berkscompsltd
a month ago
What do these mean - they come in a sequence all at once every 50 minutes or so:

Log Name: System
Source: Application Management Group Policy
Date: 20/06/2024 09:38:23
Event ID: 101
Task Category: None
Level: Warning
Keywords: Classic
User: SYSTEM
Computer: EFACSAPP01.domain.local
Description:
The assignment of application Agent Shell from policy Spiceworks collection agent deployment failed. The error was : %%1274
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Management Group Policy" />
    <EventID Qualifiers="0">101</EventID>
    <Level>3</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2024-06-20T08:38:23.883383400Z" />
    <EventRecordID>319685</EventRecordID>
    <Channel>System</Channel>
    <Computer>EFACSAPP01.domain.local</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data>Agent Shell</Data>
    <Data>Spiceworks collection agent deployment</Data>
    <Data>1274</Data>
  </EventData>
</Event>


Then this


Log Name: System
Source: Application Management Group Policy
Date: 20/06/2024 09:38:23
Event ID: 103
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: EFACSAPP01.domain.local
Description:
The removal of the assignment of application Agent Shell from policy Spiceworks collection agent deployment failed. The error was: %%2
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Management Group Policy" />
    <EventID Qualifiers="0">103</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2024-06-20T08:38:23.883383400Z" />
    <EventRecordID>319686</EventRecordID>
    <Channel>System</Channel>
    <Computer>EFACSAPP01.domain.local</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data>Agent Shell</Data>
    <Data>Spiceworks collection agent deployment</Data>
    <Data>2</Data>
  </EventData>
</Event>

Then this:

Log Name: System
Source: Application Management Group Policy
Date: 20/06/2024 09:38:23
Event ID: 108
Task Category: None
Level: Warning
Keywords: Classic
User: SYSTEM
Computer: EFACSAPP01.domain.local
Description:
Failed to apply changes to software installation settings. The installation of software deployed through Group Policy for this user has been delayed until the next log-on because the changes must be applied before the user log-on. The error was: %%1274
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Management Group Policy" />
    <EventID Qualifiers="0">108</EventID>
    <Level>3</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2024-06-20T08:38:23.899026800Z" />
    <EventRecordID>319687</EventRecordID>
    <Channel>System</Channel>
    <Computer>EFACSAPP01.domain.local</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data>The installation of software deployed through Group Policy for this user has been delayed until the next log-on because the changes must be applied before the user log-on.</Data>
    <Data>1274</Data>
  </EventData>
</Event>
And finally this:

Log Name: System
Source: Microsoft-Windows-GroupPolicy
Date: 20/06/2024 09:38:23
Event ID: 1112
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: EFACSAPP01.domain.local
Description:
The Group Policy Client Side Extension Software Installation was unable to apply one or more settings because the changes must be processed before system start-up or user logon. The system will wait for Group Policy processing to finish completely before the next start-up or logon for this user, and this may result in slow start-up and boot performance.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-GroupPolicy" Guid="{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}" />
    <EventID>1112</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>1</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2024-06-20T08:38:23.901836200Z" />
    <EventRecordID>319688</EventRecordID>
    <Correlation ActivityID="{59bf49d0-85c0-402b-896e-43da68fb3bcb}" />
    <Execution ProcessID="2068" ThreadID="6072" />
    <Channel>System</Channel>
    <Computer>EFACSAPP01.domain.local</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="SupportInfo1">1</Data>
    <Data Name="SupportInfo2">5233</Data>
    <Data Name="ProcessingMode">0</Data>
    <Data Name="ProcessingTimeInMilliseconds">2547</Data>
    <Data Name="ErrorCode">1274</Data>
    <Data Name="ErrorDescription">The group policy framework should call the extension in the synchronous foreground policy refresh. </Data>
    <Data Name="DCName">\\COM-SRV-PDC.domain.local</Data>
    <Data Name="ExtensionName">Software Installation</Data>
    <Data Name="ExtensionId">{c6dc5466-785a-11d2-84d0-00c04fb169f7}</Data>
  </EventData>
</Event>
Sponsor

Want to thank us? Use: Patreon or PayPal or Bitcoins: bc1q4whppe29dw77rm4kv4pln0gqae4yjnxly0dny0hky6yhnafukzjsyrsqhk

All opinions expressed within these pages are sent in by members of the public or by our staff in their spare time, and as such do not represent any opinion held by sircles.net Ltd or their partners.