On your Microsoft Windows 2000 Server-based computer, both of the following event IDs may be logged to the application event log every five minutes:
Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Time: 10:13:10 am
Description: Security policies are propagated with warning. 0x5: Access is denied.
Please look for more details in TroubleShooting section in Security Help.
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Time: 10:13:11 am
User: NT AUTHORITY\SYSTEM
Computer: Computer Name
Description: The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (5).
If verbose error logging is enabled during Group Policy processing in your domain, the following entries may be logged to the application event log every five minutes:
Security policies are propagated with warning. 0x5: Access is denied. Please look for more details in TroubleShooting section in Security Help.
The Group Policy client-side extension Security was passed flags (81) and returned a failure status code of (5).
Windows cannot process extension Security ProcessGroupPolicy. Return value (0x5).
If Security Configuration Client logging is enabled during Group Policy processing in your domain, the following entry is logged in the winlogon.log file:
Process GP template gpt00000.dom.
This is not the last GPO.
Administrative privileged user logged on.
Invoke Registry Value Delay Filter.
Analyze machine\software\microsoft\driver signing\policy.
Analyze machine\software\microsoft\non-driver signing\policy.
Parsing template C:\WINNT\security\templates\policies\gpt00000.dom.
Warning 5: Access is denied.
Error deleting SCP.
----Configuration engine is initialized with error.
----Un-initialize configuration engine...
The Winlogon.log file of other domain controllers in the domain may display messages with error code 1450 (ERROR_NO_SYSTEM_RESOURCES).Note
The corresponding description of the code 1450 error message is as follows:
Insufficient system resources exist to complete the requested service.
To resolve this issue, change the domain mode from mixed mode to native mode. To do so, follow these steps.Note
This is not the recommended method to resolve this issue. Microsoft is researching this issue and will post new information in the Microsoft Knowledge Base when that information is available.
- Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Domains and Trusts.
- Right-click the domain that you want to change, and then click Properties.
- On the General tab, click Change Mode under domain operations mode, and then click Yes.
Make sure that all the domain controllers in the domain are upgraded to Windows 2000 Server before you change the domain to native mode. After you change to native mode, you cannot change back to mixed mode.
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section of this article.
For additional information about similar problems with the SceCli and the Userenv event logs, click the following article number to view the article in the Microsoft Knowledge Base:
Event ID 1000, 1001 is logged every five minutes in the application event log
Article ID: 319352 - Last Review: June 19, 2014 - Revision: 2.0
- Microsoft Windows 2000 Server