An error similar to the following is logged each time vgpd refreshes policies:
"[ID 523676 auth.error] [UnixLogger:ERROR] [processor.cpp:65] - CSE: Unable to find policy applicator for 'VGP/VTLA/VAS/HostAccessControl/Allow_NTFRS_14599999'"
This is usually caused by separate people modifying the same active directory GPO on different domain controllers. When AD replicates the changes together, one of the changes has its directory re-named.
Delete the other policy, merging its information into the correctly-named policy.
Refer to the following Microsoft KB articles for more information:
Article ID 328492" - Folder Name Is Changed to "FolderName_NTFRS_<xxxxxxxx>"
Article ID 840675 - "Configuration and operational recommendations for the File Replication service in Windows Server 2003 and Windows 2000 Server"