Event ID 1091 - The Group Policy client-side extension Internet Explorer Branding failed to log RSOP (Resultant Set of Policy) data

Chicago Area Laptop for rent: $35 per day plus $10 for additional day

Event ID 1091 - The Group Policy client-side extension Internet Explorer Branding failed to log RSOP (Resultant Set of Policy) data

After installing Windows XP SP2 Internet Explorer GPO Settings (Internet Explorer
Maintenance Policies) no longer apply correctly.

Case 1:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1091
Description:
The Group Policy client-side extension Internet Explorer Branding failed to log
RSOP (Resultant Set of Policy) data. Please look for any errors reported earlier by
that extension.

Case 2: After installing Windows XP SP2 Internet Explorer GPO Settings (Internet Explorer
Maintenance Policies) no longer apply correctly.

Specifically the setting that affects this is redirecting Application Data:

User Configuration\Windows Settings\Folder Redirection\Application Data

Redirection of the other system folders should not be causing this issue.

Case 3: After you enable the Folder Redirection policy on a Windows XP Service Pack 2 (SP2)-based computer, the Internet Explorer Maintenance policy may not be applied.

For example, the proxy setting or the home page setting in the Internet Explorer Maintenance policy may randomly fail to apply or may not apply at all.

Case 4: I have the same problem with a Windows 2003 Standard Terminal Server. I try to set IE Settings for Home Page and Connections under IE Maintenance in Group Policy Editor and receive the errors listed above. I called Microsoft and obtained hotfix 888254. When I execute it on the terminal server I receive this error:

Setup Error: The updatebr.inf file is invalid

Does anyone know how to get the IE Settings to apply to Terminal Server users?

Resolution 1: Configure the Group Policy not to redirect Application Data.
**This will correct the issue on new users however old users will still see the
symptoms because this policy does not reverse itself when removed from GPO.

Resolution 2: Configure the Group Policy to redirect to the local profile again:

User Configuration\Windows Settings\Folder Redirection\Application Data:
Setting: Basic - Redirect everyone?s folder to the same location
Target Folder Location: Redirect to the local userprofile location

This redirects Application Data back to where it was supposed to be. For some
reason we have not (yet) been able to fix this using the setting:
Policy Removal: Redirect the folder back to the local userprofile location when
policy is removed.

Resolution 3: download Microsoft hotfix - After you enable the Folder Redirection policy in Windows XP Service Pack 2, the Internet Explorer Maintenance policy may not apply - http://support.microsoft.com/kb/888254/EN-US

Resolution 4: if the hotfix doesn’t fix it, try this:

Initially, it was not working. This didn't surprise me since I didn't have any instructions on how to use it, and only knew to ask for it based on the postings in this forum.

I forced a policy refresh using "gpupdate.exe", and using SysInternals "RegMon", I found that during the policy refresh, winlogon.exe was looking for the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPO_BRANDING_WITH_FOLDER_REDIRECTION_KB888254

I created the key, but that still didn't fix it. RegMon showed that it was now looking for two values under that key, one called "winlogon.exe", and another called "*". I looked at the other keys around that, and found that they had DWORD values under them like:

"explorer.exe"=DWORD:00000001
or
"*"=DWORD:00000001

So I went ahead and created a "*" DWORD set to 1 under the key above, and the hotfix began to work.

Resolution 5: Yes the whole thing seems to be related to folder redirection and the fact the IE maintenace policy only seems to be created and received by the user on first logon. So far nothing has solved this issue excpet this:

1. Identify the user account that is having the problem.
2. Log the user off.
3. Create a new OU anywhere and put the affceted user account in this OU.
4. Block policy inheritance to this OU. Very important to make sure this user is not getting any plocies from anywhere.
Create a new IE plocy in it that sets the proxy and home page only.
5. Delete the affacted users's profile. Make sure you do not delete the users documents and such
6. Delete the affacted users application data folder. Since all this was redirected for me I just delete the folders.
7. get the user to log on.
8. You will now notice that the user can get the home folder settings and can browse the Internet.
9. Log the user off now.
10. Move the user back to his/her old OU.
11. Get the user to log on. Create any printers and mail profile that the user had before.
12. Delete the OU you created in step 3 and the associated policy that you created with it.

Resolution 6: Its possible that there is some corruption in that IE maintenance policy that is causing it to fail at some point. If you don't lose a lot, you might try resetting that IE Maintenance policy and starting over.

Resolution 7:

1. Install the Group policy preference extension for the client computers.

http://support.microsoft.com/Default.aspx?kbid=943729

If the client computer version is Windows XP, please also install the KB http://support.microsoft.com/kb/915865 and disable the fast logon Optimization feature.

http://support.microsoft.com/kb/305293

Enabled - Allow processing across a slow network connection

- Process even if the Group Policy objects have not changed

Background priority : Idle

3. Install the Group policy Preferences Client-Side Extension Hotfix Rollup

http://support.microsoft.com/kb/974266

Post your questions, comments, feedbacks and suggestions

Contact a consultant