The single DC on the domain (W2K, SP4) is reporting repeated 1202 Event IDs
as well as repeated 454 and 427 Event IDs. See below:

Source: SceCli
Category: None
Event ID: 1202
Description:
Security policies are propagated with warning. 0x4b8 : An extended error has
occurred.
For best results in resolving this event, log on with a non-administrative
account and search http://support.microsoft.com for "Troubleshooting Event
1202s".

Source: ESENT
Category: Logging/Recovery
Event ID: 454
Description:
services (260) Database recovery/restore failed with unexpected error -1019.

Source: ESENT
Category: General
Event ID: 427
Description:
services (260) The database engine could not access the file called
C:\WINNT\Security\Database\secedit.sdb.

Also, attempting to open the local security policy results in the error
"Windows cannot open the local policy database.
An unknown error occured when attempting to open the database.�

Researching, it appears that Article 278316 seems to be the approach to take.

It is the only DC for the domain. I need to be cautious. I have a copy of
the System State located on another system. What other precautions should I
be taking? If I follow the procedures is there a risk of the system not
booting?

Hi,

Yes, I agree with you that we can never be too cautious since it is the
only DC in domain.

Check following articles:

Backing Up Active Directory
<http://www.microsoft.com/technet/pro...reskit/Default
..asp?url=/technet/prodtechnol/windows2000serv/reskit/distrib/dsbj_brr_AXAL.a
sp>

Restoring Active Directory
<http://www.microsoft.com/technet/pro...reskit/Default
..asp?url=/technet/prodtechnol/windows2000serv/reskit/distrib/dsbj_brr_VCGI.a
sp>

263532 How to perform a disaster recovery restoration of Active Directory
on a computer with a different hardware configuration
http://support.microsoft.com/default...b;EN-US;263532

Hope this helps.

Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================



--------------------
>>Thread-Topic: 1202 Errors, Article 278316, "ESENT event IDs 1000, 1202,
412
>>thread-index: AcaaC/g/LzkvGZFlSxWWxIx6dShqxw==
>>X-WBNR-Posting-Host: 209.195.187.107
>>From: =?Utf-8?B?Tmljay1NYXJz?= <(E-Mail Removed)>
>>Subject: 1202 Errors, Article 278316, "ESENT event IDs 1000, 1202, 412
>>Date: Tue, 27 Jun 2006 10:06:02 -0700
>>Lines: 37
>>Message-ID: <80BFFA0C-4616-4E37-88AD-(E-Mail Removed)>
>>MIME-Version: 1.0
>>Content-Type: text/plain;
>> charset="Utf-8"
>>Content-Transfer-Encoding: 8bit
>>X-Newsreader: Microsoft CDO for Windows 2000
>>Content-Class: urn:content-classes:message
>>Importance: normal
>>Priority: normal
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
>>Newsgroups: microsoft.public.win2000.group_policy
>>Path: TK2MSFTNGXA01.phx.gbl
>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.win2000.group_policy:40320
>>NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
>>X-Tomcat-NG: microsoft.public.win2000.group_policy
>>
>>The single DC on the domain (W2K, SP4) is reporting repeated 1202 Event
IDs
>>as well as repeated 454 and 427 Event IDs. See below:
>>
>>Source: SceCli
>>Category: None
>>Event ID: 1202
>>Description:
>>Security policies are propagated with warning. 0x4b8 : An extended error
has
>>occurred.
>>For best results in resolving this event, log on with a
non-administrative
>>account and search http://support.microsoft.com for "Troubleshooting
Event
>>1202s".
>>
>>Source: ESENT
>>Category: Logging/Recovery
>>Event ID: 454
>>Description:
>>services (260) Database recovery/restore failed with unexpected error
-1019.
>>
>>Source: ESENT
>>Category: General
>>Event ID: 427
>>Description:
>>services (260) The database engine could not access the file called
>>C:\WINNT\Security\Database\secedit.sdb.
>>
>>Also, attempting to open the local security policy results in the error
>>"Windows cannot open the local policy database.
>>An unknown error occured when attempting to open the database.�
>>
>>Researching, it appears that Article 278316 seems to be the approach to
take.
>>
>>It is the only DC for the domain. I need to be cautious. I have a copy of
>>the System State located on another system. What other precautions should
I
>>be taking? If I follow the procedures is there a risk of the system not
>>booting?
>>
>>

Thanks for the information. I will take a full backup of the system. Is
there any way you could review the log? This posting was deleted
prematurely, and John Chen had requested that I do the following:

If the errors are still logged in the system log, please collect and send
me an MPS report for further analysis:
1. Access the following URL:
<http://www.microsoft.com/downloads/d...3c7c-7ca5-408f
-88b7-f9c79b7306c0&displaylang=en>
2. Download MPSRPT_DirSvc_X86.EXE and execute the exe file.
3. Please send the result file (CAB file) to me at v-(E-Mail Removed)

Should I send the log file? Thanks.

"Vincent Xu [MSFT]" wrote:

> Hi,
>
> Yes, I agree with you that we can never be too cautious since it is the
> only DC in domain.
>
> Check following articles:
>
> Backing Up Active Directory
> <http://www.microsoft.com/technet/pro...reskit/Default
> .asp?url=/technet/prodtechnol/windows2000serv/reskit/distrib/dsbj_brr_AXAL.a
> sp>
>
> Restoring Active Directory
> <http://www.microsoft.com/technet/pro...reskit/Default
> .asp?url=/technet/prodtechnol/windows2000serv/reskit/distrib/dsbj_brr_VCGI.a
> sp>
>
> 263532 How to perform a disaster recovery restoration of Active Directory
> on a computer with a different hardware configuration
> http://support.microsoft.com/default...b;EN-US;263532
>
> Hope this helps.
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
> >>Thread-Topic: 1202 Errors, Article 278316, "ESENT event IDs 1000, 1202,
> 412
> >>thread-index: AcaaC/g/LzkvGZFlSxWWxIx6dShqxw==
> >>X-WBNR-Posting-Host: 209.195.187.107
> >>From: =?Utf-8?B?Tmljay1NYXJz?= <(E-Mail Removed)>
> >>Subject: 1202 Errors, Article 278316, "ESENT event IDs 1000, 1202, 412
> >>Date: Tue, 27 Jun 2006 10:06:02 -0700
> >>Lines: 37
> >>Message-ID: <80BFFA0C-4616-4E37-88AD-(E-Mail Removed)>
> >>MIME-Version: 1.0
> >>Content-Type: text/plain;
> >> charset="Utf-8"
> >>Content-Transfer-Encoding: 8bit
> >>X-Newsreader: Microsoft CDO for Windows 2000
> >>Content-Class: urn:content-classes:message
> >>Importance: normal
> >>Priority: normal
> >>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
> >>Newsgroups: microsoft.public.win2000.group_policy
> >>Path: TK2MSFTNGXA01.phx.gbl
> >>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.win2000.group_policy:40320
> >>NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
> >>X-Tomcat-NG: microsoft.public.win2000.group_policy
> >>
> >>The single DC on the domain (W2K, SP4) is reporting repeated 1202 Event
> IDs
> >>as well as repeated 454 and 427 Event IDs. See below:
> >>
> >>Source: SceCli
> >>Category: None
> >>Event ID: 1202
> >>Description:
> >>Security policies are propagated with warning. 0x4b8 : An extended error
> has
> >>occurred.
> >>For best results in resolving this event, log on with a
> non-administrative
> >>account and search http://support.microsoft.com for "Troubleshooting
> Event
> >>1202s".
> >>
> >>Source: ESENT
> >>Category: Logging/Recovery
> >>Event ID: 454
> >>Description:
> >>services (260) Database recovery/restore failed with unexpected error
> -1019.
> >>
> >>Source: ESENT
> >>Category: General
> >>Event ID: 427
> >>Description:
> >>services (260) The database engine could not access the file called
> >>C:\WINNT\Security\Database\secedit.sdb.
> >>
> >>Also, attempting to open the local security policy results in the error
> >>"Windows cannot open the local policy database.
> >>An unknown error occured when attempting to open the database.�
> >>
> >>Researching, it appears that Article 278316 seems to be the approach to
> take.
> >>
> >>It is the only DC for the domain. I need to be cautious. I have a copy of
> >>the System State located on another system. What other precautions should
> I
> >>be taking? If I follow the procedures is there a risk of the system not
> >>booting?
> >>
> >>
>
>

Hi,

Yes, please send me the log via v-(E-Mail Removed)

Please also let me know , in which post John asked to collect the MPS
report in case you rememberred the subject.

Thanks.

Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================



--------------------
>>Thread-Topic: 1202 Errors, Article 278316, "ESENT event IDs 1000, 1202,
412
>>thread-index: AcagXGsbBnDgdFRfSUSRu4Vgj47NLg==
>>X-WBNR-Posting-Host: 209.195.187.107
>>From: =?Utf-8?B?Tmljay1NYXJz?= <(E-Mail Removed)>
>>References: <80BFFA0C-4616-4E37-88AD-(E-Mail Removed)>
<mV$(E-Mail Removed)>
>>Subject: RE: 1202 Errors, Article 278316, "ESENT event IDs 1000, 1202, 412
>>Date: Wed, 5 Jul 2006 10:57:02 -0700
>>Lines: 128
>>Message-ID: <6A56DE11-6CB7-45F8-89AE-(E-Mail Removed)>
>>MIME-Version: 1.0
>>Content-Type: text/plain;
>> charset="Utf-8"
>>Content-Transfer-Encoding: 8bit
>>X-Newsreader: Microsoft CDO for Windows 2000
>>Content-Class: urn:content-classes:message
>>Importance: normal
>>Priority: normal
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
>>Newsgroups: microsoft.public.win2000.group_policy
>>Path: TK2MSFTNGXA01.phx.gbl
>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.win2000.group_policy:40389
>>NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
>>X-Tomcat-NG: microsoft.public.win2000.group_policy
>>
>>Thanks for the information. I will take a full backup of the system. Is
>>there any way you could review the log? This posting was deleted
>>prematurely, and John Chen had requested that I do the following:
>>
>>If the errors are still logged in the system log, please collect and send
>>me an MPS report for further analysis:
>>1. Access the following URL:
>><http://www.microsoft.com/downloads/d...bf3c7c-7ca5-40
8f
>>-88b7-f9c79b7306c0&displaylang=en>
>>2. Download MPSRPT_DirSvc_X86.EXE and execute the exe file.
>>3. Please send the result file (CAB file) to me at v-(E-Mail Removed)
>>
>>Should I send the log file? Thanks.
>>
>>"Vincent Xu [MSFT]" wrote:
>>
>>> Hi,
>>>
>>> Yes, I agree with you that we can never be too cautious since it is the
>>> only DC in domain.
>>>
>>> Check following articles:
>>>
>>> Backing Up Active Directory
>>>
<http://www.microsoft.com/technet/pro...reskit/Default
>>>
.asp?url=/technet/prodtechnol/windows2000serv/reskit/distrib/dsbj_brr_AXAL.a
>>> sp>
>>>
>>> Restoring Active Directory
>>>
<http://www.microsoft.com/technet/pro...reskit/Default
>>>
.asp?url=/technet/prodtechnol/windows2000serv/reskit/distrib/dsbj_brr_VCGI.a
>>> sp>
>>>
>>> 263532 How to perform a disaster recovery restoration of Active
Directory
>>> on a computer with a different hardware configuration
>>> http://support.microsoft.com/default...b;EN-US;263532
>>>
>>> Hope this helps.
>>>
>>> Best regards,
>>>
>>> Vincent Xu
>>> Microsoft Online Partner Support
>>>
>>> ======================================================
>>> Get Secure! - www.microsoft.com/security
>>> ======================================================
>>> When responding to posts, please "Reply to Group" via your newsreader
so
>>> that others
>>> may learn and benefit from this issue.
>>> ======================================================
>>> This posting is provided "AS IS" with no warranties,and confers no
rights.
>>> ======================================================
>>>
>>>
>>>
>>> --------------------
>>> >>Thread-Topic: 1202 Errors, Article 278316, "ESENT event IDs 1000,
1202,
>>> 412
>>> >>thread-index: AcaaC/g/LzkvGZFlSxWWxIx6dShqxw==
>>> >>X-WBNR-Posting-Host: 209.195.187.107
>>> >>From: =?Utf-8?B?Tmljay1NYXJz?= <(E-Mail Removed)>
>>> >>Subject: 1202 Errors, Article 278316, "ESENT event IDs 1000, 1202, 412
>>> >>Date: Tue, 27 Jun 2006 10:06:02 -0700
>>> >>Lines: 37
>>> >>Message-ID: <80BFFA0C-4616-4E37-88AD-(E-Mail Removed)>
>>> >>MIME-Version: 1.0
>>> >>Content-Type: text/plain;
>>> >> charset="Utf-8"
>>> >>Content-Transfer-Encoding: 8bit
>>> >>X-Newsreader: Microsoft CDO for Windows 2000
>>> >>Content-Class: urn:content-classes:message
>>> >>Importance: normal
>>> >>Priority: normal
>>> >>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
>>> >>Newsgroups: microsoft.public.win2000.group_policy
>>> >>Path: TK2MSFTNGXA01.phx.gbl
>>> >>Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.win2000.group_policy:40320
>>> >>NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
>>> >>X-Tomcat-NG: microsoft.public.win2000.group_policy
>>> >>
>>> >>The single DC on the domain (W2K, SP4) is reporting repeated 1202
Event
>>> IDs
>>> >>as well as repeated 454 and 427 Event IDs. See below:
>>> >>
>>> >>Source: SceCli
>>> >>Category: None
>>> >>Event ID: 1202
>>> >>Description:
>>> >>Security policies are propagated with warning. 0x4b8 : An extended
error
>>> has
>>> >>occurred.
>>> >>For best results in resolving this event, log on with a
>>> non-administrative
>>> >>account and search http://support.microsoft.com for "Troubleshooting
>>> Event
>>> >>1202s".
>>> >>
>>> >>Source: ESENT
>>> >>Category: Logging/Recovery
>>> >>Event ID: 454
>>> >>Description:
>>> >>services (260) Database recovery/restore failed with unexpected error
>>> -1019.
>>> >>
>>> >>Source: ESENT
>>> >>Category: General
>>> >>Event ID: 427
>>> >>Description:
>>> >>services (260) The database engine could not access the file called
>>> >>C:\WINNT\Security\Database\secedit.sdb.
>>> >>
>>> >>Also, attempting to open the local security policy results in the
error
>>> >>"Windows cannot open the local policy database.
>>> >>An unknown error occured when attempting to open the database.â�
>>> >>
>>> >>Researching, it appears that Article 278316 seems to be the approach
to
>>> take.
>>> >>
>>> >>It is the only DC for the domain. I need to be cautious. I have a
copy of
>>> >>the System State located on another system. What other precautions
should
>>> I
>>> >>be taking? If I follow the procedures is there a risk of the system
not
>>> >>booting?
>>> >>
>>> >>
>>>
>>>
>>

