We are having some issues with GPOs not applying to our Windows 7 Enterprise clients (it works fine on our XP clients). In particular, the GPO that resets the Local Admin password is not applying. I'll post the Event Log errors below in hopes that they may mean more to someone else, but the errors seem pretty generic. For the record, we have a separate policy that Renames the local Administrator account on the PCs. That policy is functioning normally, and is ordered well before the change password policy. I've been looking at this for a couple of days, and while I can find an error message, I cannot seem to find out what the messages mean. Hopefully someone can make sense of some of this:
GPResult:
Group Policy Local Users and Groups Failed 2/26/2010 3:42:30 PM
Group Policy Local Users and Groups failed due to the error listed below.
The data is invalid.
Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between 2/26/2010 3:42:30 PM and 2/26/2010 3:42:30 PM.
EventLog:
Log Name: Application
Source: Group Policy Local Users and Groups
Date: 2/26/2010 3:42:30 PM
Event ID: 8194
Task Category: (2)
Level: Error
Keywords: Classic
User: SYSTEM
Computer: testpc.mynet.local
Description:
The client-side extension could not remove computer policy settings for 'Preferences - Local PC Admin Password {9875C3CF-349A-4D12-AFBB-FF66A0AA0936}' because it failed with error code '0x8007000d The data is invalid.' See trace file for more details.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Group Policy Local Users and Groups" />
<EventID Qualifiers="34305">8194</EventID>
<Level>2</Level>
<Task>2</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-02-26T20:42:30.000000000Z" />
<EventRecordID>112846</EventRecordID>
<Channel>Application</Channel>
<Computer>testpc.mynet.local</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data>remove</Data>
<Data>computer</Data>
<Data>Preferences - Local PC Admin Password {9875C3CF-349A-4D12-AFBB-FF66A0AA0936}</Data>
<Data>0x8007000d The data is invalid.</Data>
</EventData>
</Event>
GP Event Log:
Log Name: Microsoft-Windows-GroupPolicy/Operational
Source: Microsoft-Windows-GroupPolicy
Date: 2/26/2010 3:42:30 PM
Event ID: 7016
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: testpc.mynet.local
Description:
Completed Group Policy Local Users and Groups Extension Processing in 249 milliseconds.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" />
<EventID>7016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>2</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2010-02-26T20:42:30.795473100Z" />
<EventRecordID>619948</EventRecordID>
<Correlation ActivityID="{0439105C-9CEB-4181-9460-B8FC4E54E7D7}" />
<Execution ProcessID="1040" ThreadID="2284" />
<Channel>Microsoft-Windows-GroupPolicy/Operational</Channel>
<Computer>testpc.mynet.local</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="CSEElaspedTimeInMilliSeconds">249</Data>
<Data Name="ErrorCode">2147942413</Data>
<Data Name="CSEExtensionName">Group Policy Local Users and Groups</Data>
<Data Name="CSEExtensionId">{17D89FEC-5C44-4972-B12D-241CAEF74509}</Data>
</EventData>
</Event>
GPsvc.log excerpt:
GPSVC(3f0.4d4) 14:36:19:812 ProcessGPOs: Processing extension Group Policy Local Users and Groups
GPSVC(3f0.4d4) 14:36:19:813 ReadStatus: Read Extension's Previous status successfully.
GPSVC(3f0.4d4) 14:36:19:813 CompareGPOLists: One list is empty
GPSVC(3f0.4d4) 14:36:19:830 GPLockPolicySection: Sid = (null), dwTimeout = 30000, dwFlags = 0
GPSVC(3f0.4d4) 14:36:19:831 LockPolicySection called for user <Machine>
GPSVC(3f0.4d4) 14:36:19:831 Sync Lock Called
GPSVC(3f0.4d4) 14:36:19:832 Writer Lock got immediately.
GPSVC(3f0.4d4) 14:36:19:832 Lock taken successfully
GPSVC(3f0.4d4) 14:36:19:833 ProcessGPOList: Entering for extension Group Policy Local Users and Groups
GPSVC(3f0.4d4) 14:36:19:833 MachinePolicyCallback: Setting status UI to Applying Group Policy Local Users and Groups policy...
GPSVC(3f0.4d4) 14:36:19:834 GetWbemServices: CoCreateInstance succeeded
GPSVC(3f0.4d4) 14:36:19:836 ConnectToNameSpace: ConnectServer returned 0x0
GPSVC(3f0.4d4) 14:36:19:846 LogExtSessionStatus: Successfully logged Extension Session data
GPSVC(3f0.4d4) 14:36:20:022 ProcessGroupPolicyCompletedExInternal: Entering. Extension = {17D89FEC-5C44-4972-B12D-241CAEF74509}, dwStatus = 0x8007000d
GPSVC(3f0.4d4) 14:36:20:024 GetWbemServices: CoCreateInstance succeeded
GPSVC(3f0.4d4) 14:36:20:026 ConnectToNameSpace: ConnectServer returned 0x0
GPSVC(3f0.4d4) 14:36:20:027 ProcessGroupPolicyCompletedExInternal: Extension {17D89FEC-5C44-4972-B12D-241CAEF74509} was able to log data. Error = 0x0, dwRet = -2147024883. Clearing the dirty bit
GPSVC(3f0.4d4) 14:36:20:028 ProcessGroupPolicyCompletedExInternal: Finished processing extension <Group Policy Local Users and Groups> at 72758 ticks (ms)