Group Policy Errors

Posted on 2011-10-26
Last Modified: 2012-06-21
My system logs are filled with Group Policy warnings on the many of the machines in the network. The error states that "Windows failed to apply the Scripts settings. Script settings may have its own log file. Please click on........." The details of the warning make it clear that the system cannot find the file specified. The Extension Name is Scripts with the Extension ID {42B5FAA-.......}. I have looked through all of the policies and the sysvol partition trying to find this GUID. I believe that it does not exist and this is why it is failing. Where could this script be getting called from? Is there a way to search for this GUID and figure out what is calling it, and removing the reference?  
Question by:GFCU
    LVL 1

    Expert Comment

    Are you running Small Business Server? Do you have multiple DCs?

    run RSOP.msc from an affected station. I will show you what policies are having errors without having to dig around for GUIDs. If the policy shows up in rsop then your sysvol folder is correct.

    I had this problem a while back and it turned out being that I was using a local path (c:\scripts\script.bat) in group policy instead of a UNC path (\\server\scripts\script.bat)

    Check your policies and make sure the scripts are accessible over the network path. You may just need to check the share and security tabs for the associated folder.
    LVL 1

    Author Comment

    This is the output from RSOP:

    Wednesday, October 26, 2011 2:16:53 PM

    Scripts failed due to the error listed below.
    The system cannot find the file specified.

    Should I be looking in the .bat logon scripts on sysvol? I do not see anything that jumps out at me. There are no scripts configured in any GPO's. The only scripts that I know of are being called are from the user profile in AD.

    LVL 1

    Author Comment

    LVL 1

    Expert Comment

    This looks like small business server...correct? What version?

    If so check the "Windows SBS CSE Policy", there are pre-configured startup scripts in that gpo....check the paths and file permissions of they exist.
    LVL 1

    Author Comment

    I am running RSOP on many different machines with the same results. The screenshot is actually from a 7 workstation. The AD servers are 2003 and 2008 servers. No SBS. I have looked in the scripts area of every GPO on the servers and there is nothing in any of them. I am not sure where this error is coming form. Thanks.
    LVL 1

    Expert Comment

    Check you AD server event logs for Replication errors and post. Also Please post the complete error information from a workstation.

    Have you added any new gpos lately? Or removed an old domain controller? This could be many things at this point without seeing the event logs from the servers.
    LVL 1

    Author Comment

    Workstation error:
    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    Updating Policy...

    User Policy update has completed successfully.
    Computer Policy update has completed successfully.

    The following warnings were encountered during computer policy processing:

    Windows failed to apply the Scripts settings. Scripts settings might have its ow
    n log file. Please click on the "More information" link.

    For more detailed information, review the event log or run GPRESULT /H GPReport.
    html from the command line to access information about Group Policy results.


    Log Name:      System
    Source:        Microsoft-Windows-GroupPolicy
    Date:          10/27/2011 10:52:36 AM
    Event ID:      1085
    Task Category: None
    Level:         Warning
    User:          SYSTEM
    Windows failed to apply the Scripts settings. Scripts settings might have its own log file. Please click on the "More information" link.
    Event Xml:
    <Event xmlns="">
        <Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" />
        <TimeCreated SystemTime="2011-10-27T14:52:36.166307600Z" />
        <Correlation ActivityID="{527A2971-ED5C-4504-987F-969BDEF4AE7E}" />
        <Execution ProcessID="212" ThreadID="2928" />
        <Security UserID="S-1-5-18" />
        <Data Name="SupportInfo1">1</Data>
        <Data Name="SupportInfo2">3961</Data>
        <Data Name="ProcessingMode">0</Data>
        <Data Name="ProcessingTimeInMilliseconds">1076</Data>
        <Data Name="ErrorCode">2</Data>
        <Data Name="ErrorDescription">The system cannot find the file specified. </Data>
        <Data Name="DCName">\\</Data>
        <Data Name="ExtensionName">Scripts</Data>
        <Data Name="ExtensionId">{42B5FAAE-6536-11d2-AE5A-0000F87571E3}</Data>

    The referenced extension ID does not exist in SYSVOL/ Not sure where it is coming from???
    LVL 1

    Author Comment

    Hanve not removed a domain controller. However, I just installed another AD/DNS server and will eventually shutting an AD/DNS server.
    LVL 1

    Accepted Solution

    I downloaded the Best Practices Analyzer for GP from Microsoft and it told me what file the suspect pointer was looking for. I placed an empty file in that location and will remove the reference.
    LVL 1

    Author Closing Comment

    I fugured it out.

    Featured Post

    Free Trending Threat Insights Every Day

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Join & Write a Comment

    Email statistics and Mailbox database quotas You might have an interest in attaining information such as mailbox details, mailbox statistics and mailbox database details from Exchange server. At that point, knowing how to retrieve this information …
    New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
    This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
    The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now