none
Windows 10 1511 - Default printer in user GPO kills Windows services RRS feed

  • Question

  • Installation of Windows 10 build 10240 with WDS Server 2012 is running without issues:
    User logs on automatically after windows setup and group policy are applied successfully.

    Setting up build 1511 with the same set of group policies as follows:

    User logs on automatically after windows setup is completed, but then gpresult /r reports "No RSoP-Data"

    This is accompanied by events 7031 and 7032 in system log.

    Unchecking "Use as Default Printer" in the User GPO "solves" the problem.

    Without a default printer being set in the user gpo,  build 10586 again works fine. 

    This looks like a bug in build 10586. 



    Monday, December 7, 2015 4:11 PM

All replies

  • Hi,
     
    It's more like an issue on Windows 10 10586 build side, I'm moving this one to the dedicated Windows 10 forum for better support experience.
     
    The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.
     

    Regards,

    Ethan Hua


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Tuesday, December 8, 2015 6:46 AM
  • Hi woodrapp,

    Have you got any error messages when you run "gpupdate /force" or are there any related error messages recorded in the Event Viewer? Did "rsop.msc" work well?

    Best regards


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Wednesday, December 9, 2015 7:46 AM
    Moderator
  • When Default Printer in GPO is activated, gpupdate fails and generates 4 errors 7016 in Group Policy log:

    Die clientseitige Erweiterung "Group Policy Printers" der Gruppenrichtlinie hat möglicherweise dazu geführt, dass der Gruppenrichtliniendienst unerwartet beendet wurde. Um weitere Fehler beim Gruppenrichtliniendienst zu vermeiden, wurde diese Erweiterung vorübergehend deaktiviert. Die Erweiterung wird erst nach dem nächsten Systemneustart wieder aktiviert. Die von dieser Erweiterung verwalteten Gruppenrichtlinieneinstellungen dürfen erst wieder nach einem Neustart des Systems erzwungen werden. Wenden Sie sich an den Lieferanten dieser Erweiterung, wenn dieses Problem erneut auftritt.

    Die clientseitige Erweiterung "Group Policy Shortcuts" der Gruppenrichtlinie hat ...

    Die clientseitige Erweiterung "Group Policy Internet Settings" der Gruppenrichtlinie hat ...

    Die clientseitige Erweiterung "Group Policy Regional Options" der Gruppenrichtlinie hat ...

    I deactivate Default Printer in the gpo, reboot the client and then gpupdate again works normally.
    • Edited by woodrapp Thursday, December 10, 2015 3:19 PM
    Thursday, December 10, 2015 3:10 PM
  • Hi woodrapp,

    The log is not written in English. It is not readable for me. You could choose the corresponding language to get a better support or you could try to translate the log into English. So it will be readable for me, then we will go on.

    Obviously there is something wrong with this "Printer"gpo, as a result the "gpresult" cannot get the gp result.

    Best regards


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Friday, December 11, 2015 3:17 AM
    Moderator
  • Sorry, I'll try to translate the lyrics of Event 7016

    The group policy client-side extension "Group Policy Printers" possibly caused the group policy service to unexpectedly terminate. To avoid any further errors of in the group policy client, this extension has temporarily been deactivated.

    then repeating 3 times:

    The group policy client-side exension"Group Policy Shortcuts"...
    The group policy client-side exension"Group Policy Internet Settings"...
    The group policy client-side exension"Group Policy Regional Options"...

    The Printers GPO still works with Windows 10 Build 10240

    Problems arise as soon as I activate "Set this printer as the default printer".


    • Edited by woodrapp Friday, December 11, 2015 4:07 PM
    Friday, December 11, 2015 8:09 AM
  • Hi woodrapp,

    According to the log, the issue is related to the client-side extension.
    Here is a link for reference of Client-Side Extensions:
    Identifying Group Policy Client-Side Extensions (The theory should also be applied to Windows 10)
    https://support.microsoft.com/en-us/kb/216357

    "The Printers GPO still works with Windows 10 Build 10240"
    Considering it worked well before, we could check the registry keys`(HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions) differences between 10240 and 10586 to have a troubleshoot.
    Here is an example for reference:
    Group Policy client side extensions
    http://blogs.technet.com/b/mikehall/archive/2013/01/31/group-policy-client-side-extensions.aspx

    Best regards


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Monday, December 14, 2015 5:48 AM
    Moderator
  • Hi

    I compared registry key GPExtensions from builds 10240 and 10586 and they're identical.

    I tried to narrow it down a bit.
    I can get the setting "default printer" applied by running gpupdate /force, but gpresult would never be able to list the group memberships. See these 2 scenarios:

    Scenario 1:
    "Set this printer as the default printer" is activated in the GPO"
    User «installer» performs automatic logon right after installation of Winows 10586

    • GroupPolicy log: Warning 6330 (translated):
      An unfinished call from the client-side extension {BC75B1ED-5833-4858-9BB8-CBF0B166DF9D} of the GPO from within a previous instance of the group policy service has been seen. The group policy client service might have been terminated by the extension.
    • Gpresult /r says:
      INFO: The user has no RSoP Data.
    • User «installer» has printer queue, but it is not marked as default printer.

    Gpupdate /force /target:user

    • GroupPolicy log: Error 7016 (translated)
    • Still no default printer

    Logoff / Logon as user «installer»:

    • Gpresult /r now shows everything except group memberships (translated):
      The user is a member of the following security groups
      ---------------------------------------------------------
      ERROR: An unexpected error has occurred.

    Gpupdate /force /target:user

    • GroupPolicy log: Error 7016 (translated)
      The group policy client-side extension "Group Policy Printers" possibly caused the group policy service to unexpectedly terminate. To avoid any further errors of in the group policy client, this extension has temporarily been deactivated
    • Default Printer is now OK
    • Gpresult /r shows everything except group memberships (translated):
      The user is a part of the following security groups
      ---------------------------------------------------------
      ERROR: An unexpected error has occurred.

    User «xy» logs on

    • Gpresult /r: INFO:
      The User has no RSoP-Data.
    • No Default Printer

    User «xy» logs off/on

    • Still no Default Printer
    • System log: Warning 1128 (translated)
      The client-side extension «group policy printers» oft he group policy possibly caused the group policy client to end unexpectedly. This extension has been deactivated temporarily in order to avoid further errors to he group policy service.
    • GroupPolicy log: Error 7016

        

    EventData

        CSEElaspedTimeInMilliSeconds

    0

        ErrorCode

    11

        CSEExtensionName

    Group Policy Printers

        CSEExtensionId

    {BC75B1ED-5833-4858-9BB8-CBF0B166DF9D}

    • Gpresult /r shows no group memberships:
      The user is a member of the following security groups
      ---------------------------------------------------------
      ERROR: An unexpected error has occurred.

    Scenario 2:

    "Set this printer as the default printer" is not activated in the GPO für the installer user, but active for normal users
    User «installer» performs automatic logon right after installation of Winows 10586

    • Gpresult /r reports everything OK for user «installer"

     

    Normal User logs on first time

    • Gpresult /r reports User has no RSoP Data
    • GroupPolicy log: Warning 6330 (translated):
      An unfinished call from the client-side extension {BC75B1ED-5833-4858-9BB8-CBF0B166DF9D} of the GPO from within a previous instance of the group policy service has been seen. The group policy client service might have been terminated by the extension.
    • Printer is installed but not selected as default printer

    Normal user logs on second time

    • Gpresult /r says
      Applied group policy objects
      --------------------------------
      Not
      applicable
      The user is a part of the following security groups
      ---------------------------------------------------------
      Not applicable
    • Default printer is not set

    Gpupdate /force /target:user

    • Default printer still not set
    • Gpresult /r now reports everything but security group memberships:

    The user is member of the following security groups
    --------------------------------------------------------
    Not applicable

    • System log error 1128
    • Group policy error 7016
      The group policy client-side extension "Group Policy Printers" possibly caused the group policy service to unexpectedly terminate. To avoid any further errors of in the group policy client, this extension has temporarily been deactivated


    • Edited by woodrapp Tuesday, December 15, 2015 6:47 AM
    Monday, December 14, 2015 1:45 PM
  • Hi woodrapp,

    So the printer issue could be resolved by running "gpupdate /force" and the main issue is that "gpresult" won`t list the group memberships information no matter we configure the "Printer" policy or not, right? Have you tried to put the machine out of the domain and re-join it to the domain to have a troubleshoot?

    If I have misunderstood the issue, please feel free to let me know that.

    Best regards


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Tuesday, December 15, 2015 2:38 AM
    Moderator
  • Hi MeipoXu
    If you were willing to ignore the fact, that a user has "No RSoP Data" until you manually run gpupdate, you could put it that way. I tried to reflect that in this posting.

    I already tried rejoining the client. Every client is affected, not only one.


    • Edited by woodrapp Tuesday, December 15, 2015 7:08 AM
    Tuesday, December 15, 2015 6:58 AM
  • I checked system and grouppolicy logs after the first logon of a normal user.

    GroupPolicy Log:
    Without default printer there are 0 warnings and 0 errors in GroupPolicy log after the first logon.
    With default printer enabled, there is only one warning 6330
    An unfinished call from the client-side extension {BC75B1ED-5833-4858-9BB8-CBF0B166DF9D} of the GPO from within a previous instance of the group policy service has been seen. The group policy client service might have been terminated by the extension.

    System Log:
    Without default printer there are 0 warnings and 0 errors in system log after the first logon.
    With default printer enabled, system log looks like this:

    7031 translated: Service "syncronizerhost_927ada" ended unexpectedly. This happend before 1 time. Following Measures will be taken in 10000 ms: Restart of service.

    In each event 7031 there is another service named, so about 20 services seem to have crashed.

    This fuels the suspicion I uttered in the title of this thread.




    • Edited by woodrapp Tuesday, December 15, 2015 9:40 AM
    Tuesday, December 15, 2015 9:33 AM
  • Hi  woodrapp,

    Is the group memberships information listed without the "default printer gpo"?

    We could refer to the following steps to collect related logs to troubleshoot this issue.
    • Make sure that you have the folder %windir%\debug\usermode, if the usermode folder is not there, then manually create it.
    •Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
    • On the Edit menu, point to New, and then click Key.
    • Type Diagnostics, and then press ENTER.
    • Right-click the Diagnostics subkey, point to New, and then click DWORD Value.
    • Type GPSvcDebugLevel, and then press ENTER.
    • Right-click GPSvcDebugLevel, and then click Modify.
    • In the Value data box, type 30002 (as hex), and then click OK.
    • Exit Registry Editor.
    • Restart the machine.
    •. View the Gpsvc.log file in the following folder: %windir%\debug\usermode

    If you have troubles in analyzing the log, please upload them to OneDrive and paste the link here.

    Best regards

    Thursday, December 17, 2015 7:42 AM
    Moderator
  • Hi

    Excerpt from log created while default printer is enabled:

    ProcessGPOList:++ Entering for extension Group Policy Printers
    UserPolicyCallback: Setting status UI to Richtlinie "Group Policy Printers" wird übernommen...
    GetWbemServices: CoCreateInstance succeeded
    ConnectToNameSpace: ConnectServer returned 0x8004100e
    ConnectToNameSpace: ConnectServer failed with 0x8004100e, trying to recreate the name space
    LogExtSessionStatus: Successfully logged Extension Session data
    ProcessGPOList: lpGPOInfo->lpGPInfoHandle->dwExtnCount is 2 for Group Policy Printers.
    CGPNotify::RegisterForNotification: Entering with target Machine and event 000000000000030C
    CGPNotify::RegisterForNotification: Exiting with status = 0
    CGPNotify::RegisterForNotification: Entering with target User and event 0000000000000358
    CGPNotify::RegisterForNotification: Exiting with status = 0
    ProcessGroupPolicyCompletedExInternal: Entering. Extension = {BC75B1ED-5833-4858-9BB8-CBF0B166DF9D}, dwStatus = 0x0
    ReadGPOList:++
    ReadGPOList: Read Key:0
    ReadGPOList:-- (Result:TRUE)
    GetWbemServices: CoCreateInstance succeeded
    ConnectToNameSpace: ConnectServer returned 0x0
    ProcessGroupPolicyCompletedExInternal: Extension {BC75B1ED-5833-4858-9BB8-CBF0B166DF9D} was able to log data. Error = 0x0, dwRet = 0. Clearing the dirty bit
    CExtSessionLogger::Log: Didn't find an instance of the extension object when trying to set the dirty flag.
    ProcessGroupPolicyCompletedExInternal: Finished processing extension <Group Policy Printers> at 39312 ticks (ms)
    ProcessGroupPolicyCompletedExInternal: Leaving. Extension = {BC75B1ED-5833-4858-9BB8-CBF0B166DF9D}, Return status dwRet = 0x0
    ProcessGPOList: Extension Group Policy Printers returned 0x0.
    ProcessGPOList: Extension Group Policy Printers was able to log data. RsopStatus = 0x0, dwRet = 0, Clearing the dirty bit
    ProcessGPOList:--
    CPolicyCriticalSectionCollection: Deleting critical section for UserSid <S-1-5-21-1078081533-884357618-1801674531-16778>
    Deleting sidString <S-1-5-21-1078081533-884357618-1801674531-16778>
    ProcessGPOs(User): -----------------------
    ProcessGPOs(User): -----------------------
    ProcessGPOs(User): Processing extension Windows To Go Hibernate Options

    same passage while default printer is not enabled:

    ProcessGPOList:++ Entering for extension Group Policy Printers
    UserPolicyCallback: Setting status UI to Richtlinie "Group Policy Printers" wird übernommen...
    LogExtSessionStatus: Successfully logged Extension Session data
    ProcessGPOList: lpGPOInfo->lpGPInfoHandle->dwExtnCount is 2 for Group Policy Printers.
    ProcessGroupPolicyCompletedExInternal: Entering. Extension = {BC75B1ED-5833-4858-9BB8-CBF0B166DF9D}, dwStatus = 0x0
    ReadGPOList:++
    ReadGPOList: Read Key:0
    ReadGPOList:-- (Result:TRUE)
    GetWbemServices: CoCreateInstance succeeded
    ConnectToNameSpace: ConnectServer returned 0x0
    ProcessGroupPolicyCompletedExInternal: Extension {BC75B1ED-5833-4858-9BB8-CBF0B166DF9D} was able to log data. Error = 0x0, dwRet = 0. Clearing the dirty bit
    CExtSessionLogger::Log: Didn't find an instance of the extension object when trying to set the dirty flag.
    ProcessGroupPolicyCompletedExInternal: Finished processing extension <Group Policy Printers> at 22921 ticks (ms)
    ProcessGroupPolicyCompletedExInternal: Leaving. Extension = {BC75B1ED-5833-4858-9BB8-CBF0B166DF9D}, Return status dwRet = 0x0
    ProcessGPOList: Extension Group Policy Printers returned 0x0.
    ProcessGPOList: Extension Group Policy Printers was able to log data. RsopStatus = 0x0, dwRet = 0, Clearing the dirty bit
    ProcessGPOList:--
    CPolicyCriticalSectionCollection: Deleting critical section for UserSid <S-1-5-21-1078081533-884357618-1801674531-16778>
    Deleting sidString <S-1-5-21-1078081533-884357618-1801674531-16778>
    ProcessGPOs(User): -----------------------
    ProcessGPOs(User): -----------------------
    ProcessGPOs(User): Processing extension Windows To Go Hibernate Options

    Monday, December 21, 2015 12:06 PM
  • Hi woodrapp,

    Please clear the log, reproduce the issue, then upload the log to OneDrive and paste the link here.

    Best regards


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Thursday, December 24, 2015 8:32 AM
    Moderator
  • Hi

    there it is.

    https://onedrive.live.com/redir?resid=501359D9DED64C2!421&authkey=!AIYVK71IpqFxf34&ithint=file%2clog

    happy holidays


    • Edited by woodrapp Monday, December 28, 2015 11:13 AM
    Monday, December 28, 2015 7:38 AM
  • Hi woodrapp,

    The log you have uploaded is not readable on my side.

    Best regards


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Tuesday, December 29, 2015 3:22 AM
    Moderator
  • Hi
    There should be a download button.
    Anyway, pls try this one.

    • Edited by woodrapp Monday, January 4, 2016 3:19 PM
    Monday, January 4, 2016 3:17 PM
  • Hi woodrapp,
    According to the log:
    "ProcessGroupPolicyCompletedExInternal: Leaving. Extension = {BC75B1ED-5833-4858-9BB8-CBF0B166DF9D}, Return status dwRet = 0x0
    ProcessGPOList: Extension Group Policy Printers returned 0x0.
    ProcessGPOList: Extension Group Policy Printers was able to log data. RsopStatus = 0x0, dwRet = 0, Clearing the dirty bit
    ProcessGPOList:--
    CPolicyCriticalSectionCollection: Deleting critical section for UserSid <S-1-5-21-1078081533-884357618-1801674531-16778>
    Deleting sidString <S-1-5-21-1078081533-884357618-1801674531-16778>
    ProcessGPOs(User): -----------------------
    ProcessGPOs(User): -----------------------
    ProcessGPOs(User): Processing extension Windows To Go Hibernate Options
    ReadGPOList:++
    CheckGPOs: ReadGPOList count = 0
    CompareGPOLists:  The lists are the same.
    CheckGPOs: No GPO changes but couldn't read extension Windows To Go Hibernate Options's status or policy time."

    Please check the following registry keys` permissions("Administrators" and "System" with "Full control", "Authenticated Users" with "Read").  Also, check for any third-party software that might manipulate this key
    MACHINE
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\State\Machine\Extension-List

    USER
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\State\<SID>\Extension-List

    Here is a link for reference(Pay attentio to "No GPO changes but couldn't read extension %s's status or policy time" part):
    Interpreting Userenv log files(Though the article is a little old, the theory should be useful)
    https://technet.microsoft.com/en-us/library/cc786775%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

    Best regards


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.


    Tuesday, January 5, 2016 2:33 AM
    Moderator
  • Hi woodrapp,
    According to the log:
    "ProcessGroupPolicyCompletedExInternal: Leaving. Extension = {BC75B1ED-5833-4858-9BB8-CBF0B166DF9D}, Return status dwRet = 0x0
    ProcessGPOList: Extension Group Policy Printers returned 0x0.
    ProcessGPOList: Extension Group Policy Printers was able to log data. RsopStatus = 0x0, dwRet = 0, Clearing the dirty bit
    ProcessGPOList:--
    CPolicyCriticalSectionCollection: Deleting critical section for UserSid <S-1-5-21-1078081533-884357618-1801674531-16778>
    Deleting sidString <S-1-5-21-1078081533-884357618-1801674531-16778>
    ProcessGPOs(User): -----------------------
    ProcessGPOs(User): -----------------------
    ProcessGPOs(User): Processing extension Windows To Go Hibernate Options
    ReadGPOList:++
    CheckGPOs: ReadGPOList count = 0
    CompareGPOLists:  The lists are the same.
    CheckGPOs: No GPO changes but couldn't read extension Windows To Go Hibernate Options's status or policy time."

    Please check the following registry keys` permissions.  Also, check for any third-party software that might manipulate this key
    MACHINE
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\State\Machine\Extension-List

    USER
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\State\<SID>\Extension-List

    Here is a link for reference(Pay attention to "No GPO changes but couldn't read extension %s's status or policy time" part):
    Interpreting Userenv log files(Though the article is a little old, the theory should be useful)
    https://technet.microsoft.com/en-us/library/cc786775%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

    Best regards


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.


    Tuesday, January 5, 2016 2:38 AM
    Moderator
  • Hi woodrapp,

    How about the issue, is there anything to update?

    Best regards


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Monday, January 11, 2016 5:58 AM
    Moderator
  • Hi

    The log files of the working and then not working configuration do not differ in terms of No GPO changes but couldn't read extension.

    This line appears in both logs, e.g. the following section looks exactly the same in the 2 logs:

    ProcessGPOs(Machine): Processing extension Group Policy Printers
    ReadGPOList:++
    CheckGPOs: ReadGPOList count = 0
    CompareGPOLists:  The lists are the same.
    CheckGPOs: No GPO changes but couldn't read extension Group Policy Printers's status or policy time.
    ProcessGPOs(Machine): Extension Group Policy Printers skipped because both deleted and changed GPO lists are empty.
    ProcessGPOs(Machine): -----------------------

    Monday, January 11, 2016 7:26 AM
  • Hi woodrapp,

    No matter the "Default Printer" group policy was enabled or not enabled, the "group memberships" was never been shown, right?
    Though there is something wrong with the "default printer" group policy, it could be resolved by "gpupdate /force", right?

    According to the log and the error messages, I would try to explain my understanding of the issue.

    When the "default printer" is enabled, because of this error "No GPO changes but couldn't read extension %s's status or policy time", the status of the "default printer" couldn`t be read or the status couldn`t be read correctly. As a result, it could be applied for a normal gpupdate process. "gpupdate /force" will force a full group policy update from the domain controller ignoring the status of local group policy cache .
    Because of this error "No GPO changes but couldn't read extension %s's status or policy time", the "group memberships" information would never be shown.

    In conclusion, I think  this error "No GPO changes but couldn't read extension %s's status or policy time" is the root of the issue. So I tried to resolve this error messages firstly. I have checked my own machine. The "Network Service" is listed and has "read" permission, too.

    We could try to use process monitor to capture the "gpresult" process and filter those registry keys` information.
    Process Monitor v3.2
    https://technet.microsoft.com/en-us/sysinternals/processmonitor.aspx

    Best regards


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.


    Tuesday, January 12, 2016 2:21 AM
    Moderator
  • Hi,

    I'm not sure if this is still an issue for anyone but we worked through this with Microsoft support and there is a loop when setting the default printer via group policy preferences which finally causes a stack overflow.

    The issue is resolved in the Windows 10 cumulative update released on March 1, 2016.

    https://support.microsoft.com/en-us/kb/3140743

    Bug 5880736 — Reliability: High crash rate in GetDefaultPrinter

    Regards,

    Ben

    Thursday, May 19, 2016 12:43 AM