Event ID 1000 and 1001 Repeat Every 5 Minutes in the Event Log

This article was previously published under Q271213
This article applies to Windows 2000. Support for Windows 2000 ends on July 13, 2010. The Windows 2000 End-of-Support Solution Center is a starting point for planning your migration strategy from Windows 2000. For more information see the Microsoft Support Lifecycle Policy.
This article has been archived. It is offered "as is" and will no longer be updated.
Event ID 1000 and 1001 may be repeatedly be logged in the Application log every five minutes with the following information:
Event Type: Error
Event Source: SceCli
Event Category: None
Event ID: 1001
Date: 4/7/2000
Time: 4:30:46 AM
User: N/A
Description: Security policy cannot be propagated. Cannot access the template. Error code = 3. \\mydomain.com\sysvol\mydomain.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 4/7/2000
Time: 4:30:46 AM
Description: The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (3).
This issue can occur if the %SystemRoot%\SYSVOL\Domain\Policies Group Policy directory structure is missing or is incorrect. The Replication service is trying to replicate the directory but cannot locate it.
To resolve this issue, the directory must be restored to allow replication between domain controllers. This directory can either be restored from a backup or it can be recreated. For additional information about how to recreate the policy directory, click the article numbers below to view the articles in the Microsoft Knowledge Base:
253268 Group Policy Error Message Without Appropriate Sysvol Contents
257338 Troubleshooting Missing SYSVOL and NETLOGON Shares

Article ID: 271213 - Last Review: 12/05/2015 21:21:54 - Revision: 2.4

Microsoft Windows 2000 Server, Microsoft Windows 2000 Advanced Server

  • kbnosurvey kbarchive kbfrs kbgpo kbprb KB271213