Event ID1000 and Event ID 1202 Messages Are Reported When You Set Security on the File Replication Service by Using Group Policy

Article translations Article translations
Article ID: 284461 - View products that this article applies to.
This article was previously published under Q284461
Notice
This article applies to Windows 2000. Support for Windows 2000 ends on July 13, 2010. The Windows 2000 End-of-Support Solution Center is a starting point for planning your migration strategy from Windows 2000. For more information see the Microsoft Support Lifecycle Policy.
Expand all | Collapse all

SYMPTOMS

If you configure the Startup mode and security settings on the File Replication service (FRS) through Group Policy, the following error messages may be logged in the Application event log in Event Viewer:
Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 1/4/2001
Time: 1:01:30 PM
User: N/A
Computer: Server
Description:
Security policies are propagated with warning. 0x5 : Access is denied. Please look for more details in Troubleshooting section in Security Help.
-and-
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 1/4/2001
Time: 1:01:30 PM
User: NT AUTHORITY\SYSTEM
Computer: Server
Description:
The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (5).
If you enable Security Configuration Client logging (which produces the Winlogon.log file), the following error message is logged in Winlogon.log:
Configure NtFrs.
Warning 5: Access is denied.
Error opening NtFrs.

General Service configuration completed with error.

CAUSE

This issue occurs because of the locked-down security that was originally set on the FRS through Group Policy. When you attempt to configure the FRS through Group Policy, the policy engine no longer has the permission to set security on the FRS and does not attempt to take ownership of the FRS.

RESOLUTION

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in Windows

To reset security on the FRS:
  1. Navigate to the following policy in the Group Policy object (GPO) where security has been set on the FRS:
    Computer Configuration\Windows Settings\Security Settings\System Services
  2. Right-click File Replication Service and click Security.
  3. Give the System and Administrators groups Full Control permissions.
  4. Verify that the edited policy has been replicated to all domain controllers.
  5. Start Registry Editor (Regedt32.exe).
  6. Locate and click the following registry key:
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTFRS
  7. Delete the Security subkey.
  8. Restart the computer.
To confirm that the security policy has been successfully applied, check for consecutive "Event ID 1704" messages in the Application event log.

MORE INFORMATION

This issue may also occur when you attempt to configure other computer services.

Properties

Article ID: 284461 - Last Review: March 1, 2007 - Revision: 3.8
APPLIES TO
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Professional Edition
  • Microsoft Windows 2000 Advanced Server MultiLanguage Version
Keywords: 
kbenv kberrmsg kbprb kbsecurity KB284461

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com