OK... Hope you are all well.
I've looked at the properties of the security database c:
\winnt\security\secedit.sdb on all of our DCs and have seen that the
machine operating as the PDC emulators database has not been modified since
the upgrade. All the other DCs security databases have been updated
regularly.
Looking at Q278316 I see that you can replace the file. Does anyone know if
their are any risks with this?
Thanks for all your help
Robert Rutherford
MIS Department - DEK International GmbH
+44 (0)1305 208232
+44 (0)7974 249494
Previous :-
After adding a policy to an OU within a domain I am getting the following
errors every five minutes.
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 16/10/2001
Time: 09:17:22
User: NT AUTHORITY\SYSTEM
Computer: DEKUK2
Description:
The Group Policy client-side extension Security was passed flags (17) and
returned a failure status code of (1208).
Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 16/10/2001
Time: 09:17:22
User: N/A
Computer: DEKUK2
Description:
Security policies are propagated with warning. 0x4b8 : An extended error
has occurred.
Please look for more details in TroubleShooting section in Security Help.
I have tried the fixes suggest by the relevant Technet articles but I am
still getting the messages. I have tried entering the SYSVOL, NTDS, etc.
under System Varibales with no joy.... also tried the registry addition
ExtensionDebugLevel with no luck.
Im getting the following error continually within the 'userenv.log' :-
USERENV(cc.9a0) 08:54:33:437 ProcessGPOs: Extension Security
ProcessGroupPolicy failed, status 0x4b8.
I'm also gettting the following under 'winlogon.log' :-
This is not the last GPO.
-------------------------------------------
10/16/2001 09:37:24
Administrative privileged user logged on.
Parsing template C:\WINNT\security\templates\policies\gpt00000.dom.
Error 1208: An extended error has occurred.
Error creating database.
----Configuration engine is initialized with error.----
----Un-initialize configuration engine...
Any ideas would be appreciated.
Thanks Again,
Rob
********************************************************************************************
This E-mail and any files transmitted with it are in commercial
confidence and intended solely for the use of the individual or entity
to whom they are addressed. If you have received this E-mail in error
please notify the Administrator by E-mail ([EMAIL PROTECTED]).
Any views or opinions expressed are solely those of the author and do
not necessarily represent those of DEK Printing Machines Ltd., or its affiliates.
********************************************************************************************
List info: http://www.activedir.org/mail_list.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
