Event ID 1127 — Group Policy Service

  • Article

Applies To: Windows Server 2008

The Group Policy service is responsible for applying Group Policy to computers and users. By default, the service starts during computer startup and remains operating until computer shutdown. Errors occurring within the core service usually result in a failure of Group Policy processing.

Event Details

Product: Windows Operating System
ID: 1127
Source: Microsoft-Windows-GroupPolicy
Version: 6.0
Symbolic Name: gpEvent_CATCH_ALL
Message: The processing of Group Policy failed due to an internal error. Please look into the Group Policy operational log for the specific error message. An attempt will be made to process Group Policy again at the next refresh cycle.

Resolve

Correct an unclassified error

An internal Group Policy error occured that is not classified by another Group Policy event. Possible resolutions include:

  1. Review the system log for errors appearing before this event and follow the troubleshooting procedures associated with the event.
  2. Find the error code displayed in the error event. The error code appears on the Details tab of the error event. The error code and error description fields may help identify the reason for the failure.
  3. Use the Group Policy Operational log and Group Policy troubleshooting procedures (found at https://go.microsoft.com/fwlink/?LinkId=74139) to further diagnose the problem.

Verify

Group Policy applies during computer startup and user logon. Afterwards, Group Policy applies every 90 to 120 minutes. Events appearing in the event log may not reflect the most current state of Group Policy. Therefore, you should always refresh Group Policy to determine if Group Policy is working correctly.

To refresh Group Policy on a specific computer:

  1. Open the Start menu. Click All Programs and then click Accessories.
  2. Click Command Prompt.
  3. In the command prompt window, type gpupdate and then press ENTER.
  4. When the gpupdate command completes, open the Event Viewer.

Group Policy is working correctly if the last Group Policy event to appear in the System event log has one of the following event IDs:

  • 1500
  • 1501
  • 1502
  • 1503

Group Policy Service

Group Policy Infrastructure