D
David Ristau
Background, NT Server 4.0 domain, Windows 2000 Member
server SP3
--
About every hour and a half, my Win2k Server application
event log reports the following two errors
Event ID: 1000 Source Userenv
The Group Policy client-side extension Security was passed
flags (17) and returned a failure status code of (5).
&
Event ID: 1202 Source Scecli
Security policies are propagated with warning. 0x5 :
Access is denied.
Please look for more details in TroubleShooting section in
Security Help.
I've tracked it down to a local group policy, it looks as
though someone tried to either implement a local group
policy or tighten directory security.
Using KB article 324383 and 312164 to help diagnose the
event ID's
The debug action from 324383 writes a bunch of
********************** in
%systemroot%\security\logs\winlogon.log
With no files matching
%systemroot%\security/templates/policies/gpt*.*
Without result, the next step was to start up MMC and
Group Policy Editor
Navigating to the
Local computer policy
Computer configuration
Windows Settings
Security settings
Account Policies and Local Policies yield a error "Windows
cannot open local policy database" error
Again searching MS Support I cam across KB 300267 about
the everyone group needing full access to the %systemroot%
drive, which I applied the settings
The issue continues and I'm out of "next steps", thanks
for any solutions.
solutions at
http://www.annoyances.org/exec/forum/win2000/t1024388984
and
http://www.derkeiler.com/Newsgroups/microsoft.public.win200
0.security/2003-02/0830.html
were not helpful. any other ideas???
server SP3
--
About every hour and a half, my Win2k Server application
event log reports the following two errors
Event ID: 1000 Source Userenv
The Group Policy client-side extension Security was passed
flags (17) and returned a failure status code of (5).
&
Event ID: 1202 Source Scecli
Security policies are propagated with warning. 0x5 :
Access is denied.
Please look for more details in TroubleShooting section in
Security Help.
I've tracked it down to a local group policy, it looks as
though someone tried to either implement a local group
policy or tighten directory security.
Using KB article 324383 and 312164 to help diagnose the
event ID's
The debug action from 324383 writes a bunch of
********************** in
%systemroot%\security\logs\winlogon.log
With no files matching
%systemroot%\security/templates/policies/gpt*.*
Without result, the next step was to start up MMC and
Group Policy Editor
Navigating to the
Local computer policy
Computer configuration
Windows Settings
Security settings
Account Policies and Local Policies yield a error "Windows
cannot open local policy database" error
Again searching MS Support I cam across KB 300267 about
the everyone group needing full access to the %systemroot%
drive, which I applied the settings
The issue continues and I'm out of "next steps", thanks
for any solutions.
solutions at
http://www.annoyances.org/exec/forum/win2000/t1024388984
and
http://www.derkeiler.com/Newsgroups/microsoft.public.win200
0.security/2003-02/0830.html
were not helpful. any other ideas???