Well, the first thing you have to do is make sure you have a default domain
policy GPO linked to the domain and a default domain controllers policy
linked to the DC OU. That error usually results when you've set security
policy, usually user rights assignment or restricted group policy, to a user
or group that no longer exists in the domain. The error occurs every 5 min.
because that is how often DCs refresh their Group Policy settings. In and of
itself, the error is benign, but should be fixed to keep the event log
cleared. You fix it by simply removing the reference to the deleted user or
group from the security policy where its being set.
--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
Check out
http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Whitepapers and Utilities for all things Group Policy-related
And, the Windows Group Policy Guide is out from Microsoft Press!!! Check it
out at
http://www.microsoft.com/mspress/books/8763.asp
GPOGUY Blog:
http://blogs.dirteam.com/blogs/gpoguy