Missing SMS Internal User Accounts

[wolfej]

Every 5 minutes I have been receiving two application
event log errors as described exactly in MS KB article
247482.

http://support.microsoft.com/default.aspx?scid=kb;en-us;247482

"Error Message:Security Policies Are Propagated with
Warning. 0x534"

I followed the steps in the article to generate the
winlogon.log file and the error of note is: Error 1332:
No mapping between account names and security IDs was
done. Cannot find domain\SMS&_computername.

Upon further investigation, I compared the user accounts
in this domain with a test domain that also has SMS. And
I discovered that my production domain has somehow lost
all 3 of the original "DO NOT MODIFY" SMS user accounts
and 1 original SMS group account. The missing user
accounts are: SMS&_servername1; SMS&_servername2;
SMSCliToknAcct& and the missing group is SMSInternalCliGrp.

How do I get these accounts back? Do I need to recreate
them by hand, (and are there any special instructions
required to do so?), I have tried a site reset but that has not recreated the accounts.

Thanks for any help!

Joel

 

[wolfej]

The only other information I can provide at this point is
that the sms client service is unable to start on
servername1 due to a logon failure. The same service on
servername2 IS running, but I am too terrrified to stop it
for fear that it will never start up again!

 

[ceigl]

The service-accounts (SMS_&Server1 and SMS_&Server2) can be manually created - just be sure to point the properties of the services to the new password (the needed rights will be given by Windows automatically)... but for the other two acounts I have no idea. Sorry....

Hope this helps !
Chris