I have a Win2k TS box that is showing massive amounts of the following
errors;

Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 21/06/2006
Time: 12:14:43
User: N/A
Computer: DAVID
Description:
Security policies are propagated with warning. 0x534 : No mapping
between account names and security IDs was done.

I run through the various steps that it tells me, which I have done
before, and it worked fine.

However, in this instance, when you are told to;

2.Identify the GPOs that contain the unresolvable account name:

I actually get returned just;

---------- GPT00000.DOM
---------- GPT00001.DOM
---------- GPT00002.DOM

Which implies that the user (in my case GUEST) isn't found in any of
the GPO's. I have also searched the dom files by hand, and also run
through all the settings of all the GPOs in our AD, and none of them
feature GUEST.

After being woken up last night with my pager gonig off to tell me the
application log was full, I figure its time to solve it.

Any ideas why i am being told that the error is "Cannot find Guest."
when the guest user doesnt feature ?

Olly

Oliver,

Can I recommend that you use userenv loggin to find out more information:

Enabling this logging tracks all changes and settings applied to the machine
as it starts and the user as they log on.

The log file is located in the %windir%\debug\UserMode folder called
Userenv.log

Key: HKLM\Software\Microsoft\Windows NT\Current Version\Winlogon
Name: UserEnvDebugLevel
Type: REG_DWORD

UserEnvDebugLevel = Hex 10002 enables logging
UserEnvDebugLevel = Hex 30002 enables Verbose logging

I recommend that you remove any existing log file and then use gpupdate
/force to re-apply group policy or restart the machine for a complete
Machine Start and User logon debug.
Carefully review the log for problems and errors. If you are having
difficult interpreting the log file consider reading this article.

http://technet2.microsoft.com/Window....mspx?mfr=true


--
Dave Britt

Dave's Weblog
http://davebritt.blogspot.com




"Oliver Marshall" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>I have a Win2k TS box that is showing massive amounts of the following
> errors;
>
> Event Type: Warning
> Event Source: SceCli
> Event Category: None
> Event ID: 1202
> Date: 21/06/2006
> Time: 12:14:43
> User: N/A
> Computer: DAVID
> Description:
> Security policies are propagated with warning. 0x534 : No mapping
> between account names and security IDs was done.
>
> I run through the various steps that it tells me, which I have done
> before, and it worked fine.
>
> However, in this instance, when you are told to;
>
> 2.Identify the GPOs that contain the unresolvable account name:
>
> I actually get returned just;
>
> ---------- GPT00000.DOM
> ---------- GPT00001.DOM
> ---------- GPT00002.DOM
>
> Which implies that the user (in my case GUEST) isn't found in any of
> the GPO's. I have also searched the dom files by hand, and also run
> through all the settings of all the GPOs in our AD, and none of them
> feature GUEST.
>
> After being woken up last night with my pager gonig off to tell me the
> application log was full, I figure its time to solve it.
>
> Any ideas why i am being told that the error is "Cannot find Guest."
> when the guest user doesnt feature ?
>
> Olly
>