General discussion

Locked

VERY Strange AD/GPO problem.....

By dlanors ·
We have (2)DC's, each in their own site. Everything was fine until we renamed the admin account. Then we started getting errors every 5 minutes with name/SID mapping errors. Q247482 on technet explains the issue....however, after going into the gpo's for local, DC, and domain, there are no instances of administrator assigned to user rights,yet the effective rights under local gp still shows administrator for "log on as a service" and "act as part of the OS". This is only happening on 1 of the 2servers. If I remove the (renamed) admin account under the DC gp, then re add it, it fixes the problem for a few 5 minute intervals, but then it comes back. I can't find administrator anywhere, in any GP, yet it keeps reappearing as an effective right for just those 2 user rights. Any help/ideas would be appreciated.....

This conversation is currently closed to new comments.

2 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

VERY Strange AD/GPO problem.....

by BeerMonster In reply to VERY Strange AD/GPO probl ...

Hi,
If this is happening on only one of the two dc's, then we must ask ourselves what is different about them. In your case that would appear to be site membership. You say that you have checked the local, dc and domain policy objects. Have you checked to see if a GPO was assigned to the site? Remember that the order of processing is local, site, domain, ou. go into sites and services, select the properties of the site that the problem server is in, and check out the group policy tab. Hope this answers it...

Collapse -

VERY Strange AD/GPO problem.....

by dlanors In reply to VERY Strange AD/GPO probl ...

Checked into this, no luck. Also, after an overnight replication, I now get the errors on both DC's. (previously I had forced a replication, or thought I did, and only saw the errors on the 1 DC)

Back to Windows Forum
2 total posts (Page 1 of 1)  

Related Discussions

Related Forums