?
Solved

Event ID 1000 - Windows cannot query for the list of Group Policy Objects

Posted on 2008-01-24
1
Medium Priority
?
304 Views
Last Modified: 2010-03-17
Hi,

I keep getting the above message which is filling up the Application Log in Event Viewer on the DC in my W2K AD domain. Users are also complaining of slow logon authentication to their PC's.

Source - userenv
Event ID - 1000
User - NTAUTHORITY/SYSTEM

Thanking You ....
0
Comment
Question by:saliyam
1 Comment
 
LVL 71

Accepted Solution

by:
Chris Dent earned 2000 total points
ID: 20741373

That would very much suggest a problem with your DNS configuration.

For an AD Domain all clients and servers should refer to a DNS Server that can answer requests about the AD DNS Domain. Generally speaking this means the Domain Controllers on your network (which should be hosting a Forward Lookup Zone for your domain).

If they refer to anything else, whether ISPs DNS Server or another internal server that can't answer their questions you end up with GP errors, slow logons and general authentication problems.

Chris
0

Featured Post

Free tool for managing users' photos in Office 365

Easily upload multiple users’ photos to Office 365. Manage them with an intuitive GUI and use handy built-in cropping and resizing options. Link photos with users based on Azure AD attributes. Free tool!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
High user turnover can cause old/redundant user data to consume valuable space. UserResourceCleanup was developed to address this by automatically deleting user folders when the user account is deleted.
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

593 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question