none
GPP query DllName registry entry?

    Question

  • So I finally bit the bullet, and migrated from PolicyMaker to GPP CSE's.  I had to manually migrate all my polcies, and that sucked.  I tried to hold off for a migration tool, but could not wait any longer.  Anyway.  I have everything working except for I get these few errors in reguards to our Power Schema GPO.  I have not been able issolate what is causing the issue.

    Event Type: Error
    Event Source: Userenv
    Event Category: None
    Event ID: 1041
    Date:  1/21/2009
    Time:  3:20:11 PM
    User:  NT AUTHORITY\SYSTEM
    Computer: TESTBED
    Description:
    Windows cannot query DllName registry entry for {FFC64763-70D2-45BC-8DEE-7ACAF1BA7F89} and it will not be loaded. This is most likely caused by a faulty registration.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    Wednesday, January 21, 2009 11:39 PM

Answers

  • Well I figured it out finally.  Turns out the PolicyMaker CSE's were not all removed by the GPP CSE patch.  I found several in HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions that were for PolicyMaker.  Fix was really easy just create a GPP GPO that deletes the old keys. 

    These are the ones I found causing errors so far.  After they are removed the errors stop.  I also checked to make sure they were not part of the GPP CSE's by installing the CSE patch on a clean box, and checking to see if they were there.  They were not so I am sure its safe to remove them.  There might also be some in the HKCU hive also, but those don't seem to cause the Event ID Error.

    {F0DB2806-FD46-45B7-81BD-AA3744B32765}
    {F17E8B5B-78F2-49A6-8933-7B767EDA5B41}
    {F27A6DA8-D22B-4179-A042-3D715F9E75B5}
    {F581DAE7-8064-444A-AEB3-1875662A61CE}
    {F648C781-42C9-4ED4-BB24-AEB8853701D0}
    {F6E72D5A-6ED3-43D9-9710-4440455F6934}
    {FD2D917B-6519-4BF7-8403-456C0C64312F}
    {FFC64763-70D2-45BC-8DEE-7ACAF1BA7F89}
    • Marked as answer by yaplej Thursday, January 22, 2009 9:54 PM
    Thursday, January 22, 2009 9:21 PM

All replies

  • Well I figured it out finally.  Turns out the PolicyMaker CSE's were not all removed by the GPP CSE patch.  I found several in HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions that were for PolicyMaker.  Fix was really easy just create a GPP GPO that deletes the old keys. 

    These are the ones I found causing errors so far.  After they are removed the errors stop.  I also checked to make sure they were not part of the GPP CSE's by installing the CSE patch on a clean box, and checking to see if they were there.  They were not so I am sure its safe to remove them.  There might also be some in the HKCU hive also, but those don't seem to cause the Event ID Error.

    {F0DB2806-FD46-45B7-81BD-AA3744B32765}
    {F17E8B5B-78F2-49A6-8933-7B767EDA5B41}
    {F27A6DA8-D22B-4179-A042-3D715F9E75B5}
    {F581DAE7-8064-444A-AEB3-1875662A61CE}
    {F648C781-42C9-4ED4-BB24-AEB8853701D0}
    {F6E72D5A-6ED3-43D9-9710-4440455F6934}
    {FD2D917B-6519-4BF7-8403-456C0C64312F}
    {FFC64763-70D2-45BC-8DEE-7ACAF1BA7F89}
    • Marked as answer by yaplej Thursday, January 22, 2009 9:54 PM
    Thursday, January 22, 2009 9:21 PM
  • having exact same problem with keys

    {7B849a69-220F-451E-B3FE-2CB811AF94AE}
    and
    {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}

    all over the application log file.

    Is it safe to remove ? is this on the workstations  (do i need to delete this via the GPO as well on the workstations HOW?) and or the servers (found on the sbs 2003 server this in registery) how would i know ?

    and

    How do I create a GPP GPO that deletes the old keys?
    Thursday, June 18, 2009 10:03 AM
  • First confirm they are not part of the GPP CSE by configuring a freshly installed system, and install the GPP CSE.  If those keys are not present in that system them I would say its probably safe to remove them.

    That is if your not using any other 3rd party CSEs.

    Just create a GPO, or use an existing one then go to:
    Computer Configuration>Preferences>Windows Settings>Registry

    Create a new item
    Set the action to Delete
    Select the hive HKLM
    Set the Key path.

