Usually a Failure of 5 is "Access Denied" turn on Winlogon Logging, and then use secedit to reapply security policies. It will create the winlogon.log in the C:\winntt\security\logs directory.
Read through the log and you should see where the error is happening. Search Technet for the keywords of "winlogon.log" and you should find the KB article with the registry keylocation. Sorry I don't remember it off hand. :) Jef Original Message: >From: "ActiveDirList-PPC" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Subject: [ActiveDir] Userenv.log error >Date: Fri, 12 Dec 2003 16:18:33 -0500 >Anybody know of good resources for finding more info on the following >error > >USERENV(52e8.5f2c) 15:32:55:476 RegisterGPNotification: CreateEvent >failed with 5 > >I've been having some GP oddities today and the userenv.log files on the >affected systems are covered up with this. Google returns some sites, >but most seem to be msdn sites about API programming reference, and a >security paper in German which I have not been able to decipher yet. >Thanks, >KC Brown > >List info : http://www.activedir.org/mail_list.htm >List FAQ : http://www.activedir.org/list_faq.htm >List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
