20382</EventRecordID> <Correlation ActivityID="{1E2EA952-32AA-4686-A4A2-EA32699F0B5D}" /> <Execution ProcessID="1016" ThreadID="272" /> <Channel>System</Channel> <Computer>Grant</Computer> <Security UserID="S-1-5-18" /> </System> <EventData> <Data Name="SupportInfo1">1</Data> <Data Name="SupportInfo2">3961</Data> <Data Name="ProcessingMode">2</Data> <Data Name="ProcessingTimeInMilliseconds">1903</Data> <Data Name="ErrorCode">1062</Data> <Data Name="ErrorDescription">The service has not been started. </Data> <Data Name="DCName"> </Data> <Data Name="ExtensionName">TCPIP</Data> <Data Name="ExtensionId">{cdeafc3d-948d-49dd-ab12-e578ba4af7aa}</Data> </EventData> </Event> Log Name: Microsoft-Windows-GroupPolicy/Operational Source: Microsoft-Windows-GroupPolicy Date: 2010/05/18 05:00:57 PM Event ID: 7016 Task Category: None Level: Error Keywords: User: SYSTEM Computer: Grant Description: Completed TCPIP Extension Processing in 1887 milliseconds. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" /> <EventID>7016</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>2</Opcode> <Keywords>0x4000000000000000</Keywords> <TimeCreated SystemTime="2010-05-18T15:00:57.932839400Z" /> <EventRecordID>13612</EventRecordID> <Correlation ActivityID="{1E2EA952-32AA-4686-A4A2-EA32699F0B5D}" /> <Execution ProcessID="1016" ThreadID="272" /> <Channel>Microsoft-Windows-GroupPolicy/Operational</Channel> <Computer>Grant</Computer> <Security UserID="S-1-5-18" /> </System> <EventData> <Data Name="CSEElaspedTimeInMilliSeconds">1887</Data> <Data Name="ErrorCode">1062</Data> <Data Name="CSEExtensionName">TCPIP</Data> <Data Name="CSEExtensionId">{CDEAFC3D-948D-49DD-AB12-E578BA4AF7AA}</Data> </EventData> </Event> It seems to be related to a service not being started (or disabled.) How can I find out which one and fix this?
May 18th, 2010 11:36am

I searched technet's manuals and only found a reference for Windows XP. http://support.microsoft.com/kb/898062/en-us I suggest reversing your changes and get some manuals that are oriented around corporate policies. Policies are based mostly on servers. Vote if answered or helpful, I am running for Office (joke)! IT/Developer, Windows/Linux/Mainframe Need a some parts finish the new server, see the site for remaining items needed
Free Windows Admin Tool Kit Click here and download it now
May 18th, 2010 6:34pm

Hi, Is Group Policy object applied successfully on the Windows 7 machine? According to the event log, most likely, this issue occurs because the Group Policy client-side extension tries to load the history file that is stored at the following location: ..\users\All Users\Microsoft\Group Policy\History\<GUID>\Preferences However, when the history file is corrupted or unreadable, the group policy preference settings are not applied successfully. To work around this issue, follow these steps: 1. Delete the corrupted XML file or local XML file which size is 0 kb in the following location: ..\users\All Users\Microsoft\Group Policy\History\< GUID >\Preferences 2. Run the following command at the command prompt to refresh the group policy again gpupdate /force 977564 Error message on a domain controller that is running Windows Server 2008: "The client-side extension could not remove user policy settings for 'Domain Name {GUID}' because it failed with error code '0x8007000d The data is invalid.'" http://support.microsoft.com/default.aspx?scid=kb;EN-US;977564 Hope it helps. Novak
May 18th, 2010 10:24pm

I have reversed any and all changes I have made and no dice. Must be something hiding somewhere still ...
Free Windows Admin Tool Kit Click here and download it now
May 20th, 2010 7:58am

Sounds like a great solution, only that folder does not even exist on my Windows 7 machine. I am not running a network, just gpedit.msc.
May 20th, 2010 8:00am

