Client side extension could not remove computer policy settings for ' ' because it failed with error code '0x8007000d The data is invalid.'

Answered Client side extension could not remove computer policy settings for ' ' because it failed with error code '0x8007000d The data is invalid.'

  • Monday, July 13, 2009 6:21 PM
     
     
    Hello,

    We are receiving the following error every 5 minutes in the Apps event viewer on our DC.  Since there is no GPO associated with this error its been even more difficult to find a solution.  Also I am not aware if Policy Maker was used to create the policies.  Any help would be much appreciated!!!

    TIA,
    Doug

    Log Name:      Application
    Source:        Group Policy Local Users and Groups
    Date:          7/13/2009 10:48:09 AM
    Event ID:      8194
    Task Category: (2)
    Level:         Error
    Keywords:      Classic
    User:          SYSTEM
    Computer:      DC.domain.com
    Description:
    The client-side extension could not remove computer policy settings for ' ' because it failed with error code '0x8007000d The data is invalid.' See trace file for more details.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Group Policy Local Users and Groups" />
        <EventID Qualifiers="34305">8194</EventID>
        <Level>2</Level>
        <Task>2</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2009-07-13T17:48:09.000Z" />
        <EventRecordID>25597</EventRecordID>
        <Channel>Application</Channel>
        <Computer>DC.domain.com</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data>remove</Data>
        <Data>computer</Data>
        <Data>
        </Data>
        <Data>0x8007000d The data is invalid.</Data>
      </EventData>
    </Event>

All Replies

  • Monday, July 13, 2009 9:12 PM
     
     
    Hello,

    So on none of the Default domain policy or Default domain controllers policy or addtional ones on that level is a GPO used which has a changed setting?
    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
  • Monday, July 13, 2009 9:44 PM
     
     
    Hello,

    So on none of the Default domain policy or Default domain controllers policy or addtional ones on that level is a GPO used which has a changed setting?
    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
    Thanks Meinolf for the reply.  What do you mean by a changed setting?


  • Monday, July 13, 2009 9:54 PM
     
     Answered
    Hello,

    a previous setting was removed and now results in this error, because the DC can not execute this.

    Plese check if all listed in SYSVOL\Policies\{GUIDfromGPO}\Machine\Preferences\Groups\Groups.xml exist as a GPO in GPMC and are accessible. If there is a mismatch and more are listed then existing check the registry HKLM or HKCU: SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\History and delete the lcoal GPO history


    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
  • Tuesday, July 14, 2009 3:49 PM
     
     Proposed
    Meinolf,

    I have verified in Sysvol that the policies all match.  Although when going into the registry under history there are 3 that do not match with any current GPs.  Should I delete those policies?

    Thanks again Meinolf!
    • Proposed As Answer by GSS1 Wednesday, April 03, 2013 10:38 AM
    •  
  • Wednesday, July 15, 2009 5:40 PM
     
     
    Does anyone have any other options for this issue?

    TIA,
    Doug
  • Friday, July 17, 2009 11:48 AM
     
     Answered
    Doug,

    "Source:        Group Policy Local Users and Groups" indicates that the extension for "Local Users and Groups" is logging this event.
    This extension is part of GP Preferences respective the former product PolicyMaker.

    Therfore I assume there is one GPO that contains that setting.
    To find out which GPO it is, I would try this simple approach:
    Search the SYSVOL\Policies path for a directory called "groups".
    GPP stores information in XML files within GPT on SYSVOL.
    The extension mentioned above uses that path "Machine\Preferences\Groups" located under GUID named folder of the GPO (=GPT).
    So if you find just one or a few GPOs with that folder it should make the next step for analysis easier:
    - Which of the GPOs is applied to the DC (check the links of these GPOs) ?
    - Is that setting misconfigured or damaged in a way?
    - Is that settiing still needed or is it an option to just delete it?

    The 5 minutes interval for a DC to aplly GPOs is default:
    http://technet.microsoft.com/en-us/library/cc940905.aspx
    This is why the event occurs every 5 minutes.
    Patrick
  • Friday, March 18, 2011 7:37 AM
     
     

    I have this same issue with windows server 2003 DC..

    I have tried out these options but non seems to work

  • Friday, March 18, 2011 7:47 AM
     
     

    Hello,

    please create your own thread including the complete event viewer error you have.


    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.