EVENT 1000 and 1202 Help Please

[jimw32]

I have the following events reaccuring on a single workstation that is part of the a 2000 AD domain.

I have tried reapplying the local security policy and get the same end results.

Can any one suggest something?

Thanks

Jim

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 5/13/2003
Time: 1:18:53 PM
User: NT AUTHORITY\SYSTEM
Computer: SCZOLLER
Description:
The Group Policy client-side extension Security was passed flags (1) and returned a failure status code of (1332).

Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 5/13/2003
Time: 1:18:53 PM
User: N/A
Computer: SCZOLLER
Description:
Security policies are propagated with warning. 0x534 : No mapping between account names and security IDs was done.
Please look for more details in TroubleShooting section in Security Help.

 

[GrnEyedLdy]

Jimw32,

Have you recently modified anything in the local security policy?


Patty

 

[GrnEyedLdy]

Check this out. Hope it helps.

http://support.microsoft.com/search...dType=ANY&maxResults=25&Titles=false&numDays=

Patty

 

[packdragon]

There can be several causes for this. One may be duplicate account names, often caused by the Administrator account being renamed in the GPO to be a different name, but that name already exists. Does the problem go away after you turn off this renaming?

Another possibility could be a local policy that uses an account name that no longer exists. Check it really carefully.

 

[vescetec]

Jimw32 - I have been haunted with this same identical issue for the past month. I have just resolved it on my domain. I don't know if you are all set but here is what I did.

I followed the procedure outlined in "Microsoft Article 247482 - Error message: Security Policies are Propagated with Warning 0x534." Once I generated the winlogon file, I looked through it and found the error logged there. It was posted while configuring the user rights and stated "error 1332 - no mapping between account names and security IDs was done. CANNOT FIND IWAM_2000DCMASTER"

This system username, though no longer existing in the Active Directory was still listed in my domain controller security policy under security setting_local policy _ user rights assignment _ log on as batch job.

This was the cause of the problem.

To resolve you can either create the username again in Active Directory or delete the user account entry in the policy itself. Either way it will resolve the error when refreshing the policies on your domain. Good luck - hope it helps you too if your still stuck. MIKE