Windows Forum

Ask something
Discussion Locked

VERY Strange AD/GPO problem.....

0 helpful
2 replies

by dlanors

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We have (2)DC's, each in their own site. Everything was fine until we renamed the admin account. Then we started getting errors every 5 minutes with name/SID mapping errors. Q247482 on technet explains the issue....however, after going into the gpo's for local, DC, and domain, there are no instances of administrator assigned to user rights,yet the effective rights under local gp still shows administrator for "log on as a service" and "act as part of the OS". This is only happening on 1 of the 2servers. If I remove the (renamed) admin account under the DC gp, then re add it, it fixes the problem for a few 5 minute intervals, but then it comes back. I can't find administrator anywhere, in any GP, yet it keeps reappearing as an effective right for just those 2 user rights. Any help/ideas would be appreciated.....

2 replies

by beermonster

Hi,
If this is happening on only one of the two dc's, then we must ask ourselves what is different about them. In your case that would appear to be site membership. You say that you have checked the local, dc and domain policy objects. Have you checked to see if a GPO was assigned to the site? Remember that the order of processing is local, site, domain, ou. go into sites and services, select the properties of the site that the problem server is in, and check out the group policy tab. Hope this answers it...

by dlanors

Checked into this, no luck. Also, after an overnight replication, I now get the errors on both DC's. (previously I had forced a replication, or thought I did, and only saw the errors on the 1 DC)

This discussion is closed to new replies.