We help IT Professionals succeed at work.

Event ID 1091 and 1704

MokkNoir
MokkNoir asked
on
I have inheritted a single DC running Server 2003 that was logging Event ID 1058 and 1030 every five minutes. I did all the troubleshooting I could find searching in the MS and EE KB. After spending what seemed like a couple of years trying in vain to fix it, I had had enough. So, I used dcgpofix to "restore the Group Policy objects to their original state after initial installation". I was able to run it successfully and the 1058 and 1030 events are now gone. However, now every five min I get a 1704 and 1091 IDs. I haven't done anything since running the dcgpofix. I did run the gpotool.exe with the result below. Not sure where to go from here.

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
 
C:\Program Files\Windows Resource Kits\Tools>gpotool.exe
Validating DCs...
Available DCs:
gateserv.cccc.local
Searching for policies...
Found 2 policies
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Friendly name: Default Domain Policy
Policy OK
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Friendly name: Default Domain Controllers Policy
Policy OK
============================================================
 
Policies OK
 
C:\Program Files\Windows Resource Kits\Tools>

Open in new window

Comment
Watch Question

CERTIFIED EXPERT
Commented:
1704's are stating that GPO processing took place (a good thing)

The 1091's are addressed in the following MS KB

http://support.microsoft.com/kb/931352
CERTIFIED EXPERT

Commented:
The 1704's shouldnt happen every 5 min though - Try the fix from the KB and see if the frequency of the 1704's go down.

If you are still having issues the following is a workaround:
To workaround this issue, reset HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}\MaxNoGPOListChangesInterval to decimal 960 (0x3c0), 16 hours, the default for this REG_DWORD data type.

from http://www.eventid.net/display.asp?eventid=1704&eventno=134&source=SceCli&phase=1

Author

Commented:
Looks like this did the trick. Thanks for your help.

Explore More ContentExplore courses, solutions, and other research materials related to this topic.