Error Messages Every 5 Minutes Report Events 1000, 1001, and 13508, Citing Replication Trouble

View products that this article applies to.

This article was previously published under Q285923

Expand all | Collapse all

SYMPTOMS

You may find that the following error messages are recorded in Event Viewer every 5 minutes on domain controller computers and every 20 minutes on member server computers:

Userenv 1000
Windows cannot access the registry information at \\domainname.com\sysvol\domainname.com\Policies\{ file://\\domainname.com\sysvol\domainname.com\Policies\{31B2F340-016D D-11D2-945F-00C04FB984F9}\Machine\registry.pol with (1398).

SceCli 1001
Security policy cannot be propagated. Cannot access the template. Error code=3.

Userenv 1000
The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (3).

NtFrs 13508
Description: The File Replication Service is having trouble enabling replication from (computername) to (computername) for c:\winnt\sysvol\domain; retrying.

RESOLUTION

To resolve this issue, synchronize the computers with the domain controller clock time. Follow these steps:

Run the following command on all computers to synchronize the clock time with the domain controller:

net time \\(domain controller name) /set /y
Stop and then restart the File Replication Service on all servers that are experiencing the problem.
Open Event Viewer to make sure that the errors are no longer occurring.