Nick,

Once you have followed Vincent's great advice and are sure you have a
complete backup of the environment, I have come accross these problems
before on a machine and this is how I resolved them:

"Security policies are propagated with warning. 0x4b8 : An extended error
has occurred. Please look for more details in Troubleshooting section in
Security Help."

Using esentutl /g c:\Windows\Security\database\secedit.sdb displayed that
the database was corrupt.

Using esentutl /p c:\Windows\Security\database\secedit.sdb solved the
problem and the security element was re-applied to the machine.


--
Dave Britt

Dave's Weblog
http://davebritt.blogspot.com


"Nick-Mars" <(E-Mail Removed)> wrote in message
news:6A56DE11-6CB7-45F8-89AE-(E-Mail Removed)...
> Thanks for the information. I will take a full backup of the system. Is
> there any way you could review the log? This posting was deleted
> prematurely, and John Chen had requested that I do the following:
>
> If the errors are still logged in the system log, please collect and send
> me an MPS report for further analysis:
> 1. Access the following URL:
> <http://www.microsoft.com/downloads/d...3c7c-7ca5-408f
> -88b7-f9c79b7306c0&displaylang=en>
> 2. Download MPSRPT_DirSvc_X86.EXE and execute the exe file.
> 3. Please send the result file (CAB file) to me at v-(E-Mail Removed)
>
> Should I send the log file? Thanks.
>
> "Vincent Xu [MSFT]" wrote:
>
>> Hi,
>>
>> Yes, I agree with you that we can never be too cautious since it is the
>> only DC in domain.
>>
>> Check following articles:
>>
>> Backing Up Active Directory
>> <http://www.microsoft.com/technet/pro...reskit/Default
>> .asp?url=/technet/prodtechnol/windows2000serv/reskit/distrib/dsbj_brr_AXAL.a
>> sp>
>>
>> Restoring Active Directory
>> <http://www.microsoft.com/technet/pro...reskit/Default
>> .asp?url=/technet/prodtechnol/windows2000serv/reskit/distrib/dsbj_brr_VCGI.a
>> sp>
>>
>> 263532 How to perform a disaster recovery restoration of Active Directory
>> on a computer with a different hardware configuration
>> http://support.microsoft.com/default...b;EN-US;263532
>>
>> Hope this helps.
>>
>> Best regards,
>>
>> Vincent Xu
>> Microsoft Online Partner Support
>>
>> ======================================================
>> Get Secure! - www.microsoft.com/security
>> ======================================================
>> When responding to posts, please "Reply to Group" via your newsreader so
>> that others
>> may learn and benefit from this issue.
>> ======================================================
>> This posting is provided "AS IS" with no warranties,and confers no
>> rights.
>> ======================================================
>>
>>
>>
>> --------------------
>> >>Thread-Topic: 1202 Errors, Article 278316, "ESENT event IDs 1000, 1202,
>> 412
>> >>thread-index: AcaaC/g/LzkvGZFlSxWWxIx6dShqxw==
>> >>X-WBNR-Posting-Host: 209.195.187.107
>> >>From: =?Utf-8?B?Tmljay1NYXJz?= <(E-Mail Removed)>
>> >>Subject: 1202 Errors, Article 278316, "ESENT event IDs 1000, 1202, 412
>> >>Date: Tue, 27 Jun 2006 10:06:02 -0700
>> >>Lines: 37
>> >>Message-ID: <80BFFA0C-4616-4E37-88AD-(E-Mail Removed)>
>> >>MIME-Version: 1.0
>> >>Content-Type: text/plain;
>> >> charset="Utf-8"
>> >>Content-Transfer-Encoding: 8bit
>> >>X-Newsreader: Microsoft CDO for Windows 2000
>> >>Content-Class: urn:content-classes:message
>> >>Importance: normal
>> >>Priority: normal
>> >>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
>> >>Newsgroups: microsoft.public.win2000.group_policy
>> >>Path: TK2MSFTNGXA01.phx.gbl
>> >>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.win2000.group_policy:40320
>> >>NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
>> >>X-Tomcat-NG: microsoft.public.win2000.group_policy
>> >>
>> >>The single DC on the domain (W2K, SP4) is reporting repeated 1202 Event
>> IDs
>> >>as well as repeated 454 and 427 Event IDs. See below:
>> >>
>> >>Source: SceCli
>> >>Category: None
>> >>Event ID: 1202
>> >>Description:
>> >>Security policies are propagated with warning. 0x4b8 : An extended
>> >>error
>> has
>> >>occurred.
>> >>For best results in resolving this event, log on with a
>> non-administrative
>> >>account and search http://support.microsoft.com for "Troubleshooting
>> Event
>> >>1202s".
>> >>
>> >>Source: ESENT
>> >>Category: Logging/Recovery
>> >>Event ID: 454
>> >>Description:
>> >>services (260) Database recovery/restore failed with unexpected error
>> -1019.
>> >>
>> >>Source: ESENT
>> >>Category: General
>> >>Event ID: 427
>> >>Description:
>> >>services (260) The database engine could not access the file called
>> >>C:\WINNT\Security\Database\secedit.sdb.
>> >>
>> >>Also, attempting to open the local security policy results in the error
>> >>"Windows cannot open the local policy database.
>> >>An unknown error occured when attempting to open the database.â??
>> >>
>> >>Researching, it appears that Article 278316 seems to be the approach to
>> take.
>> >>
>> >>It is the only DC for the domain. I need to be cautious. I have a copy
>> >>of
>> >>the System State located on another system. What other precautions
>> >>should
>> I
>> >>be taking? If I follow the procedures is there a risk of the system not
>> >>booting?
>> >>
>> >>
>>
>>

