| Event Id | 1001 |
| Source | SclgNtfy |
| Description | Default local machine policy cannot be created. Error 80004005 to open LocalMachinePolicy. |
| Event Information | According to Microsoft: CAUSE: This behavior can occur if any one of the the following folder structures is missing: 1. %SystemRoot%\Sysvol\Sysvol\DomainName 2. %SystemRoot%\Sysvol\Sysvol\DomainName\Policies 3. %SystemRoot%\Sysvol\Sysvol\DomainName\Policies\{GUID} 4. %SystemRoot%\Sysvol\Sysvol\DomainName\Policies\{GUID}\Machine 5. %SystemRoot%\Sysvol\Sysvol\DomainName\Policies\{GUID}\User RESOLUTION: There are two ways to recover from this situation if you have a single-domain environment. If you have multiple domain controllers in the domain, you can obtain the information from a replica domain controller. 1. Restore the Sysvol contents from a backup tape. 2. Re-create the folder structures within the Sysvol container. The {GUID} folder names must include both the leading brace - "{" and the trailing brace - "}" |
| Reference Links | Group Policy Error Message When Appropriate Sysvol Contents Are Missing How to restore the default NTFS permissions for Windows 2000 Gpresult Does Not Enumerate the Resultant Computer Security Policy |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.