Sunday, April 14, 2013

Faulting application gpresult.exe, version 5.2.3790.3959, faulting module gpresult.exe, version 5.2.3790.3959, fault address 0x000000000001323c.

There is a problem with gpresult on 64 bit servers that can cause it to crash with the following errors.

Event Type:        Error
Event Source:    Application Error
Event Category:                (100)
Event ID:              1000
Date:                     4/11/2013
Time:                     3:01:51 PM
User:                     N/A
Computer:          SERVER
Description:
Faulting application gpresult.exe, version 5.2.3790.3959, faulting module gpresult.exe, version 5.2.3790.3959, fault address 0x000000000001323c.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74   Applicat
0008: 69 6f 6e 20 46 61 69 6c   ion Fail
0010: 75 72 65 20 20 67 70 72   ure  gpr
0018: 65 73 75 6c 74 2e 65 78   esult.ex
0020: 65 20 35 2e 32 2e 33 37   e 5.2.37
0028: 39 30 2e 33 39 35 39 20   90.3959 
0030: 69 6e 20 67 70 72 65 73   in gpres
0038: 75 6c 74 2e 65 78 65 20   ult.exe 
0040: 35 2e 32 2e 33 37 39 30   5.2.3790
0048: 2e 33 39 35 39 20 61 74   .3959 at
0050: 20 6f 66 66 73 65 74 20    offset 
0058: 30 30 30 30 30 30 30 30   00000000
0060: 30 30 30 31 33 32 33 63   0001323c

Query Group Policy RSOP Data has encountered a problem and needs to close. We are sorry for the incovenience.

Error signature: BEX64 P1: Gpresult.exe P2: 5.2.3790.3959 p3: 45d6962c p4: gpresult.exe p5: 5.2.3790.3959 p6: 45d6962c p7: 000000000001323c p8: c0000409 p9: 000000000000000


To fix the problem, you need to change the value of HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SeCEdit\Reg Values\MACHINE/Software/Microsoft/Windows NT/CurrentVersion/Winlogon/PasswordExpiryWarning/DisplayName to read "Interactive logon: Prompt user to change password before expire" instead of "Interactive logon: Prompt user to change password before expiration".

Also see http://support.microsoft.com/kb/971243