Dear All,

We have two Windows Server 2008 DC's, and most of our client machines are Windows XP SP3 and up to date....

I've implemented a software restriction policy, with "Disallowed" as the default level, and I've set a few restricted/unrestricted hash and path rules in the same GPO.

The problem is that some users, and without any certain pattern experience such an issue that when they type their credentials to log on, the logon begins, but soon logs the user back off (closing network connections... yada yada..) when I check the Event Viewer, I see that the Software Restriction Policies has restricted the access to "C:\WINDOWS\Explorer.EXE" or "C:\WINDOWS\userinit.EXE" and so on (Event ID 865)! so this explains why the log off happens, along these events I noticed "Event ID 1082 Windows cannot set the background refresh timer for Group Policy. WaitForMultipleObjects (The handle is invalid. ). Group Policy processing aborted."

And "Event ID 1054 Windows cannot obtain the domain controller name for your computer network. (An unexpected network error occurred. ). Group Policy processing aborted."

So any hints where to start troubleshooting the issue?

Thanks in advance