Craig, We were having a similar messages on our DC's - it turned out NTFS permissions were incorrect in the SYSVOL folder. This solved it for us... http://support.microsoft.com/default.aspx?scid=KB;en-us;q290647
If this doesn't work: www.eventid.net says the following for 1202 - Use at your own risk: http://www.eventid.net/display.asp?eventid=1202&source= "If you are getting event ID 1000 & 1202 every 5 minutes, then it also may be to do with IIS. If you have removed IIS & SMTP server then check that the DC has removed the IWAM & IUSR users from the security policy. Go into Domain Controller Security Policy, Security Settings, Local Policies, User rights Assignment & make sure that these users are taken out of any policies they are still in. Then run "secedit /refreshpolicy machine_policy /enforce" from the command prompt & your errors should disappear. HTH, Devin L. Meade, CNE, MCP Network Administrator Frankfurt-Short-Bruza www.fsb-ae.com www.oklahomadome.com -----Original Message----- From: Craig A. Mills [mailto:[EMAIL PROTECTED]] Sent: Monday, December 23, 2002 1:11 PM To: NT 2000 Discussions Subject: RE:1202 and 1000 Two w2k DCs. mix clients (win98, nt, w2k, xp) I'm getting Event 1202 and 1000 every five minutes. MS has a couple of tech notes on this but not with the same error codes. The 1000 event states "The Group policy client-side extension Security was passed flags(17) and returned a failure status code of (13)." Ms has no reference to the 13 failure code. Any suggestions? Craig A. Mills Computer Aided Management, Inc. 371 Oak Pl., Ste. H Brea, Ca. 92821 (714) 257-0108 ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to %%email.unsub%% ------ You are subscribed as [email protected] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED]
