SCECLI 1202

[jhuapl]

I recently updated the security policies on a standalone system (not on a
domain but in a workgroup) and have begun to have SCECLI 1202 errors in the
application event log. These entries show up everytime the computer policy
refreshes.

Sample event text:
Security policies are propagated with warning. 0xd : The data is invalid.
For best results in resolving this event, log on with a non-administrative
account and search http://support.microsoft.com for "Troubleshooting Event
1202s".

I have reviewed the options at eventid.net and other information through
google, but everything seems to apply to systems which are on a domain. I
can find nothing which deals with standalone systems.
Additionally, I have attempted to set the security template back to the
original file, but continue to get the same error. I also have noticed this
error in the winlogon.log file:
configure current_user\control panel\don't load\timedate.cpl
warning 3: the system cannot find the path specified.
error configuring current_user\control panel\don't load\timedate.cpl

When I first noticed this error, I removed that setting from the script I
was running -- I continue to get the same error.
Thanks for any assistance.
Colleen

 

[Steven L Umbach]

Possibly your secedit.sdb is corrupt. You can use esentutl as described
below to check for and try to repair it.

Steve

http://www.microsoft.com/resources/...proddocs/en-us/sag_scetroubletn.mspx?mfr=true
http://www.jsifaq.com/SF/Tips/Tip.aspx?id=3561 -- another possible
solution ?

 

[jhuapl]

Thanks Steve!
I tried both web links. When I ran the esentutl /g the database came back
with no errors. I attempted to do the recovery and repair option but that
seemed to have no effect on the database either.


I tried the JSI FAQ link and was skeptical as it started out with "If your
Windows 2000 Server" and my systems are standalone.....but it seemed to show
there was a way to recreate the secedit.sdb file and set the Local Security
policy to the "out of the box" state - which is what I had been trying to
do, but kept encountering these errors.

The only issue I had was when I got to item number 8 in the directions - I
did get the access denied error, and although item 10 says to ignore it -
you cannot because it won't allow you to configure the computer! So, I
tried it again, and used the default location for creating the file, and was
able to apply the settings successfully and the errors are gone!



Thanks for your help!
Colleen

 

[Steven L Umbach]

Glad you got it resolved and thanks for reporting back what worked.

Steve