group policy problem

[Gary]

I keep getting the following error messages in my
Application log on my DC's every 5 minutes.

Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 10/16/1999
Time: 10:13:10 am
User: N/A
Computer: COMPUTERNAME

Description: Security policies are propagated with
warning. 0x534 : No mapping between account names and
security IDs was done. Please look for more details in
TroubleShooting section in Security Help.

and

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 10/16/1999
Time: 10:13:11 am
User: NT AUTHORITY\SYSTEM
Computer: COMPUTERNAME

Description: The Group Policy client-side extension
Security was passed flags (17) and returned a failure
status code of (1332).

I checked out the Knowledge Base article concerning it
and followed the instructions in it.

http://support.microsoft.com/default.aspx?scid=kb;EN-
US;247482

I found this the log under the user rights assignments:

Configure Power Users.
Error 1332: No mapping between account names and security
IDs was done.
Cannot find Power Users

When I went to the Default Domain Policy and the Default
Domain Controller Policy to remove the log on locally
right from the Power Users group, I found that this
option is not even enabled?

Any ideas?

 

[Hindy]

What about in the restricted groups section? You could be
trying to set the Power Users group membership to be
restricted.

Also, if the Power Users group is specified anywhere in
your User Rights section you'll need to remove it. Power
Users does not exist on a DC as their is no local SAM, so
you can't use it in anywhere in the polciies that apply
to your DC.

 

[Mike O'Reilly [MSFT]]

You may want to try the following article to enable logging to identify the
problem.

324383 Troubleshooting SCECLI 1202 Events
http://kb/article.asp?id=Q324383