Windows Forum

Ask something
Discussion Locked

EVENT ID 1202

0 helpful
7 replies

by jboxr2000

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

My client (who has WIN2000 SBS)has a recurring error and warning messages that are occuring every
five minutes in the Application log:
First the warning appears - Source:SceCli, with the description...
"Security policies are propagated with warning. 0x534 : No mapping between
account names and security IDs was done.
Please look for more details in TroubleShooting section in Security Help. "
Then the error occurs - Source:Userenv, with the description...
"The Group Policy client-side extension Security was passed flags (17) and
returned a failure status code of (1332). "
I have checked MS Technet, and eventid.com, and implemented their solutions - but nothing has changed. It appears the problem is to with account names, security IDs and security policies. What else can I try?

7 replies

by don christner

This is from eventid.net

Error code 0x534 (decimal 1332)- "No mapping between account names and security IDs was done.":

A program was installed, which creates user accounts and assigns rights to those user accounts. Later, the program was removed,the user accounts deleted, but the rights from policy before the accounts were still there. A user account is added and rights assigned to the account. The account is deleted, but not from security policies. The "0x534" code is the hex for "1332". Following the suggestions in Q247482 helps. Make sure you check the domain, domain controllers and local group policies.

Don

by canucker

Add the ExtensionDebugLevel DWORD value with the value data 2 to the following registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\GPExtension\{827...}
NOTE : In the registry key, any GUID starting with "{827".

Under the command window, type secedit /refreshpolicy machine_policy /enforce to generate the Winlogon.log file in the Windows_folder \Security\Logs folder.

Restart the Netlogon service.

Search the Winlogon.log file for deleted user accounts.

Confirm that this user account is not located in any of the User Rights Assignments in the Default Domain Controllers policy as well as in the Local Security Policy, under the effective settings column.

This discussion is closed to new replies.