| Event Id | 1089 |
| Source | Microsoft-Windows-GroupPolicy |
| Description | Windows failed to record Resultant Set of Policy (RSoP) information, which describes the scope of Group Policy objects applied to the computer or user. This could be caused by RSoP being disabled or Windows Management Instrumentation (WMI) service being disabled or stopped, or other WMI errors. Group Policy settings successfully applied to the computer or user; however, management tools may not report accurately. |
| Event Information | According to Microsoft : Cause This event is logged when Windows failed to record Resultant Set of Policy (RSoP) information, which describes the scope of Group Policy objects applied to the computer or user. Resolution Correct a Group Policy reporting session failure Group Policy relies on Windows Management Instrumentation (WMI) and the Resultant Set of Policy (RSoP) provider to record policy settings as they are applied to the user or computer. The Group Policy Modeling and Reporting features include in the Group Policy Management Console uses this information to report the applied policy settings. Possible resolutions include: 1.Ensure the Windows Management Instrumentation (WMI) service is enabled and configured for automatic startup. 2.Ensure the path, %Systemroot%\System32\Wbem, is included in the PATH system environment variable. 3.Use the WMIDiag utility to diagnose the problem further. Verify Group Policy applies during computer startup and user logon. Afterward, Group Policy applies every 90 to 120 minutes. Events appearing in the event log may not reflect the most current state of Group Policy. Therefore, you should always refresh Group Policy to determine if Group Policy is working correctly. To refresh Group Policy on a specific computer: 1.Open the Start menu. Click All Programs and then click Accessories. 2.Click Command Prompt. 3.In the command prompt window, type gpupdate and then press ENTER. 4.When the gpupdate command completes, open the Event Viewer. Group Policy is working correctly if the last Group Policy event to appear in the System event log has one of the following event IDs: 1500 1501 1502 1503 |
| Reference Links | Event ID 1089 from Microsoft-Windows-GroupPolicy |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.