I'll send the log file over this Tuesday (I will be on-site at that time).
Thanks for your help.

The original posting of this error was around 3/3/06 when John asked for the
log file. I had to put the issue on hold because the client was in critical
operations at that time. When I re-visited the problem when we were ready to
proceed, the entire post was gone. Had to re-post it over again.

"Vincent Xu [MSFT]" wrote:

> Hi,
>
> Yes, please send me the log via v-(E-Mail Removed)
>
> Please also let me know , in which post John asked to collect the MPS
> report in case you rememberred the subject.
>
> Thanks.
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
> >>Thread-Topic: 1202 Errors, Article 278316, "ESENT event IDs 1000, 1202,
> 412
> >>thread-index: AcagXGsbBnDgdFRfSUSRu4Vgj47NLg==
> >>X-WBNR-Posting-Host: 209.195.187.107
> >>From: =?Utf-8?B?Tmljay1NYXJz?= <(E-Mail Removed)>
> >>References: <80BFFA0C-4616-4E37-88AD-(E-Mail Removed)>
> <mV$(E-Mail Removed)>
> >>Subject: RE: 1202 Errors, Article 278316, "ESENT event IDs 1000, 1202, 412
> >>Date: Wed, 5 Jul 2006 10:57:02 -0700
> >>Lines: 128
> >>Message-ID: <6A56DE11-6CB7-45F8-89AE-(E-Mail Removed)>
> >>MIME-Version: 1.0
> >>Content-Type: text/plain;
> >> charset="Utf-8"
> >>Content-Transfer-Encoding: 8bit
> >>X-Newsreader: Microsoft CDO for Windows 2000
> >>Content-Class: urn:content-classes:message
> >>Importance: normal
> >>Priority: normal
> >>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
> >>Newsgroups: microsoft.public.win2000.group_policy
> >>Path: TK2MSFTNGXA01.phx.gbl
> >>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.win2000.group_policy:40389
> >>NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
> >>X-Tomcat-NG: microsoft.public.win2000.group_policy
> >>
> >>Thanks for the information. I will take a full backup of the system. Is
> >>there any way you could review the log? This posting was deleted
> >>prematurely, and John Chen had requested that I do the following:
> >>
> >>If the errors are still logged in the system log, please collect and send
> >>me an MPS report for further analysis:
> >>1. Access the following URL:
> >><http://www.microsoft.com/downloads/d...bf3c7c-7ca5-40
> 8f
> >>-88b7-f9c79b7306c0&displaylang=en>
> >>2. Download MPSRPT_DirSvc_X86.EXE and execute the exe file.
> >>3. Please send the result file (CAB file) to me at v-(E-Mail Removed)
> >>
> >>Should I send the log file? Thanks.
> >>
> >>"Vincent Xu [MSFT]" wrote:
> >>
> >>> Hi,
> >>>
> >>> Yes, I agree with you that we can never be too cautious since it is the
> >>> only DC in domain.
> >>>
> >>> Check following articles:
> >>>
> >>> Backing Up Active Directory
> >>>
> <http://www.microsoft.com/technet/pro...reskit/Default
> >>>
> .asp?url=/technet/prodtechnol/windows2000serv/reskit/distrib/dsbj_brr_AXAL.a
> >>> sp>
> >>>
> >>> Restoring Active Directory
> >>>
> <http://www.microsoft.com/technet/pro...reskit/Default
> >>>
> .asp?url=/technet/prodtechnol/windows2000serv/reskit/distrib/dsbj_brr_VCGI.a
> >>> sp>
> >>>
> >>> 263532 How to perform a disaster recovery restoration of Active
> Directory
> >>> on a computer with a different hardware configuration
> >>> http://support.microsoft.com/default...b;EN-US;263532
> >>>
> >>> Hope this helps.
> >>>
> >>> Best regards,
> >>>
> >>> Vincent Xu
> >>> Microsoft Online Partner Support
> >>>
