When I've seen 1208 error codes in the past, the cause has almost always been an incompatibility in the policy. The most common reason for me has been restricted groups. I put someone in a group who couldn't be added or I removed an account from a group where that group had been set as the primary group for the account.
Cathy Hooper Lead Windows Administrator Getty Images, Inc. 206-925-6615 http://www.gettyimages.com -----Original Message----- From: John Reijnders [mailto:[EMAIL PROTECTED] Sent: Thursday, October 02, 2003 12:45 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Secedit Errors I don't know the cause of this problem but you could try restoring an older version of the GPOs using the GPMC (Group Policy Management Console)... (if you made backups of your GPOs). If you haven't implemented this GPO management tool yet you should definitely have a look at it! It's the way to go for GPO management! Cheers! John -----Original Message----- From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: 2-10-2003 16:40 Subject: [ActiveDir] Secedit Errors Hello all, I am getting repeated secedit errors which seem to be due to a corrupted secedit.sdb file on the DCs. After using ESENTUTL to repair the DB, and group policy applies correctly. A day or so later, those that were repaired now have the same errors. Anyone have any idea where to halt this cycle? What am I missing? Source: Userenv Name: Unexpected Error applying group policy to machine account Description: The Group Policy client-side extension Security was passed flags (145) and returned a failure status code of (1208). There were originally some group policy errors, which were fixed. Policy applies correct as per the winlogon.log after it is fixed, but the problem returns. any help would be appreciated. Jef Kazimer List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ ======================================================= This email and its contents are confidential. If you are not the intended recipient, please do not disclose or use the information within this email or its attachments. If you have received this email in error, please delete it immediately. Thank you. ======================================================= List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
