B
Brian
OK, time to return the favor. Thanks to all who gave
input on this issue, but I'll take Microsofts PSS ID
document and changed it into English.
For Event ID 1000 and 1202 as below.....
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 7/18/2003
Time: 10:37:30 AM
User: NT AUTHORITY\SYSTEM
Computer: DNSSERVER
Description:
The Group Policy client-side extension Security was passed
flags (17) and returned a failure status code of (1332).
and
Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 7/18/2003
Time: 10:37:30 AM
User: N/A
Computer: DNSSERVER
Description:
Security policies are propagated with warning. 0x534 : No
mapping between account names and security IDs was done.
Please look for more details in TroubleShooting section in
Security Help.
Follow Microsofts PPS ID Number: 247482.
When you get to step 4, Search the Winlogon.log for
deleted accounts, do this.
Open the Winlogon.log into notepad and search for Error
1332. This will tell you (at least it did on mine) the
account that is causing the problem.
Then, on the affected DC, look at the DEFAULT DOMAIN
CONTROLLER POLICY>computer configurations>Windows
settings>Security settings>Local Policies>User Rights
Assignments.
Double click each Policy and delete the account that is
that was found in the Winlogon.log. It may be in several
policies.
Of course, be careful and test it thouroughly and I'm not
responsible for you killing your network.
I then saved my event logs and cleared them. I then
restarted the Net Logon service and everything was rosie.
Hope this helps.
Oh, DO NOT ADD THE DEFAULT DOMAIN CONTROLLERS POLICY as
recommended in PSS ID Number: 279432 without testing it on
a test bed. IT WILL CAUSE MAJOR MALFUNCTIONS IN ANY
PROPRIATARY PROGRAMS. Not to mention keeping users from
logging on.
input on this issue, but I'll take Microsofts PSS ID
document and changed it into English.
For Event ID 1000 and 1202 as below.....
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 7/18/2003
Time: 10:37:30 AM
User: NT AUTHORITY\SYSTEM
Computer: DNSSERVER
Description:
The Group Policy client-side extension Security was passed
flags (17) and returned a failure status code of (1332).
and
Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 7/18/2003
Time: 10:37:30 AM
User: N/A
Computer: DNSSERVER
Description:
Security policies are propagated with warning. 0x534 : No
mapping between account names and security IDs was done.
Please look for more details in TroubleShooting section in
Security Help.
Follow Microsofts PPS ID Number: 247482.
When you get to step 4, Search the Winlogon.log for
deleted accounts, do this.
Open the Winlogon.log into notepad and search for Error
1332. This will tell you (at least it did on mine) the
account that is causing the problem.
Then, on the affected DC, look at the DEFAULT DOMAIN
CONTROLLER POLICY>computer configurations>Windows
settings>Security settings>Local Policies>User Rights
Assignments.
Double click each Policy and delete the account that is
that was found in the Winlogon.log. It may be in several
policies.
Of course, be careful and test it thouroughly and I'm not
responsible for you killing your network.
I then saved my event logs and cleared them. I then
restarted the Net Logon service and everything was rosie.
Hope this helps.
Oh, DO NOT ADD THE DEFAULT DOMAIN CONTROLLERS POLICY as
recommended in PSS ID Number: 279432 without testing it on
a test bed. IT WILL CAUSE MAJOR MALFUNCTIONS IN ANY
PROPRIATARY PROGRAMS. Not to mention keeping users from
logging on.