Hi, Is the machine in a domain or a workgroup? At this stage, please rename the corrupted file via following article: http://support.microsoft.com/default.aspx?scid=kb;EN-US;977564 If the issue persists, please also perform a System Restore for a test. Thanks, Novak
Free Windows Admin Tool Kit Click here and download it now
May 20th, 2010 11:09pm

The machine is standalone, so part of a workgroup by definition. I do not have a Group Policy folder in my ProgramData\Microsoft folder. Also ... system restore is disabled :(
May 21st, 2010 8:01am

GPSVC(7c.484) 16:05:10:589 ProcessGPOs: ----------------------- GPSVC(7c.484) 16:05:10:589 ProcessGPOs: Processing extension TCPIP GPSVC(7c.484) 16:05:10:589 ReadStatus: Read Extension's Previous status successfully. GPSVC(7c.484) 16:05:10:589 CompareGPOLists: One list is empty GPSVC(7c.484) 16:05:10:589 GPLockPolicySection: Sid = (null), dwTimeout = 30000, dwFlags = 0 GPSVC(7c.484) 16:05:10:589 LockPolicySection called for user <Machine> GPSVC(7c.484) 16:05:10:589 Sync Lock Called GPSVC(7c.484) 16:05:10:589 Writer Lock got immediately. GPSVC(7c.484) 16:05:10:589 Lock taken successfully GPSVC(7c.484) 16:05:10:589 ProcessGPOList: Entering for extension TCPIP GPSVC(7c.484) 16:05:10:589 MachinePolicyCallback: Setting status UI to Applying TCPIP policy... GPSVC(7c.484) 16:05:10:589 GetWbemServices: CoCreateInstance succeeded GPSVC(7c.150) 16:05:10:667 Target = Machine GPSVC(7c.324) 16:05:10:667 Target = Machine, ChangeNumber 0 GPSVC(7c.150) 16:05:10:714 Target = Machine GPSVC(7c.150) 16:05:10:714 Target = Machine, ChangeNumber 0 GPSVC(22c.27c) 16:05:10:776 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x744 GPSVC(22c.27c) 16:05:10:776 Client_InitialRegisterForNotification: User = machine, changenumber = 0 GPSVC(7c.150) 16:05:10:776 Target = Machine GPSVC(22c.27c) 16:05:10:776 Client_RegisterForNotification: User = machine, changenumber = 0 GPSVC(22c.27c) 16:05:10:776 CGPNotify::RegisterForNotification: Exiting with status = 0 GPSVC(7c.154) 16:05:10:776 Target = Machine, ChangeNumber 0 GPSVC(7c.154) 16:05:10:808 Sid = (null), dwTimeout = 1, dwFlags = 268435459 GPSVC(7c.154) 16:05:10:808 LockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:808 Async Lock called GPSVC(7c.154) 16:05:10:808 Reader Lock got immediately. m_cReadersInLock : 1 GPSVC(7c.154) 16:05:10:808 Sid = (null), dwTimeout = 1, dwFlags = 268435459 GPSVC(7c.154) 16:05:10:808 LockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:808 Async Lock called GPSVC(7c.154) 16:05:10:808 Reader Lock got immediately. m_cReadersInLock : 2 GPSVC(7c.154) 16:05:10:808 Sid = (null) GPSVC(7c.154) 16:05:10:808 UnLockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:808 Found the caller in the ReaderHavingLock List. Removing it... GPSVC(7c.154) 16:05:10:808 UnLocked successfully GPSVC(7c.154) 16:05:10:808 Sid = (null), dwTimeout = 1, dwFlags = 268435459 GPSVC(7c.154) 16:05:10:808 LockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:808 Async Lock called GPSVC(7c.154) 16:05:10:808 Reader Lock got immediately. m_cReadersInLock : 2 GPSVC(7c.154) 16:05:10:823 Sid = (null) GPSVC(7c.154) 16:05:10:823 UnLockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:823 Found the caller in the ReaderHavingLock List. Removing it... GPSVC(7c.154) 16:05:10:823 UnLocked successfully GPSVC(7c.154) 16:05:10:823 Sid = (null), dwTimeout = 1, dwFlags = 268435459 GPSVC(7c.154) 16:05:10:823 LockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:823 Async Lock called GPSVC(7c.154) 16:05:10:823 Reader Lock got immediately. m_cReadersInLock : 2 GPSVC(7c.154) 16:05:10:823 Sid = (null) GPSVC(7c.154) 16:05:10:823 UnLockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:823 Found the caller in the ReaderHavingLock List. Removing it... GPSVC(7c.154) 16:05:10:823 UnLocked successfully GPSVC(7c.154) 16:05:10:823 Sid = (null), dwTimeout = 1, dwFlags = 268435459 GPSVC(7c.154) 16:05:10:823 LockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:823 