Microsoft KB Archive/942412

= Error message when you try to view the settings for a GPO in GPMC with Service Pack 1 on a Windows Server 2003-based computer: &quot;An error has occurred while collecting data for Security Configuration Engine (SCE) Extension&quot; =

Article ID: 942412

Article Last Modified on 10/11/2007

-

APPLIES TO


 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition
 * Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
 * Microsoft Windows Server 2003, Standard x64 Edition
 * Microsoft Windows Server 2003, Enterprise x64 Edition
 * Microsoft Windows Server 2003, Datacenter x64 Edition
 * Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
 * Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems

-



SYMPTOMS
On a Windows Server 2003-based computer, you try to use Group Policy Management Console (GPMC) with Service Pack 1 to view the settings for a Group Policy object (GPO). However, you receive the following error message after you expand Security Settings on the Settings tab of the GPO:

An error has occurred while collecting data for Security Configuration Engine (SCE) Extension.

This error impacts the following settings:

Account Policies (Password Policy, Account Lockout Policy, Kerberos Policy)

Local Policies (Audit Policy, User Rights Assignment, Security Options)

Event Log

Restricted Groups

System Services

Registry

File System

The following errors apply to all of the above settings:

The file &quot;\\ \ \Machine\microsoft\windows nt\secedit\gpttmpl.inf&quot; is not in a valid format. Details: Index was out of range. Must be non-negative and less than the size of the collection. Parameter name: index

In this situation, you cannot view any Group Policy settings when you expand Security Settings. This problem occurs if the Restricted Groups setting is defined in the GPO.



CAUSE
This problem occurs if the Gpttmpl.inf file contains incorrect information. After you define the Restricted Groups setting in a GPO, the Gpttmpl.inf file in the corresponding Group Policy folder contains a [Group Membership] segment that resembles the following: [Group Membership] _Memberof = _Members = This problem occurs if either of the entries under the [Group Membership] segment is missing.



RESOLUTION
To resolve this problem, find the information that is missing from the Gpttmpl.inf file. Then, add the missing information back to the Gpttmpl.inf file.



MORE INFORMATION
If you enable verbose logging for GPMC, more information will be logged in the Gpmgmt.log file and in the GpmgmtManaged.log file. Both files reside in the temporary (%Temp%) folder of the current user. When this problem occurs, a message that resembles the following is logged in the GpmgmtManaged.log file:

Reporting(3516.1276)17:45:21 SecuritySettings::InitializeGPO:******The following exception occurred:


 * Message : Index was out of range. Must be non-negative and less than the size of the collection.

Parameter name: index


 * StackTrace :

at System.Collections.SortedList.GetKey(Int32 index)

at Microsoft.GroupPolicy.Reporting.Extensions.Security.SecuritySettings.InitializeGPO(GPOContext context)

Reporting(3516.1276)17:45:21 GPOUserOrComputerConfig::.ctor:******The following exception occurred:


 * Message : Errors.Extensions.GeneralFileError


 * Descriptive Message : The file &quot;\\ \SysVol\ \Policies\ \Machine\microsoft\windows nt\secedit\gpttmpl.inf&quot; is not in a valid format. Details: Index was out of range. Must be non-negative and less than the size of the collection.

Parameter name: index


 * StackTrace :

To enable verbose logging for GPMC, follow these steps:  Click Start, click Run, type regedit, and then click OK. Locate and then click the following registry subkey:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion

 On the Edit menu, point to New, and then click Key. Type Diagnostics, and then press ENTER. Click the subkey that you created in step 4.</li> On the Edit menu, point to New, and then click DWORD Value.</li> Type gpmgmttracelevel, and then press ENTER.</li> Right-click gpmgmttracelevel, and then click Modify.</li> In the Value data box, type 2, and then click OK.</li> On the Edit menu, point to New, and then click DWORD Value.</li> Type gpmgmtlogfileonly, and then press ENTER.</li> Right-click gpmgmtlogfileonly, and then click Modify.</li> In the Value data box, type 1, and then click OK.</li> Exit Registry Editor.</li></ol>

For more information, visit the following Microsoft TechNet Web site:

http://technet2.microsoft.com/WindowsServer/en/library/0907105e-7856-4c93-b97f-a9a306623af51033.mspx

To download Group Policy Management Console with Service Pack 1, visit the following Microsoft Download Center Web site:

http://www.microsoft.com/downloads/details.aspx?familyid=0A6D4C24-8CBD-4B35-9272-DD3CBFC81887&displaylang=en

Keywords: kberrmsg kbtshoot kbprb kbexpertiseinter KB942412

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.