userenv GPO flood

userenv GPO flood

Post by J Torre » Thu, 09 Oct 2003 03:56:38

I'm having the issue with all the computers in the
domain. They all get this userenv error:

The Group Policy client-side extension IP Security was
passed flags (17) and returned a failure status code of

The userlog has the following errors:
USERENV(a4.408) 05:01:47:056 ProcessGPOs: Extension IP
Security ProcessGroupPolicy failed, status 0x201b.

I've seen this in a bunch of posting but no solution was
ever given. Did anybody have any luck yet?


userenv GPO flood

Post by toma » Thu, 09 Oct 2003 06:17:36

This probably comes from assigning but not configuring an IPSEC policy
Check to see if this is the case.

If policies were assigned but then deleted you can probably assign an
item on the Default Domain Controllers policy and then close the
Then re-open the policy and unassign the IPSEC policy.
Use Secedit to refresh the machine policy.

Tom Ausburne (MSFT)
Windows 2000 Directory Services
This posting is provided "AS IS" with no warranties, and confers no