You are currently offline, waiting for your internet to reconnect

A Group Policy object is not applied as expected after you restart a Windows XP-based client computer or a Windows Server 2003-based computer

Support for Windows XP has ended

Microsoft ended support for Windows XP on April 8, 2014. This change has affected your software updates and security options. Learn what this means for you and how to stay protected.

Support for Windows Server 2003 ended on July 14, 2015

Microsoft ended support for Windows Server 2003 on July 14, 2015. This change has affected your software updates and security options. Learn what this means for you and how to stay protected.

SYMPTOMS
When you restart your Microsoft Windows XP-based client computer or your Microsoft Windows Server 2003-based computer after you join a domain, a Group Policy object (GPO) may not be applied as expected.
CAUSE
This issue may occur if the client's computer system clock is set to a different time than the time that is set on the domain controller computer.
WORKAROUND
To work around this issue, use one of the following methods.

Method 1: Resync the computer before you restart

To make sure that the GPO is applied successfully when you restart the client computer, follow these steps before you restart the client computer:
  1. Click Start, click Run, type cmd, and then click OK.
  2. At the command prompt, type the following commands, and then press ENTER at the end of each command:
    w32tm /config /update

    w32tm /resync
    Note After you complete each command, you receive the following message:
    The command completed successfully.
  3. Type exit, and then press ENTER to quit the command prompt.
  4. Restart your client computer.

Method 2: Restart the client computer two times

To make sure that the GPO is applied successfully, restart your client computer two times after you first join the domain.
MORE INFORMATION
If you view the event log after this issue occurs, you find the following events:
Event Type: ErrorEvent Source: UserenvEvent Category: NoneEvent ID: 1097Date: <date>Time: <time>User: NT AUTHORITY\SYSTEMComputer: <computer_name>Description:Windows cannot find the machine account, The clocks on the client and server machines are skewed.For more information, see Help and Support Center at http://support.microsoft.com.Event Type: ErrorEvent Source: UserenvEvent Category: NoneEvent ID: 1030Date: <date>Time: <time>User: NT AUTHORITY\SYSTEMComputer: <computer_name>Description:Windows cannot query for the list of Group Policy objects. A message that describes the reason for this was previously logged by the policy engine.For more information, see Help and Support Center at http://support.microsoft.com.USERENV.LOG (see attached)++++++++++++++GetGPOInfo: Entering...USERENV(200.388) 21:31:06:674 GetMachineToken: AcceptSecurityContext failed with 0x80090324USERENV(200.388) 21:31:06:694 GetGPOInfo: Failed to get the machine token with -2146893020USERENV(200.388) 21:31:06:734 GetGPOInfo: Leaving with 0USERENV(200.388) 21:31:06:734 GetGPOInfo: ********************************USERENV(200.388) 21:31:06:744 ProcessGPOs: GetGPOInfo failed.
windowsxp winxp daylight saving NTP Peer Clock Stratum Unidentified reference source summer time joining domain Application Event Log Userenv 1097
Properties

Article ID: 886516 - Last Review: 10/11/2007 02:32:50 - Revision: 3.4

Microsoft Windows XP Professional, Microsoft Windows XP Home Edition, Microsoft Windows XP Media Center Edition, Microsoft Windows XP Tablet PC Edition, Microsoft Windows Server 2003, Standard Edition (32-bit x86), Microsoft Windows Server 2003, Enterprise Edition (32-bit x86), Microsoft Windows Server 2003, Standard x64 Edition, Microsoft Windows Server 2003, Enterprise x64 Edition, Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems

  • kbtshoot kbprb KB886516
Feedback
].appendChild(m);