More Than 15 IP Addresses Assigned to Server Causes Active Directory-Related Problems (258960)
The information in this article applies to:
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Advanced Server
This article was previously published under Q258960 SYMPTOMS
After you add 16 or more IP addresses to a domain controller and then try to apply Group Policy, events similar to the following events are recorded in the Application log and the policy settings are not applied:
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 4/3/2000
Time: 5:59:49 PM
User: NT AUTHORITY\SYSTEM
Computer: MYDC
Description:
Windows cannot access the registry information at \\mydomain.com\sysvol\mydomain.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\registry.pol with (1351).
Event Type: Error
Event Source: SceCli
Event Category: None
Event ID: 1001
Date: 4/3/2000
Time: 5:59:49 PM
User: N/A
Computer: MYDC
Description:
Security policy cannot be propagated. Cannot access the template. Error code = 3.
\\mydomain.com\sysvol\mydomain.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 4/3/2000
Time: 5:59:49 PM
User: NT AUTHORITY\SYSTEM
Computer: MYDC
Description:
The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (3).
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Description: Windows cannot access the registry information at
\\domainname\sysvol\domainname\Policies\GUID\Macine\registry.pol with
(1231).
Also, attempting to add users to groups in Active Directory Users and
Computers, or attempting to add users or groups to an Access Control List (ACL) on a file or folder produces the following error message:
Object Picker cannot open because no locations from which to choose objects
could be found.
When you click OK, you receive the following message:
Unable to display the user selections dialog. The parameter is incorrect.
CAUSE
This behavior is caused by a buffer in Lmhsvc.dll that is limited to hold up to 15 IP addresses only.
RESOLUTIONThis problem was corrected in version Service Pack 2 for Windows 2000.
To resolve this issue, please upgrade to this version.
WORKAROUND
Remove some of the IP addresses that are currently assigned to the computer.
STATUSMicrosoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.
| Modification Type: | Minor | Last Reviewed: | 9/26/2005 |
|---|
| Keywords: | kbHotfixServer kbQFE kbbug kbfix kbGPO kbQFE KB258960 |
|---|
|