> >>> ======================================================
> >>> Get Secure! - www.microsoft.com/security
> >>> ======================================================
> >>> When responding to posts, please "Reply to Group" via your newsreader
> so
> >>> that others
> >>> may learn and benefit from this issue.
> >>> ======================================================
> >>> This posting is provided "AS IS" with no warranties,and confers no
> rights.
> >>> ======================================================
> >>>
> >>>
> >>>
> >>> --------------------
> >>> >>Thread-Topic: 1202 Errors, Article 278316, "ESENT event IDs 1000,
> 1202,
> >>> 412
> >>> >>thread-index: AcaaC/g/LzkvGZFlSxWWxIx6dShqxw==
> >>> >>X-WBNR-Posting-Host: 209.195.187.107
> >>> >>From: =?Utf-8?B?Tmljay1NYXJz?= <(E-Mail Removed)>
> >>> >>Subject: 1202 Errors, Article 278316, "ESENT event IDs 1000, 1202, 412
> >>> >>Date: Tue, 27 Jun 2006 10:06:02 -0700
> >>> >>Lines: 37
> >>> >>Message-ID: <80BFFA0C-4616-4E37-88AD-(E-Mail Removed)>
> >>> >>MIME-Version: 1.0
> >>> >>Content-Type: text/plain;
> >>> >> charset="Utf-8"
> >>> >>Content-Transfer-Encoding: 8bit
> >>> >>X-Newsreader: Microsoft CDO for Windows 2000
> >>> >>Content-Class: urn:content-classes:message
> >>> >>Importance: normal
> >>> >>Priority: normal
> >>> >>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
> >>> >>Newsgroups: microsoft.public.win2000.group_policy
> >>> >>Path: TK2MSFTNGXA01.phx.gbl
> >>> >>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.win2000.group_policy:40320
> >>> >>NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
> >>> >>X-Tomcat-NG: microsoft.public.win2000.group_policy
> >>> >>
> >>> >>The single DC on the domain (W2K, SP4) is reporting repeated 1202
> Event
> >>> IDs
> >>> >>as well as repeated 454 and 427 Event IDs. See below:
> >>> >>
> >>> >>Source: SceCli
> >>> >>Category: None
> >>> >>Event ID: 1202
> >>> >>Description:
> >>> >>Security policies are propagated with warning. 0x4b8 : An extended
> error
> >>> has
> >>> >>occurred.
> >>> >>For best results in resolving this event, log on with a
> >>> non-administrative
> >>> >>account and search http://support.microsoft.com for "Troubleshooting
> >>> Event
> >>> >>1202s".
> >>> >>
> >>> >>Source: ESENT
> >>> >>Category: Logging/Recovery
> >>> >>Event ID: 454
> >>> >>Description:
> >>> >>services (260) Database recovery/restore failed with unexpected error
> >>> -1019.
> >>> >>
> >>> >>Source: ESENT
> >>> >>Category: General
> >>> >>Event ID: 427
> >>> >>Description:
> >>> >>services (260) The database engine could not access the file called
> >>> >>C:\WINNT\Security\Database\secedit.sdb.
> >>> >>
> >>> >>Also, attempting to open the local security policy results in the
> error
> >>> >>"Windows cannot open the local policy database.
> >>> >>An unknown error occured when attempting to open the database.â�
> >>> >>
> >>> >>Researching, it appears that Article 278316 seems to be the approach
> to
> >>> take.
> >>> >>
> >>> >>It is the only DC for the domain. I need to be cautious. I have a
> copy of
> >>> >>the System State located on another system. What other precautions
> should
> >>> I
> >>> >>be taking? If I follow the procedures is there a risk of the system
> not
> >>> >>booting?
> >>> >>
> >>> >>
> >>>
> >>>
> >>
>
>

Hi,

I'll be looking forward to your reply.


Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================



--------------------
>>Thread-Topic: 1202 Errors, Article 278316, "ESENT event IDs 1000, 1202,
412
>>thread-index: Acah8JEaT/XVA4raQASLvtt8sXck9Q==
>>X-WBNR-Posting-Host: 71.240.122.49
>>From: =?Utf-8?B?Tmljay1NYXJz?= <(E-Mail Removed)>
>>References: <80BFFA0C-4616-4E37-88AD-(E-Mail Removed)>
<mV$(E-Mail Removed)>
<6A56DE11-6CB7-45F8-89AE-(E-Mail Removed)>
<(E-Mail Removed)>
>>Subject: RE: 1202 Errors, Article 278316, "ESENT event IDs 1000, 1202, 412
>>Date: Fri, 7 Jul 2006 11:10:02 -0700
>>Lines: 211
>>Message-ID: <04F436AB-C7B0-44EE-98B4-(E-Mail Removed)>
>>MIME-Version: 1.0
>>Content-Type: text/plain;
>> charset="Utf-8"
>>Content-Transfer-Encoding: 8bit
>>X-Newsreader: Microsoft CDO for Windows 2000
>>Content-Class: urn:content-classes:message
>>Importance: normal
>>Priority: normal
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
>>Newsgroups: microsoft.public.win2000.group_policy
>>Path: TK2MSFTNGXA01.phx.gbl
>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.win2000.group_policy:40418
>>NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
>>X-Tomcat-NG: microsoft.public.win2000.group_policy
>>
>>I'll send the log file over this Tuesday (I will be on-site at that
time).
>>Thanks for your help.
>>
>>The original posting of this error was around 3/3/06 when John asked for
the
>>log file. I had to put the issue on hold because the client was in
critical
>>operations at that time. When I re-visited the problem when we were
ready to
>>proceed, the entire post was gone. Had to re-post it over again.
>>
>>"Vincent Xu [MSFT]" wrote:
>>
>>> Hi,
>>>
>>> Yes, please send me the log via v-(E-Mail Removed)
>>>
>>> Please also let me know , in which post John asked to collect the MPS
>>> report in case you rememberred the subject.
>>>
>>> Thanks.
>>>
>>> Best regards,
>>>
>>> Vincent Xu
>>> Microsoft Online Partner Support
>>>
>>> ======================================================
>>> Get Secure! - www.microsoft.com/security
>>> ======================================================
>>> When responding to posts, please "Reply to Group" via your newsreader
so
>>> that others
>>> may learn and benefit from this issue.
>>> ======================================================
>>> This posting is provided "AS IS" with no warranties,and confers no
rights.
>>> ======================================================
>>>
>>>
>>>
>>> --------------------
>>> >>Thread-Topic: 1202 Errors, Article 278316, "ESENT event IDs 1000,
1202,
>>> 412
>>> >>thread-index: AcagXGsbBnDgdFRfSUSRu4Vgj47NLg==
>>> >>X-WBNR-Posting-Host: 209.195.187.107
>>> >>From: =?Utf-8?B?Tmljay1NYXJz?= <(E-Mail Removed)>
>>> >>References: <80BFFA0C-4616-4E37-88AD-(E-Mail Removed)>
>>> <mV$(E-Mail Removed)>
>>> >>Subject: RE: 1202 Errors, Article 278316, "ESENT event IDs 1000,
1202, 412
>>> >>Date: Wed, 5 Jul 2006 10:57:02 -0700
>>> >>Lines: 128
>>> >>Message-ID: <6A56DE11-6CB7-45F8-89AE-(E-Mail Removed)>
>>> >>MIME-Version: 1.0
>>> >>Content-Type: text/plain;
>>> >> charset="Utf-8"
>>> >>Content-Transfer-Encoding: 8bit
>>> >>X-Newsreader: Microsoft CDO for Windows 2000
>>> >>Content-Class: urn:content-classes:message
>>> >>Importance: normal
>>> >>Priority: normal
>>> >>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
>>> >>Newsgroups: microsoft.public.win2000.group_policy
>>> >>Path: TK2MSFTNGXA01.phx.gbl
>>> >>Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.win2000.group_policy:40389
>>> >>NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
>>> >>X-Tomcat-NG: microsoft.public.win2000.group_policy
>>> >>
>>> >>Thanks for the information. I will take a full backup of the system.
Is
>>> >>there any way you could review the log? This posting was deleted
>>> >>prematurely, and John Chen had requested that I do the following:
>>> >>
>>> >>If the errors are still logged in the system log, please collect and
send
>>> >>me an MPS report for further analysis:
>>> >>1. Access the following URL:
>>>
>><http://www.microsoft.com/downloads/d...bf3c7c-7ca5-40
>>> 8f
>>> >>-88b7-f9c79b7306c0&displaylang=en>
>>> >>2. Download MPSRPT_DirSvc_X86.EXE and execute the exe file.
>>> >>3. Please send the result file (CAB file) to me at
v-(E-Mail Removed)
>>> >>
>>> >>Should I send the log file? Thanks.
>>> >>
>>> >>"Vincent Xu [MSFT]" wrote:
>>> >>
>>> >>> Hi,
>>> >>>
