Re: Urgent problem

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 11/25/04 

Date: Thu, 25 Nov 2004 17:22:44 GMT

There is a tool from Microsoft to recreate the default domain policy as
shown in the link below. I hope you guys learned your lesson about backing
up the System State. --- Steve

http://www.microsoft.com/downloads/details.aspx?FamilyID=b5b685ae-b7dd-4bb5-ab2a-976d6873129d&DisplayLang=en
http://tinyurl.com/3yyr3 -- same link, shorter.

"Dorin Ungureanu" <dorin.ungureanu@ipsos-interactive.con> wrote in message
news:OSKP6Pt0EHA.1192@tk2msftngp13.phx.gbl...
> Hi,
> one of our Domain Administrators removed the 'Default Domain Policy' from
> the (only) domain controller. The problem is that we're in the process of
> migrating the domain :-)...and since the policy was removed, machines that
> are already migrated spend about 3-5 minutes at logon- applying group
> policy
> settings stage. There is no system state backup.
>
> These are some messages on the server:
>
> "Security policies were propagated with warning. 0x534 : No mapping
> between
> account names and security IDs was done.Advanced help for this problem is
> available on http://support.microsoft.com. Query for "troubleshooting 1202
> events"
>
> "Windows cannot query for the list of Group Policy objects. Check the
> event
> log for possible messages previously logged by the policy engine that
> describes the reason for this."
>
> And this is the error on the workstation:
>
> "Security policies were propagated with warning. 0x534 : No mapping
> between
> account names and security IDs was done."
>
> Just to mention, migration of the user accounts with ADMT v2 went fine, no
> errors.
> Could somebody please provide some hints?
>
>
> Thanks,
> Dorin Ungureanu
>
>

Relevant Pages

  • Re: Re: Security Event ID 534
    ... > server from the network! ... This error started occuring after we defined a domain security policy, ... took away the local member, IUSR account access. ... Apparently when you define a domain policy and there is no local ...
    (microsoft.public.win2000.security)
  • Re: GROUP POLICY
    ... What exactly do you mean with "the policy file only appear in the primary DC"? ... domain policy are applied, that's by design. ... GPO: Default Domain Policy ... Computer Setting: 3 ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password reset not working
    ... If you click here you can see my curent domain policy. ... policys except the account policys. ... >> security policy and in the gpo which is enforced both to the computer ...
    (microsoft.public.windows.group_policy)
  • Re: Local DC Group Policy being applied for passwrds not the Defau
    ... Default Domain Policy being applied, but the password policies are not being ... Password Policies are being overridden by the local computer policy on the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Complex password in Domain GPO not applying anywhere.
    ... We have just found out that the Password must meet complexity ... requirements isn?t working on the domain policy. ... there is a failure in security. ...
    (microsoft.public.windows.server.active_directory)