Hello!
I encounter some problems during applying Group Policy Preferences on my clients. I noticed Event log entries with source GroupPolicy, the ID 5016 and a message like "Completed Group Policy Environment Extension Processing in 125269 milliseconds."
So, in that case, the extension processing took 120 seconds! It varies from 1 second to 200 seconds. It takes only long time after rebooting the PC, not with group policy updates during runtime. In the cases of longer processing (10 sec and more) I see errors like the following in the gpsvc.log:
GPSVC(420.560) 17:27:47:767 ProcessGPOs: Processing extension Group Policy Environment
GPSVC(420.560) 17:27:47:767 ReadStatus: Read Extension's Previous status successfully.
GPSVC(420.560) 17:27:47:767 CompareGPOLists: The lists are the same.
GPSVC(420.560) 17:27:47:767 GPLockPolicySection: Sid = (null), dwTimeout = 30000, dwFlags = 0
GPSVC(420.560) 17:27:47:767 LockPolicySection called for user <Machine>
GPSVC(420.560) 17:27:47:767 Sync Lock Called
GPSVC(420.560) 17:27:47:767 Writer Lock got immediately.
GPSVC(420.560) 17:27:47:767 Lock taken successfully
GPSVC(420.560) 17:27:47:767 ProcessGPOList: Entering for extension Group Policy Environment
GPSVC(420.560) 17:27:47:767 MachinePolicyCallback: Setting status UI to Richtlinie "Group Policy Environment" wird übernommen...
GPSVC(420.560) 17:27:47:767 ProcessGPOList: No changes. CSE will not be passed in the IwbemServices intf ptr
GPSVC(420.438) 17:27:49:530 Target = Machine
GPSVC(420.438) 17:27:49:530 Target = Machine, ChangeNumber 0
GPSVC(420.560) 17:28:04:381 ProcessGroupPolicyCompletedExInternal: Entering. Extension = {0E28E245-9368-4853-AD84-6DA3BA35BB75}, dwStatus = 0x0
GPSVC(420.560) 17:28:04:553 GetWbemServices: CoCreateInstance succeeded
GPSVC(1d8.804) 17:28:04:678 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x8c4
GPSVC(1d8.804) 17:28:04:678 Client_InitialRegisterForNotification: User = machine, changenumber = 0
GPSVC(420.438) 17:28:04:678 Target = Machine
GPSVC(1d8.804) 17:28:04:678 Client_RegisterForNotification: User = machine, changenumber = 0
GPSVC(1d8.804) 17:28:04:678 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(420.438) 17:28:06:206 Target = Machine
GPSVC(420.438) 17:28:06:206 Target = Machine, ChangeNumber 0
GPSVC(420.438) 17:28:06:206 Target = S-1-5-18
GPSVC(420.438) 17:28:06:206 Could not find user by sid, finding user by session id
GPSVC(420.438) 17:28:06:206 Caller requesting for user notification/lock is from session 0
GPSVC(420.438) 17:28:06:206 Target = S-1-5-18, ChangeNumber 0
GPSVC(420.438) 17:28:06:206 Could not find user by sid, finding user by session id
GPSVC(420.438) 17:28:06:206 Caller requesting for user notification/lock is from session 0
GPSVC(3fc.a3c) 17:29:12:631 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x378
GPSVC(3fc.a3c) 17:29:12:631 Client_InitialRegisterForNotification: User = machine, changenumber = 0
GPSVC(420.484) 17:29:12:631 Target = Machine
GPSVC(3fc.a3c) 17:29:12:647 Client_RegisterForNotification: User = machine, changenumber = 0
GPSVC(420.484) 17:29:12:647 Target = Machine, ChangeNumber 0
GPSVC(420.484) 17:29:13:973 Target = Machine
GPSVC(420.484) 17:29:13:973 Target = Machine, ChangeNumber 0
GPSVC(420.484) 17:29:14:800 Target = Machine
GPSVC(420.484) 17:29:14:800 Target = Machine, ChangeNumber 0
GPSVC(420.484) 17:29:14:800 Sid = (null), dwTimeout = 600000, dwFlags = 268435456
GPSVC(420.484) 17:29:14:800 LockPolicySection called for user <Machine>
GPSVC(420.484) 17:29:14:800 Async Lock called
GPSVC(420.484) 17:29:14:862 Reader has to wait for lock. ReaderID : 1.
