Group policy problem related to client-side security extension

We have been getting Userenv 1085 errors in our event logs for some time now.
The message is that:

"The Group Policy client-side extension Security failed to execute. Please
look for any errors reported earlier by that extension."

Right before this error is the 1202 warning from SceCli:

"Security policies were propagated with warning. 0x4b8 : An extended error
has occurred.
For best results in resolving this event, log on with a non-administrative
account and search http://support.microsoft.com for "Troubleshooting Event
1202's".

When we turn on debugging, we get the following in winlogon.log:

"Configure machine\software\microsoft\driver signing\policy. Undo value for
the undefined group policy setting machine\software\microsoft\driver
signing\policy wasn't reset successfully (1627). Undo value was not
removed. Error 1627: Function failed during execution.
Error configuring machine\software\microsoft\driver signing\policy."

I am at a loss to explain this error and have found nothing on the Internet
that seems to relate to our situation. Most Internet posts report this error
on servers, but we get it on workstations. Any troubleshooting suggestions
would be appreciated.

DCs are Windows Server 2003 Sp 1
Workstations are Windows XP SP2

Thanks,

Rob

The links at http://www.eventid.net may help. --- Steve

http://www.eventid.net/display.asp?e...re nv&phase=1
http://www.eventid.net/display.asp?e...eCli &phase=1


"Rob Commarota" wrote in message
...
We have been getting Userenv 1085 errors in our event logs for some time
now.
The message is that:

"The Group Policy client-side extension Security failed to execute. Please
look for any errors reported earlier by that extension."

Right before this error is the 1202 warning from SceCli:

"Security policies were propagated with warning. 0x4b8 : An extended error
has occurred.
For best results in resolving this event, log on with a non-administrative
account and search http://support.microsoft.com for "Troubleshooting Event
1202's".

When we turn on debugging, we get the following in winlogon.log:

"Configure machine\software\microsoft\driver signing\policy. Undo value
for
the undefined group policy setting machine\software\microsoft\driver
signing\policy wasn't reset successfully (1627). Undo value was not
removed. Error 1627: Function failed during execution.
Error configuring machine\software\microsoft\driver signing\policy."

I am at a loss to explain this error and have found nothing on the
Internet
that seems to relate to our situation. Most Internet posts report this
error
on servers, but we get it on workstations. Any troubleshooting
suggestions
would be appreciated.

DCs are Windows Server 2003 Sp 1
Workstations are Windows XP SP2

Thanks,

Rob