Event ID 1000 and 1202 After Configuring Policies

View products that this article applies to.

This article was previously published under Q260715

Expand all | Collapse all

SYMPTOMS

After you modify group policies on a Windows 2000-based server, the following error messages may be recorded in the Application event log every five minutes:

Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 21/09/1999
Time: 18:15:14
User: N/A
Computer: MachineName
Description:
Security policies are propagated with warning. 0x4b8 : An extended error occurred. Please look for more details in TroubleShooting section in Security Help.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 21/09/1999
Time: 18:15:14
User: NT AUTHORITY\SYSTEM
Computer: SLDN220IN
Description:
The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (1208).

Back to the top

CAUSE

A conflict in Group Policy can cause these events to occur. These error messages can occur if the "Rename Administrator Account" security policy is enabled and then set to an account name that is already in use.

Back to the top

RESOLUTION

To resolve this issue, either disable the "Rename Administrator Account" policy or configure the policy to use an account name that does not exist. For additional information, click the article numbers below to view the articles in the Microsoft Knowledge Base:

259576 (http://support.microsoft.com/kb/259576/EN-US/ ) Group Policy Application Rules for Domain Controllers

258595 (http://support.microsoft.com/kb/258595/EN-US/ ) Gpresult Does Not Enumerate Resultant Computer Security Policy

Back to the top