Event ID 1128 — Application of Group Policy

  • Article

Applies To: Windows Server 2008

Group Policy uses the information collected during preprocessing to apply settings to the computer or user. The Group Policy service cycles through each client-side extension, sharing the previous collected information. Each client-side extension then applies its specific policy settings to the computer or users. During this process, one or more client-side extensions may report problems when attempting to apply policy settings.

Event Details

Product: Windows Operating System
ID: 1128
Source: Microsoft-Windows-GroupPolicy
Version: 6.0
Symbolic Name: gpEvent_EXTENSION_EXECUTION_DENIED
Message: The Group Policy Client Side Extension %3 may have caused the Group Policy Service to terminate unexpectedly. To prevent further failures in the Group Policy Service, this extension has been temporarily disabled until after the next system restart. Group Policy settings managed by this extension may no longer be enforced until the system is restarted. The vendor of this extension should be contacted if this issue reoccurs.

Resolve

Disable client-side extension

The Group Policy service has temporarily disabled this client-side extension and the processing of its policy settings to prevent any further disruption with Group Policy processing.

This client-side extension is enabled on the next computer restart. Contact the vendor of this extension if the issue continues.

Verify

Group Policy applies during computer startup and user logon. Afterward, Group Policy applies every 90 to 120 minutes. Events appearing in the event log may not reflect the most current state of Group Policy. Therefore, you should always refresh Group Policy to determine if Group Policy is working correctly.

To refresh Group Policy on a specific computer:

  1. Open the Start menu. Click All Programs and then click Accessories.
  2. Click Command Prompt.
  3. In the command prompt window, type gpupdate and then press ENTER.
  4. When the gpupdate command completes, open the Event Viewer.

Group Policy is working correctly if the last Group Policy event to appear in the System event log has one of the following event IDs:

  • 1500
  • 1501
  • 1502
  • 1503

Application of Group Policy

Group Policy Infrastructure