FDCC Blog Alert: Issue with Windows Vista SP1 and GPResults

Author: Mandy Tidwell, Senior Consultant

Applies to: Windows Vista SP1

Setting: Computer ConfigurationWindows SettingsSecurity SettingsLocal PoliciesUser Rights AssignmentCreate Symbolic Links

History: After implementing FDCC on Windows Vista SP1, running the GPResults Wizard and navigating to

Computer Configuration


Windows Settings

Security Settings

results in the following error:

An error has occurred while collecting data for Security Configuration Engine (SCE) Extension.

This error impacts the following settings:



Account Policies (Password Policy, Account Lockout Policy, Kerberos Policy)Local Policies (Audit Policy, User Rights Assignment, Security Options)Event LogRestricted GroupsSystem ServicesRegistryFile System

The following errors apply to all of the above settings:


An unknown error occurred while data was gathered for this extension. Details: Requested value 'SeCreateSymbolicLinkPrivilege' was not found.


Issue: When the above policy is set to any value, the above error is logged.

Result: Security Setting information is unavailable in GPResult output. This problem does not affect Resultant Set of Policy (RSOP) output.

Resolution: This issue has been confirmed to be a problem with Windows Vista SP1 and there is a fix available. Because the fix is not publicly available at this time, please contact Microsoft Customer Support and reference KB number 955857. Note that this KB article is not yet publically available at the time of writing this blog but can be referenced to Microsoft Support. 

The following link provides information on contacting Microsoft support: http://support.microsoft.com/oas/default.aspx?prid=11274&gprid=500921.