Event ID 1000 and 1001 Repeat Every 5 Minutes in the Event Log (271213)

SYMPTOMS

Event ID 1000 and 1001 may be repeatedly be logged in the Application log every five minutes with the following information:

Event Type: Error
Event Source: SceCli
Event Category: None
Event ID: 1001
Date: 4/7/2000
Time: 4:30:46 AM
User: N/A
Computer: MYCOMPUTER
Description: Security policy cannot be propagated. Cannot access the template. Error code = 3. \\mydomain.com\sysvol\mydomain.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 4/7/2000
Time: 4:30:46 AM
User: NT AUTHORITY\SYSTEM
Computer: MYCOMPUTER
Description: The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (3).

CAUSE

This issue can occur if the %SystemRoot%\SYSVOL\Domain\Policies Group Policy directory structure is missing or is incorrect. The Replication service is trying to replicate the directory but cannot locate it.

RESOLUTION

To resolve this issue, the directory must be restored to allow replication between domain controllers. This directory can either be restored from a backup or it can be recreated. For additional information about how to recreate the policy directory, click the article numbers below to view the articles in the Microsoft Knowledge Base:

253268 Group Policy Error Message Without Appropriate Sysvol Contents

257338 Troubleshooting Missing SYSVOL and NETLOGON Shares