Knowledge Base

More Than 15 IP Addresses Assigned to Server Causes Active Directory-Related Problems

Article ID: 258960

Article Last Modified on 2/28/2007

APPLIES TO

Microsoft Windows 2000 Server
Microsoft Windows 2000 Advanced Server

This article was previously published under Q258960

SYMPTOMS

After you add 16 or more IP addresses to a domain controller and then try to apply Group Policy, events similar to the following events are recorded in the Application log and the policy settings are not applied:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 4/3/2000
Time: 5:59:49 PM
User: NT AUTHORITY\SYSTEM
Computer: MYDC
Description: Windows cannot access the registry information at \\mydomain.com\sysvol\mydomain.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\registry.pol with (1351).

Event Type: Error
Event Source: SceCli
Event Category: None
Event ID: 1001
Date: 4/3/2000
Time: 5:59:49 PM
User: N/A
Computer: MYDC
Description: Security policy cannot be propagated. Cannot access the template. Error code = 3. \\mydomain.com\sysvol\mydomain.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 4/3/2000
Time: 5:59:49 PM
User: NT AUTHORITY\SYSTEM
Computer: MYDC
Description: The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (3).

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Description: Windows cannot access the registry information at \\domainname\sysvol\domainname\Policies\GUID\Macine\registry.pol with (1231).

Also, attempting to add users to groups in Active Directory Users and Computers, or attempting to add users or groups to an Access Control List (ACL) on a file or folder produces the following error message:

Object Picker cannot open because no locations from which to choose objects could be found.

When you click OK, you receive the following message:

Unable to display the user selections dialog. The parameter is incorrect.

CAUSE

This behavior is caused by a buffer in Lmhsvc.dll that is limited to hold up to 15 IP addresses only.

RESOLUTION

This problem was corrected in version Service Pack 2 for Windows 2000.
To resolve this issue, please upgrade to this version.

WORKAROUND

Remove some of the IP addresses that are currently assigned to the computer.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

MORE INFORMATION

For additional information about how to install Windows 2000 and Windows 2000 hotfixes at the same time, click the article number below to view the article in the Microsoft Knowledge Base:

249149 Installing Microsoft Windows 2000 and Windows 2000 Hotfixes

Keywords: kbhotfixserver kbqfe kbbug kbfix kbgpo kbqfe KB258960

Microsoft KB Archive/258960

Contents