Error message when you try to view the settings for a GPO in GPMC with Service Pack 1 on a Windows Server 2003-based computer: "An error has occurred while collecting data for Security Configuration Engine (SCE) Extension"

Article translations Article translations
Article ID: 942412 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

On a Windows Server 2003-based computer, you try to use Group Policy Management Console (GPMC) with Service Pack 1 to view the settings for a Group Policy object (GPO). However, you receive the following error message after you expand Security Settings on the Settings tab of the GPO:
An error has occurred while collecting data for Security Configuration Engine (SCE) Extension.

This error impacts the following settings:
Account Policies (Password Policy, Account Lockout Policy, Kerberos Policy)
Local Policies (Audit Policy, User Rights Assignment, Security Options)
Event Log
Restricted Groups
System Services
Registry
File System
The following errors apply to all of the above settings:
The file "\\<Domain SysVol>\<Group Policy Object GUID>\Machine\microsoft\windows nt\secedit\gpttmpl.inf" is not in a valid format. Details: Index was out of range. Must be non-negative and less than the size of the collection. Parameter name: index
In this situation, you cannot view any Group Policy settings when you expand Security Settings. This problem occurs if the Restricted Groups setting is defined in the GPO.

CAUSE

This problem occurs if the Gpttmpl.inf file contains incorrect information. After you define the Restricted Groups setting in a GPO, the Gpttmpl.inf file in the corresponding Group Policy folder contains a [Group Membership] segment that resembles the following:
 [Group Membership]
<Restrict group name or SID>_Memberof = 
<Restrict group name or SID>_Members =
This problem occurs if either of the entries under the [Group Membership] segment is missing.

RESOLUTION

To resolve this problem, find the information that is missing from the Gpttmpl.inf file. Then, add the missing information back to the Gpttmpl.inf file.

MORE INFORMATION

If you enable verbose logging for GPMC, more information will be logged in the Gpmgmt.log file and in the GpmgmtManaged.log file. Both files reside in the temporary (%Temp%) folder of the current user. When this problem occurs, a message that resembles the following is logged in the GpmgmtManaged.log file:
Reporting(3516.1276)17:45:21 SecuritySettings::InitializeGPO:******The following exception occurred:
*******Message : Index was out of range. Must be non-negative and less than the size of the collection.
Parameter name: index
*******StackTrace :
at System.Collections.SortedList.GetKey(Int32 index)
at Microsoft.GroupPolicy.Reporting.Extensions.Security.SecuritySettings.InitializeGPO(GPOContext context)
Reporting(3516.1276)17:45:21 GPOUserOrComputerConfig::.ctor:******The following exception occurred:
*******Message : Errors.Extensions.GeneralFileError
*******Descriptive Message : The file "\\<DNS domain name>\SysVol\<Domain name>\Policies\<Policy GUID>\Machine\microsoft\windows nt\secedit\gpttmpl.inf" is not in a valid format. Details: Index was out of range. Must be non-negative and less than the size of the collection.
Parameter name: index
*******StackTrace :
To enable verbose logging for GPMC, follow these steps:
  1. Click Start, click Run, type regedit, and then click OK.
  2. Locate and then click the following registry subkey:
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
  3. On the Edit menu, point to New, and then click Key.
  4. Type Diagnostics, and then press ENTER.
  5. Click the subkey that you created in step 4.
  6. On the Edit menu, point to New, and then click DWORD Value.
  7. Type gpmgmttracelevel, and then press ENTER.
  8. Right-click gpmgmttracelevel, and then click Modify.
  9. In the Value data box, type 2, and then click OK.
  10. On the Edit menu, point to New, and then click DWORD Value.
  11. Type gpmgmtlogfileonly, and then press ENTER.
  12. Right-click gpmgmtlogfileonly, and then click Modify.
  13. In the Value data box, type 1, and then click OK.
  14. Exit Registry Editor.
For more information, visit the following Microsoft TechNet Web site:
http://technet2.microsoft.com/WindowsServer/en/library/0907105e-7856-4c93-b97f-a9a306623af51033.mspx
To download Group Policy Management Console with Service Pack 1, visit the following Microsoft Download Center Web site:
http://www.microsoft.com/downloads/details.aspx?familyid=0A6D4C24-8CBD-4B35-9272-DD3CBFC81887&displaylang=en

Properties

Article ID: 942412 - Last Review: October 11, 2007 - Revision: 1.3
APPLIES TO
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows Server 2003, Standard x64 Edition
  • Microsoft Windows Server 2003, Enterprise x64 Edition
  • Microsoft Windows Server 2003, Datacenter x64 Edition
  • Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
  • Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
Keywords: 
kberrmsg kbexpertiseinter kbtshoot kbprb KB942412

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com