| Event Id | 1126 |
| Source | Microsoft-Windows-GroupPolicy |
| Description | Windows was unable to determine whether new Group Policy settings defined by a network administrator should be enforced for this user or computer because this computer's clock is not synchronized with the clock of one of the domain controllers for the domain. Because of this issue, this computer system may not be in compliance with the network administrator’s requirements, and users of this system may not be able to use some functionality on the network. Windows will periodically attempt to retry this operation, and it is possible that either this system or the domain controller will correct the time settings without intervention by an administrator, so the problem will be corrected. |
| Event Information | According to Microsoft : Cause : This event is logged when Windows was unable to determine whether new Group Policy settings defined by a network administrator should be enforced for this user. Resolution : Correct time differential To correct time differential from the client: 1.Verify that the time and time zone information on the computer are correct. A time difference greater than five minutes between the computer and the domain controller may lead to the computer failing to authenticate with the domain. 2.Force the time service on the computer to synchronize time with a domain controller by running w32tm /resync as an administrator. 3.Check the Event Viewer for other events related to time synchronization. Verify : Group Policy applies during computer startup and user logon. Afterward, Group Policy applies every 90 to 120 minutes. Events appearing in the event log may not reflect the most current state of Group Policy. Therefore, you should always refresh Group Policy to determine if Group Policy is working correctly. To refresh Group Policy on a specific computer: 1.Open theStart menu. Click All Programs and then clickAccessories. 2.ClickCommand Prompt. 3.In the command prompt window, typegpupdate and then press ENTER. 4.When the gpupdate command completes, open the Event Viewer. |
| Reference Links | Event ID 1126 from Source Microsoft-Windows-GroupPolicy |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.