Event 4098 Group Policy Services warning

Question

Hello,

Am receiving the warning event below, not understanding how to fix this ? i see on Win 2012 R2, SQL 2012 installed servers.

"The computer 'SQLSERVERAGENT' preference item in the 'Win2012-General-Server-Security-MS-SQL-COM-Policy {E417726A-4A78-4C44-A5A0-D59A2764CCDC}' Group Policy Object did not apply because it failed with error code '0x80070424 The specified service does not exist as an installed service.' This error was suppressed.

"The computer 'RpcEptMapper' preference item in the 'Win2012-General-Server-Security-MS-SQL-COM-Policy {E417726A-4A78-4C44-A5A0-D59A2764CCDC}' Group Policy Object did not apply because it failed with error code '0x80070005 Access is denied.' This error was suppressed."

"The computer 'SystemEventsBroker' preference item in the 'Win2012-General-Server-Security-MS-SQL-COM-Policy {E417726A-4A78-4C44-A5A0-D59A2764CCDC}' Group Policy Object did not apply because it failed with error code '0x80070005 Access is denied.' This error was suppressed."

The computer 'SQLAgent$SQL2K16U' preference item in the 'Win2012-General-Server-Security-MS-SQL-COM-Policy {E417726A-4A78-4C44-A5A0-D59A2764CCDC}' Group Policy Object did not apply because it failed with error code '0x80070424 The specified service does not exist as an installed service.' This error was suppressed.

Answer 1

Hello Sham Raj,

Thank you for posting in Microsoft Community forum.

Please troubleshoot the issue as below:

1.Please check if you have a GPO named "Win2012-General-Server-Security-MS-SQL-COM-Policy" in Group Policy Management on DC.
The GUID of this GPO is "E417726A-4A78-4C44-A5A0-D59A2764CCDC".

For example:

2.Check where this GPO was linked (which OU or domain).

3.Are these 'SQLSERVERAGENT', 'RpcEptMapper', 'SystemEventsBroker', 'SQLAgent$SQL2K16U' computer names in your domain?

4.Check if the OU that this GPO linked has machines ('SQLSERVERAGENT', 'RpcEptMapper', 'SystemEventsBroker', 'SQLAgent$SQL2K16U' ) in this OU.

5.Check if you have configured any group policy preference setting within this OU.

6.Confirm do you still want to the group policy preference setting apply to these machines.

Here is a similar thread for your reference.
[9bd5-dffe-300-ce52] (microsoft.com)

I hope the information above is helpful. If you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

Answer 2

Thank you for the replay, for point 1, yes I checked its exist, for point 2, its linked to our internal servers OU, point 3 &4 there is no such host exit in such name- I just want to understand what are those names? why there are failing to apply the GP ?

Point 5, Registry setting is done within the preference

Answer 3

Hello Sham Raj,

Thank you for your reply.

I just want to understand what are those names?
They should be service name.

Please edit the GPO named "Win2012-General-Server-Security-MS-SQL-COM-Policy" in Group Policy Management on DC, expand Computer Configuration, Preferences, Services. Check if there are service entries ('SQLSERVERAGENT', 'RpcEptMapper', 'SystemEventsBroker', 'SQLAgent$SQL2K16U'), if there are actually these services under Computer Configuration, Preferences, Services, if you do not need them, please delete it and then check the result.

If you still need them, you cannot delete them.

Best Regards,
Daisy Zhou