Userenv experienced an error applying Group Policy to the domain controller. Group Policy must be applied successfully for domain controllers to function properly because domain controllers get several critical permissions, such as Access this computer from network, through policy.
Because of the architecture of userenv, Microsoft Operations Manager (MOM) is unable to directly report the specific problem.
The user or computer does not have access to the Group Policy object %1.
Please refer to KB
Q221833 "How to Enable User Environment Debug Logging in Retail Builds of Windows 2000"
to enable userenv logging. The log file will detail the specific error.
Microsoft Help and Support for Microsoft Windows Server 2008 and above
Microsoft Knowledge Base