Async Lock called GPSVC(7c.154) 16:05:10:823 Reader Lock got immediately. m_cReadersInLock : 2 GPSVC(7c.154) 16:05:10:823 Sid = (null) GPSVC(7c.154) 16:05:10:823 UnLockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:823 Found the caller in the ReaderHavingLock List. Removing it... GPSVC(7c.154) 16:05:10:823 UnLocked successfully GPSVC(7c.154) 16:05:10:823 Sid = (null), dwTimeout = 1, dwFlags = 268435459 GPSVC(7c.154) 16:05:10:823 LockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:823 Async Lock called GPSVC(7c.154) 16:05:10:823 Reader Lock got immediately. m_cReadersInLock : 2 GPSVC(7c.154) 16:05:10:823 Sid = (null) GPSVC(7c.154) 16:05:10:823 UnLockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:823 Found the caller in the ReaderHavingLock List. Removing it... GPSVC(7c.154) 16:05:10:823 UnLocked successfully GPSVC(7c.154) 16:05:10:823 Sid = (null), dwTimeout = 1, dwFlags = 268435459 GPSVC(7c.154) 16:05:10:823 LockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:823 Async Lock called GPSVC(7c.154) 16:05:10:823 Reader Lock got immediately. m_cReadersInLock : 2 GPSVC(7c.154) 16:05:10:823 Sid = (null) GPSVC(7c.154) 16:05:10:823 UnLockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:823 Found the caller in the ReaderHavingLock List. Removing it... GPSVC(7c.154) 16:05:10:823 UnLocked successfully GPSVC(7c.154) 16:05:10:823 Sid = (null), dwTimeout = 1, dwFlags = 268435459 GPSVC(7c.154) 16:05:10:823 LockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:823 Async Lock called GPSVC(7c.154) 16:05:10:823 Reader Lock got immediately. m_cReadersInLock : 2 GPSVC(7c.154) 16:05:10:823 Sid = (null) GPSVC(7c.154) 16:05:10:823 UnLockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:823 Found the caller in the ReaderHavingLock List. Removing it... GPSVC(7c.154) 16:05:10:823 UnLocked successfully GPSVC(7c.154) 16:05:10:823 Sid = (null), dwTimeout = 1, dwFlags = 268435459 GPSVC(7c.154) 16:05:10:823 LockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:823 Async Lock called GPSVC(7c.154) 16:05:10:823 Reader Lock got immediately. m_cReadersInLock : 2 GPSVC(7c.154) 16:05:10:823 Sid = (null) GPSVC(7c.154) 16:05:10:839 UnLockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:839 Found the caller in the ReaderHavingLock List. Removing it... GPSVC(7c.154) 16:05:10:839 UnLocked successfully GPSVC(7c.154) 16:05:10:839 Sid = (null), dwTimeout = 1, dwFlags = 268435459 GPSVC(7c.154) 16:05:10:839 LockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:839 Async Lock called GPSVC(7c.154) 16:05:10:839 Reader Lock got immediately. m_cReadersInLock : 2 GPSVC(7c.154) 16:05:10:839 Sid = (null) GPSVC(7c.154) 16:05:10:839 UnLockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:839 Found the caller in the ReaderHavingLock List. Removing it... GPSVC(7c.154) 16:05:10:839 UnLocked successfully GPSVC(7c.154) 16:05:10:839 Sid = (null), dwTimeout = 1, dwFlags = 268435459 GPSVC(7c.154) 16:05:10:839 LockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:839 Async Lock called GPSVC(7c.154) 16:05:10:839 Reader Lock got immediately. m_cReadersInLock : 2 GPSVC(7c.154) 16:05:10:839 Sid = (null) GPSVC(7c.154) 16:05:10:839 UnLockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:839 Found the caller in the ReaderHavingLock List. Removing it... GPSVC(7c.154) 16:05:10:839 UnLocked successfully GPSVC(7c.154) 16:05:10:839 Sid = (null), dwTimeout = 1, dwFlags = 268435459 GPSVC(7c.154) 16:05:10:839 LockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:839 Async Lock called GPSVC(7c.154) 16:05:10:839 Reader Lock got immediately. m_cReadersInLock : 2 GPSVC(7c.154) 16:05:10:839 Sid = (null) GPSVC(7c.154) 16:05:10:839 UnLockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:839 Found the caller in the ReaderHavingLock List. Removing it... GPSVC(7c.154) 16:05:10:839 UnLocked successfully GPSVC(7c.154) 16:05:10:839 Sid = (null), dwTimeout = 1, dwFlags = 268435459 GPSVC(7c.154) 16:05:10:839 LockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:839 Async Lock called GPSVC(7c.154) 16:05:10:839 Reader Lock got immediately. m_cReadersInLock : 2 GPSVC(7c.154) 16:05:10:839 Sid = (null) GPSVC(7c.154) 16:05:10:839 UnLockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:839 Found the caller in the ReaderHavingLock List. Removing it... GPSVC(7c.154) 16:05:10:839 UnLocked successfully GPSVC(7c.154) 16:05:10:839 Sid = (null), dwTimeout = 1, dwFlags = 268435459 GPSVC(7c.154) 16:05:10:839 LockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:839 Async Lock called GPSVC(7c.154) 16:05:10:839 Reader Lock got immediately. m_cReadersInLock : 2 GPSVC(7c.154) 16:05:10:839 Sid = (null) GPSVC(7c.154) 16:05:10:839 UnLockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:839 Found the caller in the ReaderHavingLock List. Removing it... GPSVC(7c.154) 16:05:10:839 UnLocked successfully GPSVC(7c.154) 16:05:10:839 Sid = (null), dwTimeout = 1, dwFlags = 268435459 GPSVC(7c.154) 16:05:10:839 LockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:839 Async Lock called GPSVC(7c.154) 16:05:10:839 Reader Lock got immediately. m_cReadersInLock : 2 GPSVC(7c.154) 16:05:10:839 Sid = (null) GPSVC(7c.154) 16:05:10:839 UnLockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:839 Found the caller in the ReaderHavingLock List. Removing it... GPSVC(7c.154) 16:05:10:839 UnLocked successfully GPSVC(7c.154) 16:05:10:839 Sid = (null), dwTimeout = 1, dwFlags = 268435459 GPSVC(7c.154) 16:05:10:839 LockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:839 Async Lock called GPSVC(7c.154) 16:05:10:839 Reader Lock got immediately. m_cReadersInLock : 2 GPSVC(7c.154) 16:05:10:854 Sid = (null) GPSVC(7c.154) 16:05:10:854 UnLockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:854 Found the caller in the ReaderHavingLock List. Removing it... GPSVC(7c.154) 16:05:10:854 UnLocked successfully GPSVC(7c.154) 16:05:10:854 Sid = (null), dwTimeout = 1, dwFlags = 268435459 GPSVC(7c.154) 16:05:10:854 LockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:854 Async Lock called GPSVC(7c.154) 16:05:10:854 Reader Lock got immediately. m_cReadersInLock : 2 GPSVC(7c.154) 16:05:10:854 Sid = (null) GPSVC(7c.154) 16:05:10:854 UnLockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:854 Found the caller in the ReaderHavingLock List. Removing it... GPSVC(7c.154) 16:05:10:854 UnLocked successfully GPSVC(7c.154) 16:05:10:854 Sid = (null), dwTimeout = 1, dwFlags = 268435459 GPSVC(7c.154) 16:05:10:854 LockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:854 Async Lock called GPSVC(7c.154) 16:05:10:854 Reader Lock got immediately. m_cReadersInLock : 2 GPSVC(7c.154) 16:05:10:854 Sid = (null) GPSVC(7c.154) 16:05:10:854 UnLockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:854 Found the caller in the ReaderHavingLock List. Removing it... GPSVC(7c.154) 16:05:10:854 UnLocked successfully GPSVC(7c.154) 16:05:10:870 Sid = (null) GPSVC(7c.154) 16:05:10:870 UnLockPolicySection called for user <Machine> GPSVC(7c.154) 16:05:10:870 Found the caller in the ReaderHavingLock List. Removing it... GPSVC(7c.154) 16:05:10:870 Setting lock state as notLocked GPSVC(7c.154) 16:05:10:870 UnLocked successfully GPSVC(7c.484) 16:05:11:619 ConnectToNameSpace: ConnectServer returned 0x0 GPSVC(7c.484) 16:05:11:619 ReadStatus: Read Extension's Previous status successfully. GPSVC(7c.484) 16:05:11:634 LogExtSessionStatus: Successfully logged Extension Session data GPSVC(7c.484) 16:05:11:634 ProcessGPOList: Extension TCPIP returned 0x426. GPSVC(7c.484) 16:05:11:634 ProcessGPOList: Extension TCPIP doesn't support rsop logging GPSVC(7c.484) 16:05:11:634 UnLockPolicySection called for user <Machine> GPSVC(7c.484) 16:05:11:634 UnLocked successfully GPSVC(7c.484) 16:05:11:634 ProcessGPOs: Extension TCPIP ProcessGroupPolicy failed, status 0x426. GPSVC(7c.484) 16:05:11:634 ProcessGPOs: ----------------------- In case that helps ...
Free Windows Admin Tool Kit Click here and download it now
May 21st, 2010 10:22am

