SceCli error 1202 and Userenv error 1000 1

[dellboy]

Is there anybody out there who has experienced the following errors and successfully resolved them?


Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 10/16/1999
Time: 10:13:10 am
User: N/A
Computer: COMPUTERNAME

Description: Security policies are propagated with warning. 0x534 : No mapping between account names and security IDs was done. Please look for more details in TroubleShooting section in Security Help.

and error

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 10/16/1999
Time: 10:13:11 am
User: NT AUTHORITY\SYSTEM
Computer: COMPUTERNAME

Description: The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (1332).


These errors are logged every five minutes on all DC's within the domain. I have tried various microsoft recommended solutions without any success. I have referenced and tried suggestions from article Q247482 and Q234237, neither worked. I have also consulted articles Q256000 and Q245422.

If anyone out there has resolved this problem or come across it and has any suggestions what-so-ever I would be greatful

Cheers

 

[CoolClark]

Check out this article: Q281454

M$ says to wait for the next SP or you can call them and get the patch.

Did you by chance remove a DC without demoting it or the demotion failed?

 

[dellboy]

You're spot on with the removal of a DC, it was when the network had to be rebuilt. Demoting the DC failed using DCPromo and we had to run/force a demote through DOS, can't remember the specifics off the top of my head -ntds util ?!?! The demotion apparantly suceeded but I would guess not from my investigations yesterday.

Cheers for the pointers, I'll take a look at the article.

Cheers

 

[CoolClark]

I had the same problem your have and went through the manual removal. Once I did that everything cleared up. You might try removing it again. Check out this article: Q216498

Also this one for removing orphaned Domains: Q230306

Hope this helps.

 

[CoolClark]

Please forgive my poor grammar in the previous post, it’s getting kind of late.

 

[dellboy]

Coolclark

Cheers for the pointers, article 230306 is the article I used when demoting the last time around. The server was demoted and then rebuilt and added to the domain once again, with the same name (file-server1), sharing the global catalog. I think this is what is causing the errors as there would 'appear' (from what I have read) to be 2 entries in the AD for the DC file-server1. Would you agree with this idea?

I am uneasy with the idea of demoting and promoting back to a DC mid week when I don't have the w/e to fix it if it all goes wrong. If you agree with my analogy or if you think I'm way of course would you let me know. If you think I have the right idea do you know how to go about searching entries in the AD to remove. I'm only asking as you may well know and I'd like your input.

Thanks once again for all you help, hopefully I'll be able to help someone else one day

Cheers

 

[CoolClark]

I always try to do things like that on a Friday. You never know what's going to go wrong and it's best to have as much time as possible to solve it. I usually start around 3pm so if everything goes well I still make it out on time.