We help IT Professionals succeed at work.

Server starts generating event 1053 on random time and stops responding to login after a while. Hard power reboot only solutions.

Medium Priority
Last Modified: 2008-03-17
I have a Windows 2003 server. This server starts to generate, at random time in the evening or night, 1053 events.

The server is in dutch. i  hope this is not a big problem. I'll try to translate is.
Source: Userenv
Catogory: none
Event: 1053

Kan de gebruikers- of computernaam niet vaststellen. Onvoldoende opslagruimte beschikbaar om deze bewerking te voltooien. . Het verwerken van het groepsbeleid wordt afgebroken.

Cannot determine user- or computername. Not enough storage space available to compleet the action. The processing of the grouppolicy will be terminated.

After the first error the server creates every 5 minutes the same error.

When we reset the server it'll work all day without any error. And every evening or night it will start creating errors.

Sometime it start with 2 or 3 error with event ID:
Source: Userenv
Catogory: none
Event: 1030

Kan niet zoeken naar de lijst met groepsbeleidsobjecten. Controleer het gebeurtenislogboek op berichten die eerder door de beleidsengine zijn geregistreerd en die mogelijk de oorzaak hiervoor bevatten.

cannot search for the list with grouppolicyobjects. Check the applicationlogbook for messages that were generated before by the policyengine en that may revaile the cause of this.
But there are no errors before these.

after which it gives the 1053 until reboot.

The server is up to date (sp1). He is only used for file and print services. No Exchange or something like that.

Ik hope somebody solved this problem and can help me.

Watch Question


I've checked link.

The regisstry setting is not set on my server.

I've did check the security log and found another thing that has very likely to do with the problem.

In the securitylog there is constantly the following event genration

540: login Server-2$ ok
576: special rights ok for user Server-2$
than right after i get several times
538: logoff user Server-2$

This happens constantly. The same sequense happens serveral time in every minute.

Sometimes there are other users that log on in the same manner.

Hopes the helps.

Thanks for the fast responce.

576 seems to be an audit event log. Normally indicates that a privilege that is not auditable on an individual-use basis has been assigned to a user's security context at logon". See MSW2KDB for additional information about this event.

> Thanks for the fast responce.

Nor problem


I've reinstalled the server. Problem solved


I don't know how to close this call.

Please advise.

PAQed with points refunded (250)

Community Support Moderator

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.