Re: SceCli 1202


OK,

I checked User rights Assignments, and the only place I can find the
"Account?" DCTCONSULT/Administrators is in "Logon As Service".

Other accounts or groups with this right are:

My account and the ASPNET account.

I should uncheck the DCTCONSULT/Administrators box in the assignment?



"Jerold Schulman" <Jerry@xxxxxxxxxx> wrote in message
news:6i9st1dlusa3cmohs3igv1pi1k6bqhas5i@xxxxxxxxxx
> See tip 2059 » Security Policies Are Propagated with Warning. 0x534?
> in the 'Tips & Tricks' at http://www.jsifaq.com
>
> On Mon, 30 Jan 2006 13:49:12 GMT, "ed" <xyz@xxxxxxxxx> wrote:
>
>>This has been an ongoing problem, that I can not seem to remedy. The
>>machine is a Windows 2000 with all service packs applied. The server is
>>NOT
>>part of a domain.
>>
>>Every two hours I receive an error "The error is:Security policies are
>>propagated with warning. 0x534 : No mapping between account names and
>>security IDs was done"
>>
>>Additionally, the ISP's account (default account) is renamed to "Not
>>Defined". The Other Administrator account (mine) is not.
>>
>>I have ran FIND /I "Cannot find" %SYSTEMROOT%\Security\Logs\winlogon.log
>>from the command prompt, which shows the "Administrators" being the
>>culprit
>>(on the machine, Administrators is a group, not a user).
>>
>>The next step (per Microsoft) is to run FIND /I "Administrators"
>>%SYSTEMROOT%\Security\templates\policies\gpt*.* from the command prompt,
>>which yields "file not found".
>>
>>The Winlogon.log (partial) is as follows:
>>
>>Configure DCTCONSULT\Administrators.
>>Error 1332: No mapping between account names and security IDs was done.
>>Cannot find DCTCONSULT\Administrators.
>>
>> User Rights configuration completed with error.
>>
>>----Configure Security Policy...
>> Configure password information.
>> Rename the Administrator account name to Not defined.
>>
>>
>>Any thoughts?
>>
>
> Jerold Schulman
> Windows Server MVP
> JSI, Inc.
> http://www.jsiinc.com
> http://www.jsifaq.com


.

Relevant Pages

  • Re: swing migration event log errors. Event ID: 1202
    ... Error 0x534 occurs when a user account in one or more Group Policy ... Restricted Groups branch of a GPO. ... Use RSoP to identify the specific User Rights, Restricted Groups, and ... Restricted Groups and containing Source GPOs that are generating errors. ...
    (microsoft.public.backoffice.smallbiz)
  • Re: swing migration event log errors. Event ID: 1202
    ... Error 0x534 occurs when a user account in one or more Group Policy ... Restricted Groups branch of a GPO. ... Use RSoP to identify the specific User Rights, Restricted Groups, and ... Restricted Groups and containing Source GPOs that are generating errors. ...
    (microsoft.public.backoffice.smallbiz)
  • Re: swing migration event log errors. Event ID: 1202
    ... Error 0x534 occurs when a user account in one or more Group Policy ... Restricted Groups branch of a GPO. ... Use RSoP to identify the specific User Rights, Restricted Groups, and ... Restricted Groups and containing Source GPOs that are generating errors. ...
    (microsoft.public.backoffice.smallbiz)
  • Re: swing migration event log errors. Event ID: 1202
    ... Error 0x534 occurs when a user account in one or more Group Policy objects ... Restricted Groups branch of a GPO. ... Use RSoP to identify the specific User Rights, Restricted Groups, and ... Restricted Groups and containing Source GPOs that are generating errors. ...
    (microsoft.public.backoffice.smallbiz)
  • swing migration event log errors. Event ID: 1202
    ... Error 0x534 occurs when a user account in one or more Group Policy objects ... Restricted Groups branch of a GPO. ... Use RSoP to identify the specific User Rights, Restricted Groups, and ... Restricted Groups and containing Source GPOs that are generating errors. ...
    (microsoft.public.backoffice.smallbiz)