Event ID 1096 — Group Policy Registry Processing

Applies To: Windows Server 2008

The Registry client-side extension is responsible for writing and removing registry keys and values from the client's registry during Group Policy processing.

Event Details

Product: Windows Operating System
ID: 1096
Source: Microsoft-Windows-GroupPolicy
Version: 6.0
Message: The processing of Group Policy failed. Windows could not apply the registry-based policy settings for the Group Policy object %8. Group Policy settings will not be resolved until this event is resolved. View the event details for more information on the file name and path that caused the failure.


Correct a registry extension failure

The Registry client-side extension failed to read the registry.pol file from the Group Policy template location. The registry.pol file contains registry policy settings. This file may be missing, inaccessible, or corrupt.

Possible resolutions include:

  1. Ensure the registry.pol file exists in the location and has the same permissions as the gpt.ini file in the same Group Policy object (GPO).
  2. Ensure Sysvol replication is working properly on domain controllers.
  3. Delete the GPO and recreate it.


Group Policy applies during computer startup and user logon. Afterward, Group Policy applies every 90 to 120 minutes. Events appearing in the event log may not reflect the most current state of Group Policy. Therefore, you should always refresh Group Policy to determine if Group Policy is working correctly.

To refresh Group Policy on a specific computer:

  1. Open the Start menu. Click All Programs and then click Accessories.
  2. Click Command Prompt.
  3. In the command prompt window, type gpupdate and then press ENTER.
  4. When the gpupdate command completes, open the Event Viewer.

Group Policy is working correctly if the last Group Policy event to appear in the System event log has one of the following event IDs:

  • 1500
  • 1501
  • 1502
  • 1503

Group Policy Registry Processing

Group Policy Infrastructure