Event ID: 1202 (Default Domain Controller Policy Error?)

[Ben Blackmore]

Anyone know how to solve this? It pops up every 5 minutes on the event log.

Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 30/10/2003
Time: 16:58:54
User: N/A
Computer: SERVER1
Description:
Security policies are propagated with warning. 0x534 : No mapping between
account names and security IDs was done.
Please look for more details in TroubleShooting section in Security Help.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 30/10/2003
Time: 16:58:54
User: NT AUTHORITY\SYSTEM
Computer: SERVER1
Description:
The Group Policy client-side extension Security was passed flags (17) and
returned a failure status code of (1332).

I've looked on tech net
(http://support.microsoft.com/default.aspx?scid=kb;en-us;279432&Product=win2
000) and that says
"issue can occur if the link from the Default Domain Controllers policy to
the Domain Controllers organizational unit has been broken."

However the Domain Controllers OU has the policy applied to it, you can
click and edit it, I've removed and added it again multiple times, however I
still get this message!

Anyone know why?

Cheers

Ben

 

[Steve Dodson [MSFT]]

Ben,

The following article may be of assistance:

324383 Troubleshooting SCECLI 1202 Events
http://support.microsoft.com/?id=324383

Hope that helps!

Steve Dodson [MSFT]
Directory Services

--------------------

From: "Ben Blackmore" <[email protected]>
Newsgroups: microsoft.public.win2000.active_directory,microsoft.public.win2000.advanced_
server,microsoft.public.win2000.group_policy,microsoft.public.windows.group_
policy
Subject: Event ID: 1202 (Default Domain Controller Policy Error?)
Date: Thu, 30 Oct 2003 17:18:27 -0000
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Lines: 44
Message-ID: <[email protected]>
NNTP-Posting-Date: 30 Oct 2003 17:18:28 GMT
NNTP-Posting-Host: 81-86-68-63.dsl.pipex.com
X-Trace: 1067534308 news.dial.pipex.com 22356 81.86.68.63:34535
X-Complaints-To: (e-mail address removed)
Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onlin
e.de!news.tele.dk!news.tele.dk!small.news.tele.dk!lnewsoutpeer00.lnd.ops.eu.
uu.net!lnewsinpeer00.lnd.ops.eu.uu.net!lnewspost00.lnd.ops.eu.uu.net!emea.uu
..net!not-for-mail
Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.advanced_server:13601 microsoft.public.win2000.group_policy:15913
microsoft.public.windows.group_policy:3302
microsoft.public.win2000.active_directory:53994
X-Tomcat-NG: microsoft.public.win2000.group_policy

Anyone know how to solve this? It pops up every 5 minutes on the event log.

Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 30/10/2003
Time: 16:58:54
User: N/A
Computer: SERVER1
Description:
Security policies are propagated with warning. 0x534 : No mapping between
account names and security IDs was done.
Please look for more details in TroubleShooting section in Security Help.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 30/10/2003
Time: 16:58:54
User: NT AUTHORITY\SYSTEM
Computer: SERVER1
Description:
The Group Policy client-side extension Security was passed flags (17) and
returned a failure status code of (1332).

I've looked on tech net
(http://support.microsoft.com/default.aspx?scid=kb;en-us;279432&Product=win 2
000) and that says
"issue can occur if the link from the Default Domain Controllers policy to
the Domain Controllers organizational unit has been broken."

However the Domain Controllers OU has the policy applied to it, you can
click and edit it, I've removed and added it again multiple times, however I
still get this message!

Anyone know why?

Cheers

Ben

--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.

 

[Tim Hines [MSFT]]

Try the following article
http://support.microsoft.com/defaul...port/kb/articles/Q247/4/82.ASP&NoWebContent=1

When you enable security logging an error will appear in the winlogon.log
file to tell you what accout is causing the problem. You can go through the
group policies and remove the account .

--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.