Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1126 Source: Microsoft-Windows-GroupPolicy

Windows was unable to determine whether new Group Policy settings defined by a network administrator should be enforced for this user or computer because this computer's clock is not synchronized with the clock of one of the domain controllers for the domain. Because of this issue this computer system may not be in compliance with the network administrator's requirements and users of this system may not be able to use some functionality on the network. Windows will periodically attempt to retry this operation and it is possible that either this system or the domain controller will correct the time settings without intervention by an administrator so the problem will be corrected.

If this issue persists for more than an hour checking the local system's clock settings to ensure they are accurate and are synchronized with the clocks on the network's domain controllers is one way to resolve this problem. A network administrator may be required to resolve the issue if correcting the local time settings does not address.
According to TD392613, Group Policy uses the information collected during preprocessing to apply settings to the computer or user. The Group Policy service cycles through each client-side extension, sharing the previous collected information. Each client-side extension then applies its specific policy settings to the computer or users. During this process, one or more client-side extensions may report problems when attempting to apply policy settings. See the article for some suggestions on how to troubleshoot this event.
See EV100340 (How to Find Problems with Windows 7 and Group Policy) for suggestions on troubleshooting Group Policy problems.
EV100341 (Whacked Out Windows Server 2008 Failover Cluster Validation Wizard) describe how this event can be recorded in cluster environment.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.