-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Monday, 26 April 2004 11:52 AM
To: [EMAIL PROTECTED]
Subject: R�f. : [ActiveDir] SCECLI 1202 Events
You can also use RSOP.msc to view the end results of the policies. It will show a red X next to the problem and tell you the entry and the policy that has the problem.
Also, are you using different languages on your Domain Controllers? Or is the new DC a Windows 2003 Server ( multi-lingual edition )? Maybe seems like random questions, but I had this problem a few times with different language DCs and it's fairly easy to clean up the problem.
Jonathan
Hello everybody,
I am getting this event very frequently. Event id 1202 "Security policies are propagated with warning. 0x534 : No mapping between account names and security IDs was done."KB Article http://support.microsoft.com/default.aspx?scid=kb;en-us;324383 gives a good explantion to this and with this I culd trace that there is a problem with power users account. When I give this command
1.C:\>FIND /I "Cannot find" %SYSTEMROOT%\Security\Logs\winlogon.log
---------- C:\WINNT\SECURITY\LOGS\WINLOGON.LOG
Cannot find Power Users.
Cannot find Power Users.
Cannot find Power Users.
2.C:\>FIND /I "power users" %SYSTEMROOT%\Security\templates\policies\gpt*.*
---------- C:\WINNT\SECURITY\TEMPLATES\POLICIES\GPT00000.DOM
---------- C:\WINNT\SECURITY\TEMPLATES\POLICIES\GPT00001.INF
3.C:\>FIND /I "[Mapping]" %SYSTEMROOT%\Security\Logs\winlogon.log
---------- C:\WINNT\SECURITY\LOGS\WINLOGON.LOG
[Mapping] gpt00000.dom = Default Domain Policy
[Mapping] gpt00001.inf = Default Domain Policy
[Mapping] gpt00000.dom = Default Domain Policy
[Mapping] gpt00001.inf = Default Domain Policy
[Mapping] gpt00000.dom = Default Domain Policy
[Mapping] gpt00001.inf = Default Domain Policy
[Mapping] gpt00000.dom = Default Domain Policy
[Mapping] gpt00001.inf = Default Domain Policy
Here, the machine is an additional domain controller which I promoted very recently. I culd identfy tha account which is Power users and GPO is Default Domain Policy. But the Power users is no more existing. How shuld I resolve this. I think I am very close to the solution, but I really don't know where?? How do I resolve this??Regards,
Mohammed Athif Khaleel
Asst.Network Engineer
AlFaisaliah Group Information Technology
Tel.: +966-1-461-0077 x.209
Moble.: +966-59774015
Email: [EMAIL PROTECTED]
"Save Internet, Keep all the systems patched"
-----------------------------------------------------
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom/which they are addressed. If you have received this email in error please notify the system manager at the following email address: [EMAIL PROTECTED]
-----------------------------------------------------
