Re: SceCli Errors 1202 and UserEnv 1085 Errors

From: Glenn L (the.only(delete)_at_gmail)
Date: 02/19/05 

Date: Sat, 19 Feb 2005 11:24:27 -0800

Ciscotech,

Turn up logging on the security CSE on an example workstation

Location of the log file - %windir%\security\logs
Registry Location -
HKLM\Software\Microsoft\WindowsNT\CurrentVersion\WinLogon\GPExtensions\
                            {827D319E-6EAC-11D2-A4EA-00C04F79F83A

Registry Setting - Add the REG_DWORD value "ExtensionDebugLevel"
and set it to 0x2
Then perform a GPUPDATE /FORCE
Verify you get the 1202.
Then review the log file for errors. 

-- 
Glenn L
CCNA, MCSE 2000/2003 + Security
"Jerold Schulman" <Jerry@jsiinc.com> wrote in message 
news:9nsb11d0m6s59d5ceqjmltr6c6672ncl6k@4ax.com...
>
> See if the following helps:
>
> http://support.microsoft.com?kbid=256000 "Error Messages After Importing 
> Basicdc.inf into Group Policy "
>
>
>
> On Thu, 17 Feb 2005 10:53:11 -0600, CiscoTech <ciscotech@charter.net> 
> wrote:
>
>>I am getting SceCli and UserEnv errors all over my domain, on XP and
>>Win2K computers.
>>Below are the exact errors on my XP SP2 computer.
>>Domain Controllers are Windows 2003.
>>
>>Any help would be greatly appreciated.
>>Thanks in advance.
>>
>>------------------------------------------------------------
>>
>>Event Type: Warning
>>Event Source: SceCli
>>Event Category: None
>>Event ID: 1202
>>Date: 2/17/2005
>>Time: 6:48:44 AM
>>User: N/A
>>Computer: TEC-CSTARNES
>>Description:
>>Security policies were propagated with warning. 0xd : The data is invalid.
>>
>>For best results in resolving this event, log on with a
>>non-administrative account and search http://support.microsoft.com for
>>"Troubleshooting Event 1202's".
>>
>>For more information, see Help and Support Center at
>>http://go.microsoft.com/fwlink/events.asp.
>>
>>----------------------------------------------------------
>>
>>Event Type: Error
>>Event Source: Userenv
>>Event Category: None
>>Event ID: 1085
>>Date: 2/17/2005
>>Time: 6:48:44 AM
>>User: NT AUTHORITY\SYSTEM
>>Computer: TEC-CSTARNES
>>Description:
>>The Group Policy client-side extension Security failed to execute.
>>Please look for any errors reported earlier by that extension.
>>
>>For more information, see Help and Support Center at
>>http://go.microsoft.com/fwlink/events.asp.
>
>
> Jerold Schulman
> Windows Server MVP
> JSI, Inc.
> http://www.jsiinc.com

Relevant Pages

  • Re: failure audits
    ... Event Source: Security ... Ignore the Tcpip 4226 Warning, ...
    (microsoft.public.windowsxp.help_and_support)
  • Error 1202 when adding global to local Group on Workstation
    ... Security policies are propagated with warning. ... Please look for more details in TroubleShooting section in Security Help. ... Event Source: Userenv ...
    (microsoft.public.win2000.security)
  • SV: services running in windows domain (winXP clients)
    ... effectiveness of logon scripts as a security check/enforcement mechanism. ... FileName specifies a new database, ... Specifies the path and file name of the log file for the process. ...
    (Focus-Microsoft)
  • Re: MS Security Configuration Tool Set (SCTS)
    ... Security or Edit Security to see the current setting and the proposed new ... It looks like if and when the policy template is actually applied, ... > The log file goes into %systemroot%\security\logs by default. ... >>I think these tools will only let you compare a template with the ...
    (microsoft.public.security)
  • Re: Remove GP from machine that has been removed from AD
    ... Location of the log file - %windir%\security\logs ... Execute a gpupdate /force, verify you get the 1202 event, and post the log ... CCNA, MCSE 2000/2003 + Security ... My machine took the normal> Group Policy. ...
    (microsoft.public.windows.group_policy)