Windows Forum

Ask something
Discussion Locked

SceCli Event ID: 1202

0 helpful
3 replies

by cyberpuppi

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I've been getting this error for a few weeks now and it is driving me nuts
locating the cause:

Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 10/2/2004
Time: 12:37:39 PM
User: N/A
Computer: PRISE
Description:
Security policies are propagated with warning. 0x5 : Access is denied.

For best results in resolving this event, log on with a non-administrative
account and search http://support.microsoft.com for "Troubleshooting Event
1202s".

The logfile gives me this:

----Configure General Service Settings...
Configure TlntSvr.
Warning 5: Access is denied.
Error opening TlntSvr.
Warning 5: Access is denied.
Error opening TlntSvr.

General Service configuration completed with error.

Any ideas would be greatly appreciated.

--
Curt

3 replies

by cyberpuppi

Poster rated this answer.
There is no 0x534. I did some more troubleshooting following MS guidelines and got these results:

C:\WINNT>find /i "error opening" %SYSTEMROOT%\security\logs\winlogon.log

---------- C:\WINNT\SECURITY\LOGS\WINLOGON.LOG
Error opening TlntSvr.

C:\WINNT>find /i "TlntSvr" %SYSTEMROOT%\security\templates\policies\gpt*.*

---------- C:\WINNT\SECURITY\TEMPLATES\POLICIES\GPT00000.DOM

---------- C:\WINNT\SECURITY\TEMPLATES\POLICIES\GPT00001.INF
TlntSvr,2,"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-21-2000478354-1935655697-1
957994488-1124)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;DA)"

---------- C:\WINNT\SECURITY\TEMPLATES\POLICIES\GPT00002.INF
TlntSvr,2,"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-21-2000478354-1935655697-1
957994488-1124)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;DA)"

C:\WINNT>gpotool /verbose
Domain: UFP.com
Validating DCs...
enterprise.UFP.com: OK
tricorder.UFP.com: OK
Available DCs:
enterprise.UFP.com
tricorder.UFP.com
Searching for policies...
Found 3 policies
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
GPOTOOL: e ERROR: Err: CreateTime different between Adm
Error: enterprise.UFP.com - tricorder.UFP.com sysvol mismatch
Details:
------------------------------------------------------------
DC: enterprise.UFP.com
Friendly name: Default Domain Policy
Created: 1/19/2001 2:01:03 AM
Changed: 9/19/2004 10:39:07 PM
DS version: 5(user) 37(machine)
Sysvol version: 5(user) 37(machine)
Flags: 0
User extensions:
[{25537BA6-77A8-11D2-9B6C-0000F8080861}{88E729D6-BDC1-11D1-BD2A
-00C04FB9603F}][{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-0
0C04FA372D4}]
Machine extensions:
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A
28C-00C04FB94F17}{53D6AB1D-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4E
A-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-
00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}{53D6AB1D-2488-11D1-A28C-00C0
4FB94F17}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: tricorder.UFP.com
Friendly name: Default Domain Policy
Created: 1/19/2001 2:01:03 AM
Changed: 9/19/2004 10:43:52 PM
DS version: 5(user) 37(machine)
Sysvol version: 5(user) 37(machine)
Flags: 0
User extensions:
[{25537BA6-77A8-11D2-9B6C-0000F8080861}{88E729D6-BDC1-11D1-BD2A
-00C04FB9603F}][{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-0
0C04FA372D4}]
Machine extensions:
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A
28C-00C04FB94F17}{53D6AB1D-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4E
A-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-
00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}{53D6AB1D-2488-11D1-A28C-00C0
4FB94F17}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
GPOTOOL: e ERROR: Err: CreateTime different between Adm
Error: enterprise.UFP.com - tricorder.UFP.com sysvol mismatch
Details:
------------------------------------------------------------
DC: enterprise.UFP.com
Friendly name: Default Domain Controllers Policy
Created: 1/19/2001 2:01:03 AM
Changed: 10/2/2004 8:14:10 PM
DS version: 0(user) 268(machine)
Sysvol version: 0(user) 268(machine)
Flags: 0
User extensions: not found
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A
0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: tricorder.UFP.com
Friendly name: Default Domain Controllers Policy
Created: 1/19/2001 2:01:03 AM
Changed: 10/2/2004 8:43:43 PM
DS version: 0(user) 268(machine)
Sysvol version: 0(user) 268(machine)
Flags: 0
User extensions: not found
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A
0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {F4AFFCBA-BC64-4467-9C54-78E5977AC198}
GPOTOOL: e ERROR: Err: CreateTime different between Adm
Error: enterprise.UFP.com - tricorder.UFP.com sysvol mismatch
Details:
------------------------------------------------------------
DC: enterprise.UFP.com
Friendly name: DispatchPolicy
Created: 11/6/2001 1:05:44 AM
Changed: 11/6/2001 1:18:09 AM
DS version: 3(user) 0(machine)
Sysvol version: 3(user) 0(machine)
Flags: 0
User extensions:
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC
-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
------------------------------------------------------------
DC: tricorder.UFP.com
Friendly name: DispatchPolicy
Created: 11/6/2001 1:05:44 AM
Changed: 11/6/2001 1:22:26 AM
DS version: 3(user) 0(machine)
Sysvol version: 3(user) 0(machine)
Flags: 0
User extensions:
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC
-0000F87571E3}]
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------

Errors found

There is nothing configured in the Domain Security Policy for the Telnet
Server, so I'm at a loss on where to go next.

Thanks,
Curt

by bfilmfan

Thanks for the additional information.

With the error sysvol mismatch, AD is stating that there is a difference between the 2 sysvols.

I have seen this error when there is FRS replication conflict. Check the sysvols for differences in the policy {F4AFFCBA-BC64-4467-9C54-78E5977AC198}.

Should be something like this in your environment:
\\server1.domain.local\sysvol\domain.local\{31B2F340-016D-11D2-945F-00C04FB984F9}

Of course, replace the server1, domain and local with your DNS namespace information.

Let me know if this is of assistance.

This discussion is closed to new replies.