GPSVC(420.484) 17:29:14:862 Registering wait for lock notification
GPSVC(1d8.b38) 17:29:16:765 CGPNotify::RegisterForNotification: Entering with target Machine and event 0xa58
GPSVC(1d8.b38) 17:29:16:765 Client_InitialRegisterForNotification: User = machine, changenumber = 0
GPSVC(420.484) 17:29:16:765 Target = Machine
GPSVC(1d8.b38) 17:29:16:765 Client_RegisterForNotification: User = machine, changenumber = 0
GPSVC(1d8.b38) 17:29:16:765 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(520.53c) 17:29:19:480 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x260
GPSVC(520.53c) 17:29:19:495 Client_InitialRegisterForNotification: User = machine, changenumber = 0
GPSVC(420.484) 17:29:19:495 Target = Machine
GPSVC(520.53c) 17:29:19:495 Client_RegisterForNotification: User = machine, changenumber = 0
GPSVC(520.53c) 17:29:19:495 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(520.53c) 17:29:20:431 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x478
GPSVC(520.53c) 17:29:20:431 Client_InitialRegisterForNotification: User = machine, changenumber = 0
GPSVC(420.484) 17:29:20:431 Target = Machine
GPSVC(520.53c) 17:29:20:431 Client_RegisterForNotification: User = machine, changenumber = 0
GPSVC(520.53c) 17:29:20:431 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(520.b7c) 17:29:20:806 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x49c
GPSVC(520.b7c) 17:29:20:806 Client_InitialRegisterForNotification: User = machine, changenumber = 0
GPSVC(420.484) 17:29:20:806 Target = Machine
GPSVC(520.b7c) 17:29:20:806 Client_RegisterForNotification: User = machine, changenumber = 0
GPSVC(520.b7c) 17:29:20:806 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(420.484) 17:29:20:806 Target = Machine, ChangeNumber 0
GPSVC(420.484) 17:29:44:085 Target = Machine
GPSVC(420.484) 17:29:44:085 Target = Machine, ChangeNumber 0
GPSVC(420.484) 17:29:44:241 Target = Machine
GPSVC(420.484) 17:29:44:241 Target = Machine, ChangeNumber 0
GPSVC(420.560) 17:29:54:353 ConnectToNameSpace: ConnectServer returned 0x0
GPSVC(420.560) 17:29:54:353 ProcessGroupPolicyCompletedExInternal: Extension {0E28E245-9368-4853-AD84-6DA3BA35BB75} was able to log data. Error = 0x0, dwRet = 0. Clearing the dirty bit
GPSVC(420.560) 17:29:54:697 ProcessGroupPolicyCompletedExInternal: Finished processing extension <Group Policy Environment> at 146609 ticks (ms)
GPSVC(420.560) 17:29:54:697 ProcessGroupPolicyCompletedExInternal: Leaving. Extension = {0E28E245-9368-4853-AD84-6DA3BA35BB75}, Return status dwRet = 0x0
GPSVC(420.560) 17:29:54:697 ProcessGPOList: Extension Group Policy Environment returned 0x0.
GPSVC(420.560) 17:29:54:697 ProcessGPOList: Extension Group Policy Environment status was not updated because there was no changes and no transition or rsop wasn't enabled
GPSVC(420.560) 17:29:54:697 UnLockPolicySection called for user <Machine>
GPSVC(420.560) 17:29:54:697 Waking up reader with ID [1]
GPSVC(420.484) 17:29:54:697 Found the Waiting Rpc Reader in the waiting list. Removing it...
GPSVC(420.560) 17:29:54:697 Setting lock state as lockedByReaders
GPSVC(420.484) 17:29:54:697 Lock taken successfully
GPSVC(420.560) 17:29:54:697 UnLocked successfully
GPSVC(420.484) 17:29:54:697 Sid = (null)
GPSVC(420.484) 17:29:54:697 UnLockPolicySection called for user <Machine>
GPSVC(420.484) 17:29:54:697 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(420.484) 17:29:54:697 Setting lock state as notLocked
GPSVC(420.484) 17:29:54:697 UnLocked successfully
GPSVC(420.560) 17:29:54:697 ProcessGPOs: -----------------------In other cases i geht other "Entering with target Machine anc event" codes (like 0x8b4, 0x348, ...). Also the repeats of "Target = Machine, ChangeNumber 0" lines varies (in that case 8, in another for example 5). But I always have the"Could not find user by sid, finding user by session id" line with the SID of the local system account.
If I remove the GPO with Enviroment Prefrences, another extension take long time, like Device Settings or Registry etc.
I applied the hotfix KB2775511, I renamed the setup.etl, and anything else i found on the internet. But nothing helped. DNS should work fine, the Eventlog also says, the client found a DC and successfully bound to it (in some milliseconds).
Does anyone have an idea, what als that "Target = Machine" and "Could not find user by sid" stuff means?
Thank you!