Error Messages Every 5 Minutes Report Events 1000, 1001, and 13508, Citing Replication Trouble


You may find that the following error messages are recorded in Event Viewer every 5 minutes on domain controller computers and every 20 minutes on member server computers:

Userenv 1000
Windows cannot access the registry information at \\\sysvol\\Policies\{ file://\\\sysvol\\Policies\{31B2F340-016D D-11D2-945F-00C04FB984F9}\Machine\registry.pol with (1398).

SceCli 1001
Security policy cannot be propagated. Cannot access the template. Error code=3.

Userenv 1000
The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (3).

NtFrs 13508
Description: The File Replication Service is having trouble enabling replication from (computername) to (computername) for c:\winnt\sysvol\domain; retrying.


To resolve this issue, synchronize the computers with the domain controller clock time. Follow these steps:
  1. Run the following command on all computers to synchronize the clock time with the domain controller:

    net time \\(domain controller name) /set /y
  2. Stop and then restart the File Replication Service on all servers that are experiencing the problem.
  3. Open Event Viewer to make sure that the errors are no longer occurring.

Article ID: 285923 - Last Review: Jan 7, 2008 - Revision: 1