Managed to get the error to go away by removing my ntuser.pol files from All Users and my own profile, also cleared the system32\grouppolicy folder. Not ideal, but it worked.
May 21st, 2010 11:50am

I get the error too. What tcpip service is disabled? I see it it running...TCP/IP Protocol Driver running. Windows failed to apply the TCPIP settings. TCPIP settings might have its own log file. Please click on the "More information" link. Component Status Component Name Status Last Process Time Group Policy Infrastructure Success 1/1/2011 2:04:27 AM Registry Success 1/1/2011 2:04:27 AM TCPIP Failed (no data) 1/1/2011 2:04:27 AM TCPIP failed due to the error listed below. The service has not been started. Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between 1/1/2011 2:04:27 AM and 1/1/2011 2:04:27 AM.
Free Windows Admin Tool Kit Click here and download it now
January 1st, 2011 5:15am

See my earlier post about the XP policies.Elected! Your votes and support have got me my 2010 MVP! Developer | Windows IT | Chess | Economics | Hardcore Games | Vegan Advocate | PC Reviews
January 1st, 2011 9:15am

I have this error too. It's the only error I cant fix. help System - Provider [ Name] Microsoft-Windows-GroupPolicy [ Guid] {AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9} EventID 1085 Version 0 Level 3 Task 0 Opcode 1 Keywords 0x8000000000000000 - TimeCreated [ SystemTime] 2011-02-24T15:07:39.914153900Z EventRecordID 224735 - Correlation [ ActivityID] {5A03FFA4-05BE-4CD8-BDDC-852B7367FA27} - Execution [ ProcessID] 216 [ ThreadID] 696 Channel System Computer mycomp - Security [ UserID] S-1-5-18 - EventData SupportInfo1 1 SupportInfo2 3961 ProcessingMode 2 ProcessingTimeInMilliseconds 1778 ErrorCode 1062 ErrorDescription The service has not been started. DCName ExtensionName TCPIP ExtensionId {cdeafc3d-948d-49dd-ab12-e578ba4af7aa}
Free Windows Admin Tool Kit Click here and download it now
February 24th, 2011 10:14am

I found the issue was the 'IP Helper' services was disabled.
October 20th, 2011 2:09pm

AWESOME!! Thank you so much!! That was the issue for me too!!
Free Windows Admin Tool Kit Click here and download it now
September 20th, 2012 11:29am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics