none
The processing of Group Policy failed. RRS feed

  • Question

  • We are seeing an issue on one of the machines in the domain where it fails to process all  of the group policies. (user and machine)

    Here is one of the system error messages from the event log.

    The processing of Group Policy failed. Windows could not apply the registry-based policy settings for the Group Policy object LDAP://CN=Machine,CN={51B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domain,DC=local. Group Policy settings will not be resolved until this event is resolved. View the event details for more information on the file name and path that caused the failure.

    C:\Windows\System32\GroupPolicy and C:\Windows\System32\GroupPolicyUser folders are empty.

    We attempted to dis-join and then join the domain, however group policy processing issue remains unresolved.

    What would be the next troubleshooting step for this problem?

    Thanks


    • Edited by net_tech Wednesday, October 5, 2016 5:20 PM
    Wednesday, October 5, 2016 5:17 PM

Answers


  • In our case it was event ID 8194 & 1001

    Fixed with
     psexec -i -s -d cmd.exe from the new DOS window ran rundll32 keymgr.dll,KRShowKeyMgr and removed the problematic account.



    Thursday, October 6, 2016 8:01 PM

All replies

  • Hi,

    Thanks for your posting.

    Have you check the following MS articles?

    Event ID 1096 — Group Policy Registry Processing

    http://technet.microsoft.com/en-us/library/dd392529(v=ws.10).aspx

    "Failed to Open the Group Policy Object" Error Message Occurs When You Try to Open a Policy As a Domain Administrator

    http://support.microsoft.com/kb/294257

    If the issue still persists, try this suggestion:

    Navigate to C:\Windows\System32\GroupPolicy\Machine, rename registry.pol file to registry.bak and refresh the policy with gpupdate /force.


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    Thursday, October 6, 2016 2:35 PM
    Owner

  • In our case it was event ID 8194 & 1001

    Fixed with
     psexec -i -s -d cmd.exe from the new DOS window ran rundll32 keymgr.dll,KRShowKeyMgr and removed the problematic account.



    Thursday, October 6, 2016 8:01 PM
  • Thanks for your sharing on this issue.

    If the issue was resolved, please remember to click “Mark as Answer” on the post.  It will be very beneficial for other community members who have similar questions.


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, October 7, 2016 2:30 AM
    Owner