Event ID 1202?

[bofhrevenge2]

All of a sudden i've started receiving Event ID 1202 Source: SceCli on my 2003 servers, i've read the MS KB article Q324383 on it and can't see anything that i've done that would cause this other than trying a tool yesterday which i tried for about 5 minutes but didn't alter AD as far as i'm aware.

http://www.tools4ever.com/products/user-management-resource-administrator/

Could this have caused the problem or has anyone else solved this problem before.

Just though i'd ask before i take a trip to the registry.

It's in a 2003 domain.

Cheers.

 

[Lou0686]

Hi,

There are many comments on this event, read on

http://www.eventid.net/display.asp?eventid=1202&eventno=348&source=SceCli&phase=1

Lou

 

[bofhrevenge2]

Hmmm it does suggest that an app could of caused the problem so it might of been the user management tool, i'm not sure what it could of done though. I'll have to investigate after the wekend.

Cheers.

 

[bofhrevenge2]

Sorted it after an inspection of the Winlogon.log file, it turned out there was a mistyped group in a policy and it was entirely my fault. I had created a group called Add Workstations but was convinced I’d called it Add Stations, I thought this was the only alteration I’d made that could cause the problem other than install the app (which MS suggested could be the problem Q247482), the problem was that when I checked it looked ok as I thought the group was called Add Stations.

Definitely a Friday afternoon problem I’m usually very thorough.

Cheers anyway.