Hi,
Our server/client environment is a mix of Windows Server 2012, 2008 R2, 2008 and Windows 7. We have nothing below Windows Server 2008. Both the forest and domain functional levels are at Windows 2008 R2.
Every 15 minutes, the following event is generated on all machines joined to the domain:
"Windows could not record the Resultant Set of Policy (RSoP) information for the Group Policy extension <IP Security>. Group Policy settings successfully applied to the computer or user; however, management tools may not report accurately."
Below is the detailed view:
Log Name: System
Source: Microsoft-Windows-GroupPolicy
Date: 12/5/2013 2:24:17 PM
Event ID: 1091
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: book.wolfson.fiu.edu
Description:
Windows could not record the Resultant Set of Policy (RSoP) information for the Group Policy extension <IP Security>. Group Policy settings successfully applied to the computer or user; however, management tools may not report accurately.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-GroupPolicy" Guid="{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}" />
<EventID>1091</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>1</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2013-12-05T19:24:17.011Z" />
<EventRecordID>439591</EventRecordID>
<Correlation ActivityID="{211DE0BB-42E9-4D61-A1D3-0D3F09A24477}" />
<Execution ProcessID="1076" ThreadID="3300" />
<Channel>System</Channel>
<Computer>book.wolfson.fiu.edu</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="SupportInfo1">1</Data>
<Data Name="SupportInfo2">3934</Data>
<Data Name="ProcessingMode">0</Data>
<Data Name="ProcessingTimeInMilliseconds">6817</Data>
<Data Name="ErrorCode">2</Data>
<Data Name="ErrorDescription">The system cannot find the file specified. </Data>
<Data Name="DCName">\\drexel.wolfson.fiu.edu</Data>
<Data Name="ExtensionName">IP Security</Data>
<Data Name="ExtensionId">{e437bc1c-aa7d-11d2-a382-00c04f991e27}</Data>
</EventData>
</Event>
Based on the ErrorDescription field above, there seems to be some sort of file missing but that's a little vague and I cannot figure out how to fix. Another clue is that when I search on the internet for the ExtensionID string {e437bc1c-aa7d-11d2-a382-00c04f991e27}, it seems to be related to the IP Security policy setting, however, that setting is not even configured in group policy within our domain or on any machine.
Any suggestion?
Thanks!
-sul.