Avatar of morse57
morse57 asked on

User domain login problem

Hi experts

This problem only began yesterday and, as far as I am aware, nothing has been changed in the config of the domain to cause it.
One user (me, as it happens) is getting the following errors in the event logs on login.

 Event Type:      Warning
Event Source:      EventSystem
Event Category:      (52)
Event ID:      4356
Date:            23/05/2008
Time:            10:20:58
User:            N/A
Computer:      AML-PC04
Description:
The COM+ Event System failed to create an instance of the subscriber partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:{6295DF2D-35EE-11D1-8707-00C04FD93327}.  CoGetObject returned HRESULT 8000401A.

Then:
Event Type:      Error
Event Source:      Userenv
Event Category:      None
Event ID:      1030
Date:            23/05/2008
Time:            10:22:09
User:            AML\steveh
Computer:      AML-PC04
Description:
Windows cannot query for the list of Group Policy objects. A message that describes the reason for this was previously logged by the policy engine.

This happens regardless of the client machine.  Any ideas, please?
Many thanks

SBSWindows XP

Avatar of undefined
Last Comment
morse57

8/22/2022 - Mon
plug1

What symptoms are you seeing apart from the errors?
ASKER
morse57

Hi Plug1 & thanks for your response.

None found so far, except for longer logging-on time, however these errors only started appearing yesterday.
plug1

Check these permissions on the DC, this is copied from wirelessadmins previous fix:

Heres what to check for Share and NTFS permissions for the SYSVOL Share:

Permissions for C:\

NTFS Permissions
Administrators = full control
Creator owner = none checked, but special permissions checked and greyed out
Everyone = none checked, but special permissions checked and greyed out
System = Full Control
Domain\Users = Read & Execute, List Folder contents, Read

Permissions for C:\Windows\Sysvol

Share
Do not share this folder

NTFS
Administrators = full control
Authenticated Users = Read & Execute, List Folder Contents, Read
Creator Owner = none checked, but special permissions checked and greyed out
Server Operators = Read & Execute, List Folder contents, Read
System = Full Control

Permissions for C:\Windows\Sysvol\Sysvol

Share
Share this folder
Maximum Allowed
Administrators = full control
Authenticated Users = Full Control
Everyone = Read

NTFS
Administrators = Full Control, greyed out (inherited)
Authenticated Users = Read & Execute, List Folder contents, Read
Creator Owner = none checked, but special permissions checked and greyed out
Server Operators = Read & Execute, List Folder contents, Read, (greyed out)
System = Full Control, greyed out (inherited)


 
After you have set the proper file permissions I ran the following from command prompt
secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose

<enter>

Gpupdate

<enter>

reboot
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck
ASKER
morse57

Thanks.  
We're starting a hoiliday weekend now so I'll get to it next week & let you know.
ASKER
morse57

Still trying to get time to do this.  I'll get back with result when I can
ASKER
morse57

Hi Plug1

Sorry for the delay - we are moving offices and I'm managing 2 ites + migration at the moment.

I have checked the permissions you've listed and all are good.
The event 4356 is only occurring infrequently and the event 1030 is curiously followed by this entry in the event viewer:
Event Type:      Information
Event Source:      SceCli
Event Category:      None
Event ID:      1704
Date:            07/07/2008
Time:            10:22:23
User:            N/A
Computer:      AML-PC05
Description:
Security policy in the Group policy objects has been applied successfully.

If the list of GP objects can't be read, how can they be implemented?

Thanks
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
ASKER
morse57

Further to the above, I also ran the additional commands and made the reboot
ASKER CERTIFIED SOLUTION
morse57

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question