    You can only configure GPP on a Server 2008 box or Vista with RSAT installed.
    • Proposed as answer by tomberger Thursday, August 06, 2009 1:28 PM
    Thursday, June 18, 2009 7:20 PM
  • I'm a newbe on SBS2003 where do I find "Computer Configuration>Preferences>Windows Settings>Registry" and can you just use regedit
    Thursday, August 06, 2009 1:34 PM
  • You can only configure GPP on a Server 2008 box or Vista with RSAT installed.
    Yes, you can just use regedit but then you have to do it on each machine with the problem.
    • Edited by gerryan Monday, August 17, 2009 8:28 AM
    Monday, August 17, 2009 8:24 AM
  • I'm getting the same error, but this is on my laptop running XP sp3. Not sure what brought these on. I've installed and removed alot of 3rd party software. My thought is to do what you did and remove them. Maybe I should move them to another directory and see what happens, but not delete just in case they're needed.

    Any thoughts??????

    Thanks!!!

    Event Type: Error
    Event Source: Userenv
    Event Category: None
    Event ID: 1041
    Date:  9/30/2009
    Time:  12:05:17 PM
    User:  NT AUTHORITY\SYSTEM
    Computer: CC-1401
    Description:
    Windows cannot query DllName registry entry for {7B849a69-220F-451E-B3FE-2CB811AF94AE} and it will not be loaded. This is most likely caused by a faulty registration.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    • Proposed as answer by Piragash Wednesday, September 29, 2010 7:11 AM
    Thursday, October 01, 2009 5:45 PM
  • ChoiceCrosby

    Events displayed in Event log after uninstalling Internet Explorer 8 on Windows XP SP2 or SP3 or Windows server 2003 SP2 or lator:

    If you view the Event log in Windows XP SP2 or SP3 you might see event ID 1041 from Userenv after uninstalling Internet Explorer 8

    The message will be "Windows cannot query DllName registry entry for {7B849a69-220F-451E-B3FE-2CB811AF94AE} / {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D} and it will not be loaded. This is most likely caused by a faulty registration."

    The cause is that some of the Internet Explorer 8 registry keys were not removed when it was uninstalled. These keys do not affect the operation of Internet Explorer 6 or Internet Explorer 7.

    To resolve this error, delete the following registry keys:

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\]

    {7B849a69-220F-451E-B3FE-2CB811AF94AE} = Internet Explorer User Accelerators

    {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D} = Internet Explorer Machine Accelerators

    • Proposed as answer by Maria Servers Saturday, June 09, 2012 3:50 PM
    Tuesday, January 10, 2012 9:06 PM
  • Dinesh...many thanks.  That's exactly what it was for us.  Thanks for the info on it.
    Monday, April 30, 2012 5:18 PM
  • Thanks also from us. Had issues with IE on WS2003 and after reinstalling, and then downgrading for various reasons, these keys were left behind...
    Monday, December 17, 2012 3:59 PM
  • Had the same issue here.  Upgraded to IE7 then user said "wait go back to IE6" (why they would want to use IE6? idk!), after downgrading to IE6, and then upgrading again to IE7 (because I explained to her that IE7 isn't even supported anymore), these errors started happening.  I have been searching for a couple hours for a solution to my problem and finally found it!  THANK YOU!!!!
    Monday, May 13, 2013 9:47 PM
  • One more thing.  After deleting the registry keys, do a gpupdate and check the application event log to make sure the errors are no longer occuring. 
    Monday, May 13, 2013 9:56 PM
  • HI Dinesh,

    I know this is probably on the wrong forum (it only showed up on this forum when I Googled), but I have just started getting the same error on XP SP3 (yeah, I know, but I also have Win 7 machine which I am migrating to) and it happens when I am playing around with Outlook. I can be adding some attachments to an email, and Outlook will simply close without warning or error message.

    The Event Viewer shows the following:

    Windows cannot query DllName registry entry for {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D} and it will not be loaded. This is most likely caused by a faulty registration.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    Source:  userenv

    Category:  None

    Type:    Error

    Event_ID: 1041

    Based on the previous advice, can I just delete the registry entry for {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}?

    As I said, this has only started happening in the last few days, and I haven't (knowingly) changed anything on the machine.

    Regards



    • Edited by kiwirocker Tuesday, September 23, 2014 3:30 AM Added extra detail
    Tuesday, September 23, 2014 3:27 AM