У меня тоже самое
это про первую ошибку:
Extension: Security, Flags 17, Status code 3 = "The system cannot find the path specified". A program was installed, which creates user accounts and assigns rights to those user accounts. Later, the program was removed,the user accounts deleted, but the rights from policy before the accounts were still there.
A user account is added and rights assigned to the account. The account is deleted, but not from security policies.
Following the suggestions in Q247482 helps. Make sure you check the domain, domain controllers and local group policies. If "error 1332" is found in Winlogon.log check Q285903 (link below).
Use the tools described in "Troubleshooting Group Policy in Windows 2000" article from Technet to see what policies are applied and verify each of them. This may also occur due to a lack of time synchronization - see also Q285923
ссылка: _http://www.eventid.net/display.asp?eventid=1000
а вот что нашел на вторую ошибку:
Group Policy was not being propagated to clients and logons were slow. I found that the permissions on the domain controllers Sysvol folder and subfolders were incorrect but after 20 minutes of changing them as per Microsofts instructions, the system automatically changed them back. The sysvol permissions and some GP entries contained the security identifier for the Power Users group which doesn't exist on a DC. All efforts to remove this security identifier failed.
I deleted all Registry.pol and System.adm on the DC and edited all GPT.ini files, on the DC, so Version=1. I then rebooted the DC and changed the Sysvol permissions. Make a new Default Domain Policy and a new Default Domain Controllers Policy. Make sure that Everyone, Authenticated users and Administrators have "Bypass Traverse Cecking" enabled in the Default Domain Policy.
ссылка: _http://www.eventid.net/display.asp?eventid=1001
(раньше такого не было....)
- а нужно чтоб автоматом (что и есть дефолтно) ...