Event ID 1000 is logged on Windows 2000 domain controllers (830062)


The information in this article applies to:

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server

SYMPTOMS

The following event may be recorded in the application event log on one or more Microsoft Windows 2000 Server domain controllers:
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Description:
The Group Policy client-side extension EFS recovery was passed flags (17) and returned a failure status code of (1804).

CAUSE

This issue may occur when the default domain policy object or the default domain controllers policy object is corrupted.

RESOLUTION

To resolve this issue, restore the default domain policy and the default domain controllers policy from a backup. If you cannot restore the default domain policies from a backup, you can reset the default domain policy and the default domain controllers policy by using the Recreatedefpol tool.

Method 1: Restore the default domain policies from a backup

  1. From a backup, restore the default domain policy object and the default domain controllers policy object to an alternative location. The default domain policy object folder locations are described in step 2.
  2. Copy the default domain policy folders and all the contents that you restored in step 1 to the following locations:
    • SysvolPath\Sysvol\DomainName\policies\31B2F340-016D-11D2-945F-00C04FB984F9
    • SysvolPath\Sysvol\DomainName\policies\6AC1786C-016F-11D2-945F-00C04FB984F9
    Note The default Sysvol path is Drive:\SystemRoot\Sysvol.

    Note 6AC1786C-016F-11D2-945F-00C04FB984F9 is the GUID folder name for the default domain controllers policy object. 31B2F340-016D-11D2-945F-00C04FB984F9 is the GUID folder name for the default domain policy object.
After you copy the default domain policy folders, the default domain policies are replicated by the File Replication service (FRS).

Method 2: Reset the default domain policies with the Recreatedefpol tool

The Recreatedefpol tool resets the default domain policy and the default domain controllers policy.

Warning By default, the Recreatedefpol tool resets the default domain policy and the default domain controllers policy back to the original Windows 2000 settings. If you reset the default domain policies, any policy settings that you or another program have configured are lost.

The following file is available for download from the Microsoft Download Center:
DownloadDownload the Recreatedefpol.exe package now.

Important After you run the Recreatedefpol tool, you must log off and log on with administrator permissions. After you log on, you can make changes to the default domain policy and the default domain controllers policy settings.

MORE INFORMATION

For additional information about how to troubleshoot Group Policy in Windows 2000, click the following article number to view the article in the Microsoft Knowledge Base:

810739 White Paper: Troubleshooting Group Policy in Windows 2000

Modification Type:MajorLast Reviewed:5/24/2004
Keywords:kbwinservperf kbMgmtServices kbprb KB830062 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.