none
The processing of Group Policy failed

    Question

  • We are seeing an issue on one of the machines in the domain where it fails to process all  of the group policies. (user and machine)
    Here is one of the system error messages from the event log.

    The processing of Group Policy failed. Windows could not apply the registry-based policy settings for the Group Policy object LDAP://CN=Machine,CN={51B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domain,DC=local. Group Policy settings will not be resolved until this event is resolved. View the event details for more information on the file name and path that caused the failure.
    C:\Windows\System32\GroupPolicy and C:\Windows\System32\GroupPolicyUser folders are empty.
    We attempted to dis-join and then join the domain, however group policy processing issue remains unresolved.
    What would be the next troubleshooting step for this problem?

    Thanks

    Thursday, October 6, 2016 1:16 AM

Answers

All replies

  • Hi,

    Thanks for your post.

    Please check if the below information and links are helpful to you:

    The Registry client-side extension failed to read the registry.pol file from the Group Policy template location. The registry.pol file contains registry policy settings. This file may be missing, inaccessible, or corrupt.

    Possible resolutions include:

    1. Ensure the registry.pol file exists in the location and has the same permissions as the gpt.ini file in the same Group Policy object (GPO).
    2. Ensure Sysvol replication is working properly on domain controllers.
    3. Delete the GPO and recreate it.

    Windows could not apply the registry-based policy settings for the Group Policy object

    https://social.technet.microsoft.com/Forums/en-US/4a534126-6a7a-4fc2-9409-5c33a01570f0/windows-could-not-apply-the-registrybased-policy-settings-for-the-group-policy-object?forum=winserverGP

    Event ID 1096 — Group Policy Registry Processing

    https://technet.microsoft.com/en-us/library/dd392529(v=ws.10).aspx

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, October 6, 2016 7:53 AM
    Moderator
  • Some group policies fail with the error code 8194 in the application event log

    ' because it failed with error code '0x8007052e Logon failure: unknown user name or bad password.' See trace file for more details.

    Some fail with error 1001

    Security policy cannot be propagated. Cannot access the template. Error code = 3.
    \\domain.local\sysvol\domain.local\Policies\{21B2F340-016D-11D2-945F-00C04FB984F9}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl

    Thursday, October 6, 2016 7:44 PM
  • Using wireshark we were able to find the packet containing the problematic user name in SMB2 protocol 

    suspect the fix is gonna be  psexec -i -s -d cmd.exe and then rundll32 keymgr.dll,KRShowKeyMgr



    • Edited by net_tech Thursday, October 6, 2016 7:51 PM
    Thursday, October 6, 2016 7:51 PM
  • Hi,

    If you run: RunDll32.exe keymgr.dll,KRShowKeyMgr, you will be presented with the Stored User Names and Passwords window and you could manually delete them.

    This is one possible cause of the error, you could try it if convenient.

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    Monday, October 10, 2016 2:56 AM
    Moderator
  • Hi,

    Just want to confirm the current situations.

    Please feel free to let us know if you need further assistance.

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, October 12, 2016 1:42 PM
    Moderator