The RSoP snap-in does not display some file security policies, and Event ID 1109 is logged on domain member computers that are running Windows Vista Service Pack 1 or Windows Server 2008
Consider the following scenario:
- In an Active Directory domain, you have member computers that are running Windows Vista Service Pack 1 or Windows Server 2008.
- You configure a file security policy to set file permissions on a folder.
- The path that you specified for the folder contains some environment variables. For example, you specify the following path for the folder:
In this scenario, when you run the Resultant Set of Policy (RSoP) Microsoft Management Console (MMC) snap-in on a member computer, the security file policy is missing. Additionally, the following event is logged on the domain controllers and on the member computers:
Log Name: System Source: Microsoft-Windows-GroupPolicy Date: Date_Time Event ID: 1091 Task Category: None Level: Warning Keywords: User: SYSTEM Computer: ComputerName Description: Windows could not record the Resultant Set of Policy (RSoP) information for the Group Policy extension Security. Group Policy settings successfully applied to the computer or user; however, management tools may not report accurately.
For more information on this issue, including potential causes, workarounds, and resolutions, see: Microsoft KB Article KB955248.