Windows Forum

Ask something
Discussion Locked

event viewer

0 helpful
1 reply

by metallica

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a windows 2000 server domain controller.In the event viewer on the application log I have a constant error"The Group Policy client side extension Security was passed flags {17} and returned a failure status code of {1332}".Does anyone know what this is?I did have 1 windows 2000 workstation infected with the W32.Nimda.A@mm.Virus.Also on the task manager when viewing processes the system idle process uses 99% of the processor time is this normal

1 reply

by beermonster

Hi,
The 1332 in the error message indicates an account mapping problem, often caused by an account that has been deleted being mentioned in a security policy. If you look at the following technet article -
"Troubleshooting Group Policy in Windows 2000"

go to www.microsoft.com/technet and do a search if you don't have your own copy.
It outlines a registry key that you can set which will log debug info to a local file which should give some more info about which user \ group is causingthe problem. The nimda virus (my company was hit last week)creates or activates a local guest account, and adds it to local admins, but this typically fails on a dc as there is no 'local' context on them so I don't think this will be your problem. Good idea to check anyway though. The system Idle process is just that, a process that the OS runs to 'burn up' processor time when there is nothing else running that needs it. It's quite normal to see it running a 90% plus, just means theres not muchelse going on. Take a tip (you've probably done this anyway)and make sure you've scanned EVERYTHING in your company with an up to date scanner. Have fun : )

This discussion is closed to new replies.