>>> >>> Yes, I agree with you that we can never be too cautious since it is
the
>>> >>> only DC in domain.
>>> >>>
>>> >>> Check following articles:
>>> >>>
>>> >>> Backing Up Active Directory
>>> >>>
>>>
<http://www.microsoft.com/technet/pro...reskit/Default
>>> >>>
>>>
..asp?url=/technet/prodtechnol/windows2000serv/reskit/distrib/dsbj_brr_AXAL.a
>>> >>> sp>
>>> >>>
>>> >>> Restoring Active Directory
>>> >>>
>>>
<http://www.microsoft.com/technet/pro...reskit/Default
>>> >>>
>>>
..asp?url=/technet/prodtechnol/windows2000serv/reskit/distrib/dsbj_brr_VCGI.a
>>> >>> sp>
>>> >>>
>>> >>> 263532 How to perform a disaster recovery restoration of Active
>>> Directory
>>> >>> on a computer with a different hardware configuration
>>> >>> http://support.microsoft.com/default...b;EN-US;263532
>>> >>>
>>> >>> Hope this helps.
>>> >>>
>>> >>> Best regards,
>>> >>>
>>> >>> Vincent Xu
>>> >>> Microsoft Online Partner Support
>>> >>>
>>> >>> ======================================================
>>> >>> Get Secure! - www.microsoft.com/security
>>> >>> ======================================================
>>> >>> When responding to posts, please "Reply to Group" via your
newsreader
>>> so
>>> >>> that others
>>> >>> may learn and benefit from this issue.
>>> >>> ======================================================
>>> >>> This posting is provided "AS IS" with no warranties,and confers no
>>> rights.
>>> >>> ======================================================
>>> >>>
>>> >>>
>>> >>>
>>> >>> --------------------
>>> >>> >>Thread-Topic: 1202 Errors, Article 278316, "ESENT event IDs 1000,
>>> 1202,
>>> >>> 412
>>> >>> >>thread-index: AcaaC/g/LzkvGZFlSxWWxIx6dShqxw==
>>> >>> >>X-WBNR-Posting-Host: 209.195.187.107
>>> >>> >>From: =?Utf-8?B?Tmljay1NYXJz?= <(E-Mail Removed)>
>>> >>> >>Subject: 1202 Errors, Article 278316, "ESENT event IDs 1000,
1202, 412
>>> >>> >>Date: Tue, 27 Jun 2006 10:06:02 -0700
>>> >>> >>Lines: 37
>>> >>> >>Message-ID: <80BFFA0C-4616-4E37-88AD-(E-Mail Removed)>
>>> >>> >>MIME-Version: 1.0
>>> >>> >>Content-Type: text/plain;
>>> >>> >> charset="Utf-8"
>>> >>> >>Content-Transfer-Encoding: 8bit
>>> >>> >>X-Newsreader: Microsoft CDO for Windows 2000
>>> >>> >>Content-Class: urn:content-classes:message
>>> >>> >>Importance: normal
>>> >>> >>Priority: normal
>>> >>> >>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
>>> >>> >>Newsgroups: microsoft.public.win2000.group_policy
>>> >>> >>Path: TK2MSFTNGXA01.phx.gbl
>>> >>> >>Xref: TK2MSFTNGXA01.phx.gbl
>>> microsoft.public.win2000.group_policy:40320
>>> >>> >>NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
>>> >>> >>X-Tomcat-NG: microsoft.public.win2000.group_policy
>>> >>> >>
>>> >>> >>The single DC on the domain (W2K, SP4) is reporting repeated 1202
>>> Event
>>> >>> IDs
>>> >>> >>as well as repeated 454 and 427 Event IDs. See below:
>>> >>> >>
>>> >>> >>Source: SceCli
>>> >>> >>Category: None
>>> >>> >>Event ID: 1202
>>> >>> >>Description:
>>> >>> >>Security policies are propagated with warning. 0x4b8 : An
extended
>>> error
>>> >>> has
>>> >>> >>occurred.
>>> >>> >>For best results in resolving this event, log on with a
>>> >>> non-administrative
>>> >>> >>account and search http://support.microsoft.com for
"Troubleshooting
>>> >>> Event
>>> >>> >>1202s".
>>> >>> >>
>>> >>> >>Source: ESENT
>>> >>> >>Category: Logging/Recovery
>>> >>> >>Event ID: 454
>>> >>> >>Description:
>>> >>> >>services (260) Database recovery/restore failed with unexpected
error
>>> >>> -1019.
>>> >>> >>
>>> >>> >>Source: ESENT
>>> >>> >>Category: General
>>> >>> >>Event ID: 427
>>> >>> >>Description:
>>> >>> >>services (260) The database engine could not access the file
called
>>> >>> >>C:\WINNT\Security\Database\secedit.sdb.
>>> >>> >>
>>> >>> >>Also, attempting to open the local security policy results in the
>>> error
>>> >>> >>"Windows cannot open the local policy database.
>>> >>> >>An unknown error occured when attempting to open the database.Ã
¢â�
>>> >>> >>
>>> >>> >>Researching, it appears that Article 278316 seems to be the
approach
>>> to
>>> >>> take.
>>> >>> >>
>>> >>> >>It is the only DC for the domain. I need to be cautious. I have a
>>> copy of
>>> >>> >>the System State located on another system. What other
precautions
>>> should
>>> >>> I
>>> >>> >>be taking? If I follow the procedures is there a risk of the
system
>>> not
>>> >>> >>booting?
>>> >>> >>
>>> >>> >>
>>> >>>
>>> >>>
>>> >>
>>>
>>>
>>