GPO - IP Security failed due to an error and failed to log Resultant Set of Policy information. The policy object does not exist.

garryshape
garryshape used Ask the Experts™
on
I am showing this error in all my domain controllers (mix of 2008 R2 and 2012 R2, functioning at 2008 R2 level) when I run rsop.msc or gpupdate:

"IP Security failed due to an error and failed to log Resultant Set of Policy information.
The policy object does not exist."

Here's GPO gui screenshot:
Ipsecurity
How can I trace which GPO is causing that?

Rsop.msc takes a long time to get resultant as well upon launching it and I think this may be causing that.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
View Solutions Only
Top Expert 2016
Commented:
you probably have a replication problem between your Domain Controllers or your sysvol has gotten corrupted.  Each group policy has their own GUID, with maps to a folder that contains the gpt.ini and xml files that define the policy.  So until you remove the policy and recreate it or restore from backup users will experience slow logons
garryshape

Author

Commented:
Replication seems to work for the most part fine but does give errors related to the same IP security issue in Repadmin /showrepl.

By corrupt sysvol do you mean like extensions adm/admx files group policy uses?
David Johnson, CD
Top Expert 2016
Commented:
no the actuall group policy that exists in a folder which is a GUID ( enclosed in {}'s) which has the gpt.ini and the actual settings.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial