Client side extension could not remove computer policy settings for ' ' because it failed with error code '0x8007000d The data is invalid.'
-
Monday, July 13, 2009 6:21 PMHello,
We are receiving the following error every 5 minutes in the Apps event viewer on our DC. Since there is no GPO associated with this error its been even more difficult to find a solution. Also I am not aware if Policy Maker was used to create the policies. Any help would be much appreciated!!!
TIA,
Doug
Log Name: Application
Source: Group Policy Local Users and Groups
Date: 7/13/2009 10:48:09 AM
Event ID: 8194
Task Category: (2)
Level: Error
Keywords: Classic
User: SYSTEM
Computer: DC.domain.com
Description:
The client-side extension could not remove computer policy settings for ' ' because it failed with error code '0x8007000d The data is invalid.' See trace file for more details.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Group Policy Local Users and Groups" />
<EventID Qualifiers="34305">8194</EventID>
<Level>2</Level>
<Task>2</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-07-13T17:48:09.000Z" />
<EventRecordID>25597</EventRecordID>
<Channel>Application</Channel>
<Computer>DC.domain.com</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data>remove</Data>
<Data>computer</Data>
<Data>
</Data>
<Data>0x8007000d The data is invalid.</Data>
</EventData>
</Event>
All Replies
-
Monday, July 13, 2009 9:12 PMHello,
So on none of the Default domain policy or Default domain controllers policy or addtional ones on that level is a GPO used which has a changed setting?
Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. -
Monday, July 13, 2009 9:44 PM
Hello,
Thanks Meinolf for the reply. What do you mean by a changed setting?
So on none of the Default domain policy or Default domain controllers policy or addtional ones on that level is a GPO used which has a changed setting?
Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
-
Monday, July 13, 2009 9:54 PM
Hello,
a previous setting was removed and now results in this error, because the DC can not execute this.
Plese check if all listed in SYSVOL\Policies\{GUIDfromGPO}\Machine\Preferences\Groups\Groups.xml exist as a GPO in GPMC and are accessible. If there is a mismatch and more are listed then existing check the registry HKLM or HKCU: SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\History and delete the lcoal GPO history
Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.- Marked As Answer by Miles ZhangModerator Monday, July 20, 2009 1:09 AM
-
Tuesday, July 14, 2009 3:49 PM
Meinolf,
I have verified in Sysvol that the policies all match. Although when going into the registry under history there are 3 that do not match with any current GPs. Should I delete those policies?
Thanks again Meinolf!- Proposed As Answer by GSS1 Wednesday, April 03, 2013 10:38 AM
-
Wednesday, July 15, 2009 5:40 PMDoes anyone have any other options for this issue?
TIA,
Doug -
Friday, July 17, 2009 11:48 AM
Doug,
"Source: Group Policy Local Users and Groups" indicates that the extension for "Local Users and Groups" is logging this event.
This extension is part of GP Preferences respective the former product PolicyMaker.
Therfore I assume there is one GPO that contains that setting.
To find out which GPO it is, I would try this simple approach:
Search the SYSVOL\Policies path for a directory called "groups".
GPP stores information in XML files within GPT on SYSVOL.
The extension mentioned above uses that path "Machine\Preferences\Groups" located under GUID named folder of the GPO (=GPT).
So if you find just one or a few GPOs with that folder it should make the next step for analysis easier:
- Which of the GPOs is applied to the DC (check the links of these GPOs) ?
- Is that setting misconfigured or damaged in a way?
- Is that settiing still needed or is it an option to just delete it?
The 5 minutes interval for a DC to aplly GPOs is default:
http://technet.microsoft.com/en-us/library/cc940905.aspx
This is why the event occurs every 5 minutes.
Patrick- Marked As Answer by Miles ZhangModerator Monday, July 20, 2009 1:09 AM
-
Friday, March 18, 2011 7:37 AM
I have this same issue with windows server 2003 DC..
I have tried out these options but non seems to work
-
Friday, March 18, 2011 7:47 AM
Hello,
please create your own thread including the complete event viewer error you have.
Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

