SCECLI 1202 0x534 No mapping between account names and security IDs was done.

I am getting this warning on my 2003 DC every 5 minutes:
SCECLI 1202 0x534 No mapping between account names and security IDs was
done.

It started while I was on vacation and everyone swears they didn't make any
changes to anything (like I believe that!).

Most of what I have found only applies to 2000, but some helped a little.
The ones for 2003 don't have the 0x534.

One article said the Default Domain Controllers Policy lost its link to the
Domain Controllers container.
So I added it in again (giving me the same link twice). It seemed to have
fixed it until I rebooted the server.
Then it was giving the warning again. I tried it again, but it didn't work
the second time.

When I try this:
find /i "cannot find" %SYSTEMROOT%\security\logs\winlogon.log
It says Cannont find Power Users

When I do this one:
find /i "Power Users" %SYSTEMROOT%\security\logs\winlogon.log
I get
Configure Power Users.
Cannot find Power Users.

Since there are no local users/groups on a DC, this would make sense to me
that it can't find it.
So why is it even looking??

I have this 2003 DC (also acts as a file server) and a 2000 DC that will be
upgraded to 2003 early next year.

Workstations all run 2000 or XPSP2


Any ideas?
Fixes?
Random thoughts?

Thanks a bunch
Mark


.

Relevant Pages