Member Avatar for robert2k7

Has anybody come across a solution to 1085 errors and 1001 errors across a domain get the error's logged every 5 minutes on clients.

  • 3 Contributors
  • 2 Replies
  • 60 Views
  • 3 Days Discussion Span
  • Latest Post Latest Post by DimaYasny

Dani AI

Generated

Good call by to get the exact Source and Description. A 5‑minute cadence across many XP clients usually points to Group Policy processing failing in the background (Event 1085 from Userenv is common) and retrying on each refresh. Also check whether someone set the policy "Group Policy refresh interval for computers" to 5 minutes (Computer Configuration -> Administrative Templates -> System -> Group Policy); default is ~90 minutes for workstations.

Quick way to isolate the culprit CSE (Folder Redirection, Scripts, Software Installation, etc.) and any paired 1001 events:

  • On an affected client, capture applied GPOs and component status:
gpresult /scope:computer /v > %temp%\gp.txt
gpresult /scope:user /v >> %temp%\gp.txt

Review failures and the GPO/CSE names. Docs: gpresult.

  • Force processing and immediately watch the logs to correlate 1085 with 1001:
gpupdate /force

Docs: gpupdate.

  • If 1085 mentions a GUID, map it under:
    HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions
    to see which extension is failing. Then verify the UNC paths it uses (scripts, MSI sources, folder redirection paths), permissions, and SYSVOL/NETLOGON availability.

  • For deeper detail, enable Userenv debug logging to C:\Windows\Debug\UserMode\Userenv.log and reproduce once. This will identify the failing CSE and GPO by name/GUID: .

  • If this is widespread, sanity‑check DC health/replication and DNS so clients can read SYSVOL consistently:

dcdiag /v

Docs: dcdiag.

Finally, tell us the Source for 1001. If it is MsiInstaller, you likely have a GPO‑assigned MSI with a bad or slow UNC path causing both 1085 and 1001. If it is Dhcp-Client or Windows Error Reporting, that points elsewhere. ’s question is key too: are you seeing slow logons, missing scripts, or failed software installs? That helps pinpoint the CSE.

Recommended Answers

All 2 Replies

Member Avatar for serenity

First you need to know what those errors are. What does your log tell you about them?

Check out Event ID. It's a great site to give you more info about the errors.

Member Avatar for DimaYasny

is there any negative effect you might be witnessing, except for the red marks in the logs?

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.