What do these mean - they come in a sequence all at once every 50 minutes or so:
Log Name: System
Source: Application Management Group Policy
Date: 20/06/2024 09:38:23
Event ID: 101
Task Category: None
Level: Warning
Keywords: Classic
User: SYSTEM
Computer: EFACSAPP01.domain.local
Description:
The assignment of application Agent Shell from policy Spiceworks collection agent deployment failed. The error was : %%1274
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Management Group Policy" />
<EventID Qualifiers="0">101</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2024-06-20T08:38:23.883383400Z" />
<EventRecordID>319685</EventRecordID>
<Channel>System</Channel>
<Computer>EFACSAPP01.domain.local</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data>Agent Shell</Data>
<Data>Spiceworks collection agent deployment</Data>
<Data>1274</Data>
</EventData>
</Event>
Then this
Log Name: System
Source: Application Management Group Policy
Date: 20/06/2024 09:38:23
Event ID: 103
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: EFACSAPP01.domain.local
Description:
The removal of the assignment of application Agent Shell from policy Spiceworks collection agent deployment failed. The error was: %%2
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Management Group Policy" />
<EventID Qualifiers="0">103</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2024-06-20T08:38:23.883383400Z" />
<EventRecordID>319686</EventRecordID>
<Channel>System</Channel>
<Computer>EFACSAPP01.domain.local</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data>Agent Shell</Data>
<Data>Spiceworks collection agent deployment</Data>
<Data>2</Data>
</EventData>
</Event>
Then this:
Log Name: System
Source: Application Management Group Policy
Date: 20/06/2024 09:38:23
Event ID: 108
Task Category: None
Level: Warning
Keywords: Classic
User: SYSTEM
Computer: EFACSAPP01.domain.local
Description:
Failed to apply changes to software installation settings. The installation of software deployed through Group Policy for this user has been delayed until the next log-on because the changes must be applied before the user log-on. The error was: %%1274
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Management Group Policy" />
<EventID Qualifiers="0">108</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2024-06-20T08:38:23.899026800Z" />
<EventRecordID>319687</EventRecordID>
<Channel>System</Channel>
<Computer>EFACSAPP01.domain.local</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data>The installation of software deployed through Group Policy for this user has been delayed until the next log-on because the changes must be applied before the user log-on.</Data>
<Data>1274</Data>
</EventData>
</Event>
And finally this:
Log Name: System
Source: Microsoft-Windows-GroupPolicy
Date: 20/06/2024 09:38:23
Event ID: 1112
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: EFACSAPP01.domain.local
Description:
The Group Policy Client Side Extension Software Installation was unable to apply one or more settings because the changes must be processed before system start-up or user logon. The system will wait for Group Policy processing to finish completely before the next start-up or logon for this user, and this may result in slow start-up and boot performance.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-GroupPolicy" Guid="{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}" />
<EventID>1112</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>1</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2024-06-20T08:38:23.901836200Z" />
<EventRecordID>319688</EventRecordID>
<Correlation ActivityID="{59bf49d0-85c0-402b-896e-43da68fb3bcb}" />
<Execution ProcessID="2068" ThreadID="6072" />
<Channel>System</Channel>
<Computer>EFACSAPP01.domain.local</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="SupportInfo1">1</Data>
<Data Name="SupportInfo2">5233</Data>
<Data Name="ProcessingMode">0</Data>
<Data Name="ProcessingTimeInMilliseconds">2547</Data>
<Data Name="ErrorCode">1274</Data>
<Data Name="ErrorDescription">The group policy framework should call the extension in the synchronous foreground policy refresh. </Data>
<Data Name="DCName">\\COM-SRV-PDC.domain.local</Data>
<Data Name="ExtensionName">Software Installation</Data>
<Data Name="ExtensionId">{c6dc5466-785a-11d2-84d0-00c04fb169f7}</Data>
</EventData>
</Event>
