We have been getting Userenv 1085 errors in our event logs for some time now.
The message is that:

"The Group Policy client-side extension Security failed to execute. Please
look for any errors reported earlier by that extension."

Right before this error is the 1202 warning from SceCli:

"Security policies were propagated with warning. 0x4b8 : An extended error
has occurred.
For best results in resolving this event, log on with a non-administrative
account and search http://support.microsoft.com for "Troubleshooting Event
1202's".

When we turn on debugging, we get the following in winlogon.log:

"Configure machine\software\microsoft\driver signing\policy. Undo value for
the undefined group policy setting <machine\software\microsoft\driver
signing\policy> wasn't reset successfully (1627). Undo value was not
removed. Error 1627: Function failed during execution.
Error configuring machine\software\microsoft\driver signing\policy."

I am at a loss to explain this error and have found nothing on the Internet
that seems to relate to our situation. Most Internet posts report this error
on servers, but we get it on workstations. Any troubleshooting suggestions
would be appreciated.

DCs are Windows Server 2003 Sp 1
Workstations are Windows XP SP2

Thanks,

Rob

The links at http://www.eventid.net may help. --- Steve

http://www.eventid.net/display.asp?e...re nv&phase=1
http://www.eventid.net/display.asp?e...eCli &phase=1


"Rob Commarota" <RobCommarota@discussions.microsoft.com> wrote in message
news:093FA7D0-F8DF-4645-8115-4EF441611C63@microsoft.com...
> We have been getting Userenv 1085 errors in our event logs for some time
> now.
> The message is that:
>
> "The Group Policy client-side extension Security failed to execute. Please
> look for any errors reported earlier by that extension."
>
> Right before this error is the 1202 warning from SceCli:
>
> "Security policies were propagated with warning. 0x4b8 : An extended error
> has occurred.
> For best results in resolving this event, log on with a non-administrative
> account and search http://support.microsoft.com for "Troubleshooting Event
> 1202's".
>
> When we turn on debugging, we get the following in winlogon.log:
>
> "Configure machine\software\microsoft\driver signing\policy. Undo value
> for
> the undefined group policy setting <machine\software\microsoft\driver
> signing\policy> wasn't reset successfully (1627). Undo value was not
> removed. Error 1627: Function failed during execution.
> Error configuring machine\software\microsoft\driver signing\policy."
>
> I am at a loss to explain this error and have found nothing on the
> Internet
> that seems to relate to our situation. Most Internet posts report this
> error
> on servers, but we get it on workstations. Any troubleshooting
> suggestions
> would be appreciated.
>
> DCs are Windows Server 2003 Sp 1
> Workstations are Windows XP SP2
>
> Thanks,
>
> Rob