You cannot determine Group Policy security settings in a workgroup joined Windows-client


Consider the following scenario:
  • You have Windows 7-based, Windows 8-based, and Windows 8.1-based computers in a workgroup environment.
  • You open the Local Group Policy Editor, and then you navigate to Computer Configuration\Windows Settings\Security Settings.
  • You change some security settings, and then you click User Rights Assignment.
In this scenario, you receive the following error message:

The Group Policy security settings that apply to this machine could not be determined.
The error returned when trying to retrieve these settings from the local security policy database (%windir%\security\database\secedit.sdb) was: An extended error has occurred.


  • All local security settings will be displayed, but no indication will be given as to whether a given security setting is defined by Group Policy.
  • Any local security setting that are changed through this User Interface may subsequently be overridden by domain-level policies. Also, the Rights Assignment window will not be displayed.


This problem occurs because an issue that affects the remote procedure call (RPC) runtime when you update the security settings.


To work around this problem, open a new instance of Local group Policy Editor to check the security settings after you update the settings.

Article ID: 3118649 - Last Review: ಫೆಬ್ರ 14, 2017 - Revision: 1

Windows 8.1 Enterprise, Windows 8.1 Pro, Windows 8 Enterprise, Windows 8 Pro, Windows 7 Enterprise, Windows 7 Professional, Windows 7 Ultimate