JSI Tip 3561. Corrupt Local Group Policy database causes repeated Application Events 1000, 1202, 412, and 454.

Jerold Schulman

April 8, 2001

1 Min Read
ITPro Today logo in a gray background | ITPro Today


If your Windows 2000 Server posts the following events to the Application event log, every five minutes, your local Group Policy database file is corrupt:

Event Type: ErrorEvent Source: UserenvEvent Category: NoneEvent ID: 1000Date: 6/7/2000Time: 2:56:53 PMUser: WINDOWS NT AUTHORITYSYSTEMComputer: ASKO-ONEDescription: The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (1208). Event Type: WarningEvent Source: SceCliEvent Category: NoneEvent ID: 1202Date: 6/7/2000Time: 2:56:53 PMUser: N/AComputer: ASKO-ONEDescription: Security policies are propagated with warning. 0x4b8 : An extended error has occurred.             Please look for more details in TroubleShooting section in Security Help. Event Type: ErrorEvent Source: ESENTEvent Category: Logging/Recovery Event ID: 454Date: 6/7/2000Time: 2:56:53 PMUser: N/AComputer: ASKO-ONEDescription: services (304) Database recovery/restore failed with unexpected error -530. Event Type: ErrorEvent Source: ESENTEvent Category: Logging/Recovery Event ID: 412Date: 6/7/2000Time: 2:56:53 PMUser: N/AComputer: ASKO-ONEDescription: services (304) Unable to read the log header. Error -530.

To resolve the problem, and return the Local Security Policy to its' installation state:

01. Create an OldSecurity subfolder at %SystemRoot%Security.

02. Move the log files and chk file from %SystemRoot%Securitylogs to %SystemRoot%SecurityOldSecurity.

03. Move the database from %SystemRoot%SecurityDatabaseSecedit.sdb to %SystemRoot%SecurityOldSecurity and change the file extension to .old.

04. Start / Run / MMC / OK.

05. Console / Add/Remove Snap-in.

06. Add the Security and Configuration Analysis snap-in. Press Close and OK.

07. Right-click Security and Configuration Analysis and press Open Database.

08. Navigate to the %SystemRoot%SecurityDatabase folder, type Secedit.sdb into File name, and press Open.

09. When prompted to import a template, select Setup security.inf.

10. Press Open. Ignore any Access Denied error.

11. Right-click Security and Configuration Analysis and press Configure Computer Now.




Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like