Re: Security Policies

From: Chriss3 (noSpamHere_at_chrisse.se)
Date: 02/22/04 

Date: Sun, 22 Feb 2004 01:22:01 +0100

This is usually caused because the security policy grants rights to user or
group accounts which no longer exist.

Find out which accounts are invalid.

  1.. Open Notepad and open the file at
%systemroot%\security\logs\winlogon.log. Members of the Windows Server 2003
family and computers running Windows XP create this file by default during
policy propagation.
  2.. Search for error 1332. This indicates the account names that could not
be resolved.
  3.. Remove the unresolved account names from policies in your domain.
If the accounts are in the Default Domain or Domain Controller Group Policy
objects, you can edit the policies in the Security Settings node of Group
Policy to remove these account names. If the accounts exist elsewhere, you
may have to browse through all Group Policy objects that are defined in the
domain and remove them individually. 

-- 
Regards,
Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1
"misaro" <soporte_cr@hotmail.com> skrev i meddelandet
news:148d301c3f8cf$8bc41cb0$a601280a@phx.gbl...
> Hi,
>   I got this error in the event viewer every 10 seconds
>
>
> Security Policies are propagated with warning 0x534: No
> mapping between account and security IDs was done
>
>
> Source: SceCli
> Event ID: 1202
> Type :Warning
>
> Thanks any help !!!

Relevant Pages

  • RE: Group Policy: multiple password policies in the same domain?
    ... Subject: Group Policy: multiple password policies in the same ... service accounts, and our company must be SAS70 type-II certified. ...
    (Focus-Microsoft)
  • RE: Group Policy: multiple password policies in the same domain?
    ... Why would you ever want different password policies for different ... accounts with strong passwords. ... Subject: Group Policy: multiple password policies in the same ... On my DC, running GPMC, if I do a GPO model with conflicting policies, ...
    (Focus-Microsoft)
  • RE: Group Policy: multiple password policies in the same domain?
    ... > accounts at the domain level, but you do NOT have to use the ... On my DC, running GPMC, if I do a GPO model with conflicting policies, ... just wondering if the policy is actually set but the reporting/RSoP ... on a domain controller, the domain controller policy is the ...
    (Focus-Microsoft)
  • RE: Group Policy: multiple password policies in the same domain?
    ... service accounts, and our company must be SAS70 type-II certified. ... "You must have secure password policies." ... The second issue is the lockout policy and password age - if you are ... runs as a domain service account, and a developer tries to use that same ...
    (Focus-Microsoft)
  • Re: xp home connectivity
    ... check the settings on local policy ... Look for policy named: "Network Access: ... Sharing and security model for local accounts". ...
    (microsoft.public.security)