6145
Microsoft-Windows-Security-Auditing
Other Policy Change Events
One or more errors occured while processing security policy in the group policy objects.
Error Code: 87
GPO List:
{F0DF8E32-7E0A-4B67-1234-9BD831BFE64C} Windows Audit & Event Log Settings
{AAC1786C-016F-11D2-9012-00C04fB984F9} Default Domain Controllers Policy
{91B2F340-016D-11D2-1234-00C04FB984F9} Default Domain Policy
Download the Win2k3 resource kit (also works on Win2k8), and run gpotool.exe. For example:
gpotool > gpotool.out
Then, search for the GUIDs from the event for more information. The output file will most likely contain more information.
You can also look at the winlogon.log file, which is in the %SYSTEMROOT%\security
logs directory.