Group Policy Local Users and Groups – Event ID: 8194

If you ask me, nothing is more frustrating than when group policy objects don’t work how they are supposed to.  Whether it is that they aren’t applying when they should or applying when they shouldn’t.  Regardless, my PDC was giving me this error today:

“The client-side extension could not remove computer policy settings for ‘Default Domain Policy {31B2F340-016D-11D2-945F-00C04FB984F9}’ because it failed with error code ‘0x8007000d The data is invalid.’ See trace file for more details.”

Sure thing boss, that makes some sense.  Or Not.

Here is what I had to do:

  1. Open up the object indicated in the error message from with in Group Policy Object Editor.
  2. Expand: Default Domain Policy -> Computer Configuration -> Policies -> Administrative Templates -> System -> Group Policy -> Logging and tracing
  3. I enabled ALL of the options and set the settings for each to this:
  4. I’m on a Windows Server 2008 machine so my log/trace files were located here: C:\ProgramData\GroupPolicy\Preference\Trace
  5. I opened up the log file there and searched for: 0x8007000d
  6. I found the search string and a line or two above it was the path we need to head to (yours may differ): F:\ProgramData\Microsoft\Group Policy\History\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\Preferences\Groups\”
  7. Rename the file that is there, in my case it was Groups.xml.  I simply renamed it to GroupsOld.xml
  8. Run gpupdate /force
  9. That’s it.  Now tell me, why can’t the error logs in Event Viewer just come right out and say that?!

, , ,

No comments yet.

Powered by WordPress. Designed by Woo Themes