Re: Event error 1202, Security policies were propagated with warning. 0x4b8

From: Jerold Schulman (Jerry_at_jsiinc.com)
Date: 09/01/04


Date: Wed, 01 Sep 2004 09:47:48 -0400

On 31 Aug 2004 12:01:27 -0700, jamezp2004@yahoo.com (Jim) wrote:

>I have scoured the internet for a solution to:
>
>Security policies were propagated with warning. 0x4b8 : An extended
>error has occurred.
>
>This is showing up in the app log every 7 to 8 minutes. The server is
>2003 Std and is a domain controller. I am using gpupdate /force to
>update the policy through RDP on the local box- the problem is when I
>update the policy manually it breaks user folder permissions on my web
>servers which breaks my app.
>
>This is what I do know: It is a GPO conflict of some kind; I have
>SceCli Debugging enabled; the winlogon.log shows a ton of stuff but I
>can't figure out where the answer is in that log file...; this is not
>a basicdc.inf problem because the %DSDIT%, %DSLOG% directories do not
>exist (and the basicdc security template is not applied). I did add
>the %SYSVOL% variable to the environment.
>
>Does anyone know exactly what kind of error to look for in the
>winlogon.log file because I have many. TIA,
>
>Jim

http://support.microsoft.com/default.aspx?scid=kb;en-us;324383

Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com



Relevant Pages

  • replication and policy problem /forward by Hover Xue [MSFT]
    ... Hover Xue told me to public this here! ... I have done gpupdate /force dont helpt ... Have you run "gpupdate /force" to refresh ... Verify that the password policy has ...
    (microsoft.public.win2000.active_directory)
  • replication and policy problem /forward by Hover Xue [MSFT]
    ... Hover Xue told me to public this here! ... I have done gpupdate /force dont helpt ... Have you run "gpupdate /force" to refresh ... Verify that the password policy has ...
    (microsoft.public.win2000.active_directory)
  • Restricted Group Policy not working in timely manner
    ... We have defined "Domain Admins" as a restricted group in the Default ... Domain Policy GPO. ... A normal GPUPDATE will not do ... GPO Refresh Frequency has not been modified from default settings. ...
    (microsoft.public.windows.group_policy)
  • Re: Disable group policy on a server
    ... instead of you can use gpupdate or gpupdate /force in the run line. ... Sometimes a reboot is required depending on the setting the policy has changed so after gpupdate the command window displays to reboot. ... If the policy setting comes form the default domain policy or another ...
    (microsoft.public.windows.server.active_directory)
  • Re: Applying and undoing Group Policy
    ... What Bill suggests is correct - run gpupdate to force a policy update to ... Extensions which ran last time group policy was processed, ... >>to lock down the terminal server so users could not make ...
    (microsoft.public.windows.group_policy)