Hello,
I hope all is well.
We have 150 provisioned servers that run the same image. Each day anywhere from 2-5 of them come up with a lot of 1128 Errors in the event log. Running Group policy results shows the error message, "An attempt was made to load a program with an incorrect format"
The actual policy can vary and include one or more of the following: Citrix group policy, Group policy drive mappings, Group policy Internet Settings, group policy registry, Internet explorer zonemapping.
Once the event happens it is reproducible running gpudate. I have compared a good server next to a bad server running gpudate at the same time, hitting the same domain controller and the one that works works and the one that doesn't doesn't.
Comparing "HKLM\software\microsoft\windows NT\current version\winlogon\GPextensions" doesn't show any differences between the one that works and the one that doesn't.
Bouncing the server will fix the problem at least for the short term.
Any idea on how to fix this once and for all?
Thanks