Event ID 1000

  • Thread starter Thread starter Alan
  • Start date Start date
A

Alan

Hi there,

I'm sure that this problem has arose a number of times, but none of the
posts I've looked at quite seem to help:

I've created an OU with one computer & one user in it. I've succesfully
applied GP's and they work ok, both at computer and user level. I have spent
most of the day trying to get software deployment working ok. I've done it
before with no problem. If I log onto the PC as the user (just plain user
rights), the program I've deployed does not appear. If I log on as that user
on my PC, I can see the program in the 'Add New Program' just fine.
Something I have noticed is that this error appears every time I log on as a
normal user on their PC:
EventID: 1000
Windows cannot unload your registry file. If you have a roaming profile,
your settings are not replicated. Contact your administrator.
DETAIL - Access is denied. , Build number ((2195))
Source:userenv"

I have got Service Pack 4 installed. If I run msiexec from a command line on
the user pc I can install the program just fine. It just will not appear in
the Add New Program /Add New Program applet, and I get this bloody annoying
error. If I use GPRESULT on the user pc I cannot see any mention about the
software I want to deploy. Also, in the USERENV.LOG I can see lots of
'unable to make hive=5' errors.
Please, can someone help !

Regards

Alan
 
The errors that you are seeing indicates that the user profile cannot be
unloaded because a process has an open handle to the registry and it will
not close it. That should not cause the problem with software deployment.
There are a few articles online hat should address those errors.

Is the client PC receiving any policies at all?. If the client is not
receiving the policy then that client will not receive the package. Verify
that the client is pointing to a DNS server that holds the records for your
AD domain. You should also check the security on the GPO to verify that the
computer account is not denied from receiving the policy. For more group
policy t-shooting steps take a look at "250842 Troubleshooting Group Policy
Application Problems http://support.microsoft.com/?id=250842". After you
verify that the client is receiving policies then you may want to enable
application management logging (see 223300 How to Enable Windows Installer
Logging
http://support.microsoft.com/?id=223300 ) . This log will provide more
detailed information. Post any errors in the newsgroup.


--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Well, any policies I apply, for example the home page url or the desktop
wallpaper all seem to apply ok, its just this Software Deployment that's
acting up. That's why I thought the event error 1000 might have something do
with it.

How would I check the GPO to verify that the computer account is not denied
from receiving the policy?

Thanks for your help.

Alan
 
Look at the properties of the GPO and click the security tab. You will see
who has read and apply group policy permission there and who doe not have
this permission.

You mentioned that you are receiving policies. Are you receiving the policy
that holds the software deployment settings? I thought that you stated that
you were not. Have you tried creating a new software deployment policy.
The new policy would have the default permissions so that would rule out a
permission problem. Did you enable application deployment logging? If so,
have you looked for errors in the log.

Usually if there is a problem deploying an app you will see an error in the
application event log. Check the application log again for errors.
--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Found out the problem.

The OU in question has no local member server and as such have to connect to
the DC over the WAN. As soon as I set the 'slow connection' policies up in
the Domain GPO everything was ok. It seems that over a 'slow connection'
some policies are applied, but not those that are deemed time consuming and
its not until the 'slow connection' policies are applied that the software
deployment policy comes into effect.

Thanks very much for your help though Tim, as I following on from your
suggestions I found out a couple of other things I would have otherwise
missed.

Alan
 
Back
Top