[ActiveDir] Secedit Errors

[jef . kazimer]

Hello all,

I am getting repeated secedit errors which seem to be due to a corrupted secedit.sdb file on the DCs.  After using ESENTUTL to repair the DB,  and group policy applies correctly.

A day or so later, those that were repaired now have the same errors.   Anyone have any idea where to halt this cycle?  What am I missing?

Source:  Userenv
Name:  Unexpected Error applying group policy to machine account
Description:  The Group Policy client-side extension Security was passed flags (145) and returned a failure status code of (1208).


There were originally some group policy errors, which were fixed.  Policy applies correct as per the winlogon.log after it is fixed,  but the problem returns.

any help would be appreciated.

Jef Kazimer