Skip navigation

JSI Tip 3340. Events 1000, 1001, and 13508 repeat while having replication trouble?

Every 5 minutes on a domain controller, or every 20 minutes on a member server, your Event log records:

Userenv 1000
Windows cannot access the registry information at
\\<>\sysvol\<>\Policies\{ file://\\<>\sysvol\<>\Policies\{31B2F340-016D D-11D2-945F-00C04FB984F9\}\Machine\registry.pol with (1398). 

SceCli 1001 
Security policy cannot be propagated. Cannot access the template. Error code=3. 

Userenv 1000 
The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (3). 

NtFrs 13508 
Description: The File Replication Service is having trouble enabling replication from <computername>
to <computername> for c:\winnt\sysvol\<domain>; retrying.
To resolve this problem, synchronize the computer's clock with the domain controller that is the authoritative time server.

For each server that is experiencing this difficulty, open a CMD prompt and type:

net time \\ComputerName_Of_Authoritative_Time_Server /set /y
net stop ntfrs 
net start ntfrs

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.