Win2003/XP: Event code 8196 with 0xC0000005 for executing login scripts (or mapping network drives)

-

i'm experiencing following problem on windows server 2003 windows xp sp3 clients:

for reasons, login scripts users don't executed (suddenly, before running perfectly!). when simulation group policies event log shows error:

the client-side extension caught unhandled exception "0xc0000005" inside: ''threadentry : client main''

event type: error
event source: group policy local users , groups
event category: (2)
event code: 8196
user: nt-authority\system

the same error happened me when trying configure new features of 2008s gpo (on 2003 server) through windows 7 client (like mapping network drives directly), working @ first stopped exact same event code other event source. 

i tried lot find more information online, threads in board don't apply directly situation or not solved yet. however, opinion that 0xc0000005 seems due lack of permission, can't see permission missing. provide more information "trace file" (that event log saying), don't know find it.

thank in advance,
johannes 

hi johannes,

 

when first met similar error before, issue caused group policy preferences items?

 

if so, suggest install hotfix in kb below:

 

group policy preferences client-side extension hotfix rollup

http://support.microsoft.com/kb/974266#top

 

as trace file concern, please refer link below enable group policy preferences logging , tracing:

http://blogs.technet.com/b/askds/archive/2008/07/18/enabling-group-policy-preferences-debug-logging-using-the-rsat.aspx

 

if issue persists, please send me more information analyzing. convenience, have created workspace you. can upload information files following link. (please choose "send files microsoft")

 

workspace url: https://sftus.one.microsoft.com/choosetransfer.aspx?key=c7596a6a-5bcc-4b45-b780-14e7cae31be0

password: u-jcun0gzy8t

 

note: due differences in text formatting various email clients, workspace link above may appear broken. please sure include text between '(' , ')' when typing or copying workspace link browser. meanwhile, please note files uploaded more 72 hours deleted automatically. please ensure notify me timely after have uploaded files. thank understanding.

 

collect gpmc log

==============

1. on domain controller, click start -> run, type gpmc.msc, load gpmc console. if gpmc snap-in not installed.

2. right click on "group policy result" , choose wizard generate report problematic computer , user account (please place appropriately). (choose computer , select proper user in wizard)

3. right click resulting group policy result , click "save report…" => save report , upload link provided.

 

collect userenv.log

==============

subkey: hkey_local_machine\software\microsoft\windows nt\currentversion\winlogon

entry: userenvdebuglevel

type: reg_dword

value data: 0x00030002 (hexadecimal)

 

after issue reoccurs, find , upload %windir%\debug\usermode\userenv.log file.

 

regards,

cecilia zhou

--------------------------------------------------------------------------------

please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread.



Windows Server  >  Group Policy



Comments

Post a Comment

Popular posts from this blog

some help on Event 540

-
does event 540 me distinguish between user , administrator access?    this event generated ypon successfull logon, logon exactly? successful logon on system?   is there other way log administrator access system using event viewer?   thank valuable response   georges hi,   as far know, cannot distinguish between user , administrator access event 540. more information, please refer to:   event id: 540 http://www.microsoft.com/technet/support/ee/transform.aspx?prodname=windows+operating+system&prodver=5.0&evtid=540&evtsrc=security&lcid=1033   events 528 , 540 http://blogs.msdn.com/b/ericfitz/archive/2004/12/09/279282.aspx   regards, bruce this posting provided "as is" no warranties, , confers no rights. please remember click "mark answer" on post helps you, , click "unmark answer" if marked post not answer question. can beneficial other community members reading thread.
Read more

WMI Repository 4GB limit - Win 2003 Ent Question

-
Image
hi there, i've question size limit on wmi repository (being 4gb). if isn't correct place post this, apologies , can let me know wheere post this? i've come across few servers running citrix have reached limit on wmi repository size , need install ibm director agent hw monitoring. during install getting 'out of disk space' errors entered in mofcomp.log: "(mon apr 02 04:10:36 2012.172843) : error occurred while processing item 4: (mon apr 02 04:10:36 2012.172843) : error number: 0x8004103b, facility: wmi description: out of disk space" when error number http://msdn.microsoft.com/en-us/library/windows/desktop/aa394559%28v=vs.85%29.aspx i see this: wbem_e_out_of_disk_space 2147749947 (0x8004103b) disk out of space or 4 gb limit on wmi repository (cim repository) size reached. windows xp , windows 2000/nt:   disk out of space. i'm wondering if there reason why limit set 4gb or can increase needs be? can't seem find reas
Read more

Event ID 1302 (error 1307) DFS replication service encountered an error while writing to the debug log file

-
Image
hello. we @ step 0 of migration frs dfsr sysvol replication on windows 2008r2 dc. every time run powershell dfsrmig / getmigrationstate says: "unable create dfsr migration log file. error 1307. all domain controllers have migrated global state 'start'. migration has reached consistent state on domain controllers. succeeded." it creates event id 1302 in "dfs replication" event log, explaining error 1307 means: "this security id may not assigned ownder of object ". i already checked space limits, quotas, permissions on c:\windows\debug according microsoft support article unable fix it. although, there new entries added dfsr00095.txt log file despite error. dfsrxxxx file has not been archived .gz format, and, beleive, contains dfsr diagnostics , events. here of latest entries: 20150908 08:47:27.867 11616 sysm  3354 migration::sysvolmigration::getsysvolreadyflag [mig] sysvol ready 20150908 08:47:27.867 11616 sysm   456 migrati
Read more