Hi Everyone, To clarify the problem I'm seeing I have included shots of the error messages. I have several users who have had the above mentioned errors in the event viewer. Users see various problems when this happens. Four people on the Helpdesk could no longer create distribution lists in Outlook. Another user was getting the Firewall popup when he tried to use Exceed. The exceptions for Exceed were made over a year ago. What this tells me is that the PC cannot connect to get group policy. To fix the problems I import a regkey that re-registers the activeds.tlb and then have the users do a gpupdate /force. The event viewer then shows the Scecli 1704 which means all is well and group policy is applied. Helpdesk users can create distribution lists and the server support person could use Exceed. Later the same day the antivirus software runs a scan; it comes up with 0 risks and number of files scanned. About an hour later the next thing I see is the SceCli 1202 and Userenv 1085 errors again. When the antivirus is turned off after the import regkey and gpupdate the machine works fine until SAV turns itself back on. IT Security says that it is not SAV. What I'm hoping for is someone who had a similar situation who can tell me what it was and how they fixed it. This first started 7/26/07. We upgraded Acrobat to 8.1 that morning and the day before the Microsoft security patches were applied. In one case that I've noticed, after a while SAV seems to fix the problem. I had a user tell me that his app was working fine now but often that happens and it will stop again. Unfortunately, this SAV "fix" does not happen on all machines. I have more information from yesterday. It seems that once the activeds.tlb is re-registered, even though the same exact errors are coming up; when SAV runs the problem seems to be resolved. For instance, an event viewer will show the two errors and then SAV runs and we see the Scecli 1704. See picture below. Any ideas? Thanks in advance for your help. Mary Collingwood We Energies - IT Services Client Device Integration ------------------------------ Subject: [gptalk] Re: SceCli 1202 and Userenv 1085 after SAV Date: Wed, 15 Aug 2007 08:26:15 -0500 From: "Nelson, Jamie R Contr 72 CS/SCBAF" <Jamie.Nelson.ctr@xxxxxxxxxxxxx> Many times that is a result of some kind of corruption in the secedit.sdb file. Recreating the file and re-importing the Setup Security.inf template seems to fix those errors in most cases. See the following knowledge base article for details: http://support.microsoft.com/kb/278316 Regards, Jamie Nelson Thank you, Jamie. I did this on one PC but the errors came right back a couple hours later. Also, right now it is only about 10 PCs but if this problem is spreading, it could be a lot more. I guess if no one else on the list has seen this problem, I will have to look internally for the cause. Thanks, Mary Collingwood We Energies - IT Services Client Device Integration