Fixing Event ID 4098: Group Policy Troubleshooting Guide

By / March 4, 2023

Event ID 4098 occurs if Group Policy rules are incorrectly configured. This can easily happen if the Group Policy client isn’t configured properly.

PC problems? Solve them in minutes.

  • 1. Download and install ASR Pro
  • 2. Run a scan to find and fix errors
  • 3. Reboot your computer for the changes to take effect
    • Get better performance from your computer with this software - download it to fix your PC today.

    Check to see if the Group Policy object (GPO) is enabled

    1. Right-click Start and select Computer.
    3. In the left pane, go to Local Users and Groups > Groups.
    4. Right-click the Users group and select Properties.
    5. Check to see if Security Setting is enabled for Domain Users.
      Check to see if Security Setting is enabled for Domain Users.

    Update the Group Policy Object (GPO)

    1. Click Start, type gpedit.msc, and click Run.
    2. Navigate to Computer Configuration > Administrative Templates > System > Group Policy.
      Navigate to Computer Configuration > Administrative Templates > System > Group Policy.”></li> <li>Double-click the Allow audit policy setting, and then click Properties.</li> <li>In the Security Options section, click Edit.</li> <li>In the Permissions dialog box, click Add.</li> <li>In the Enter the object names to select box, type the name of the user account that runs the Group Policy snap-in, and then click Check Names.<br /><img decoding=
    3. In the Select Users, Computers, Service Accounts, or Groups dialog box, click to select the user account that you just created, and then click OK.
    4. Click OK in the Permissions for Allow audit policy setting dialog box.
    5. Click OK in the Group Policy Object Editor dialog box.

    PC problems? Solve them in minutes.

    Is your computer running slow, crashing, or giving you the dreaded Blue Screen of Death? Well, don't worry - there's a solution! ASR Pro is the ultimate software for repairing Windows errors and optimizing your PC for maximum performance. With ASR Pro, you can fix a wide range of common issues in just a few clicks. The application will detect and resolve errors, protect you from data loss and hardware failure, and optimize your system for optimal performance. So don't suffer with a slow or crashed computer any longer - download ASR Pro today!

  • 1. Download and install ASR Pro
  • 2. Run a scan to find and fix errors
  • 3. Reboot your computer for the changes to take effect

    • Create a new GPOs

    1. Do so by right-clicking the Group Policy object (GPO) you want to change and selecting New…
      Select the Computer Configuration option under Administrative Templates.
    2. Select Windows Components under Administrative Templates.
      Select Windows Components under Administrative Templates.
    3. Click on Event Log.
    4. Expand the Windows Logs section.
    5. Select Event Viewer.
    6. Double-click on Event ID 4098.
      Double-click on Event ID 4098.
    7. Enter a group name in the Event Log Name text box.
    8. Enter a description for the group in the Description text box.
    9. Under Event Source, select Microsoft-Windows-GroupPolicy.
    10. Under Event Category, select Authentication.
      Under Event Category, select Authentication.
    11. Under Event ID, enter 4098 (or 4094 – for audit events).
    12. Under Level, select Error.
    13. Select Log at the Action box.
    14. Select the Log type for Audit Success.
      Select the Log type for Audit Success.
    15. Choose Critical if you want the log created every time the audit is successful.
    16. Select Information if the log created when audit is successful isn’t necessary.
    17. Click Next.
    18. Select the Step 1: Create Audit Policy option.
      Select the Step 1: Create Audit Policy option.
    19. Select the Step 2: Create Audit Policy Configuration option.
    20. Select the newly created GPO to open its properties.
    21. Click the Security tab.
    22. Select Edit.
      Select Edit.
    23. Click Add.
    24. Select the Local Users and Groups option.
    25. Select the Allow option under Full Control.
    26. Click Add.
    27. Click OK.
      Click OK.
    28. Click Apply.
    29. Click OK.
      Click OK.
    30. Click OK.
      Click OK.

    Modify the GPOs

    1. Open a Group Policy Object Editor.
      Select the Group Policy object that is causing the error (e.g., Computer Configuration > Policies > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Remote Desktop Session Host Client > Terminal Services Configuration).
      Click the Edit button.
    2. Click Show.
    3. Deselect Enable Remote Assistance.
      Deselect Enable Remote Assistance.
    4. Click OK to save the changes.
    Get better performance from your computer with this software - download it to fix your PC today.

    Create a new GPO and link it

    1. Right-click on the Group Policy object currently affected, and choose Edit.
    2. Click on Add to open the window shown directly below.
      Click on Add to open the window shown directly below.
    3. Enter a descriptive name for the policy, and select Link to open the window directly below.
    4. Select the radio button beside Create a New GPO, and click OK.
    5. Select Create to open the window shown directly below.
    6. Select the radio button beside Link an Existing GPO, and click OK.
    7. Select the radio button beside Create a New GPO, and select the policy link you created.
      Select the radio button beside Create a New GPO, and select the policy link you created.
    8. Click Next to proceed.
    Scroll to Top