You cannot apply local security settings with MUI

Hotfix Download Available
View and request hotfix downloads

View products that this article applies to.

This article was previously published under Q281454

Expand all | Collapse all

SYMPTOMS

After you install Multilanguage Pack (MUI) and choose a preferred language for menus and dialog boxes, privileges that are defined in local security settings are not applied, and the following error messages appear in the Application event log:

Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 10/16/1999
Time: 10:13:10 am
User: N/A
Computer: Computername
Description: Security policies are propagated with warning. 0x534 : No mapping between account names and security IDs was done. Please look for more details in TroubleShooting section in Security Help.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 10/16/1999
Time: 10:13:11 am
User: NT AUTHORITY\SYSTEM
Computer: Computername
Description: The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (1332).

Back to the top

CAUSE

When you choose a language in MUI other than English, editing group policies causes the account names for the default accounts in the Group Policy files to be replaced with the localized names. This causes the group polices not to be applied on English installations.

Back to the top

RESOLUTION

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support (http://support.microsoft.com/contactus/?ws=support)

Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language. The English version of this fix should have the following file attributes or later:

   Date        Time    Version      Size     File name
   --------------------------------------------------
   4/20/2001  03:39p   5.0.2184.1   30,208   Lsasrv~1.br
   4/20/2001  03:39p   5.0.2184.1   29,184   Lsasrv~1.da
   4/20/2001  03:39p   5.0.2184.1   31,744   Lsasrv~1.es
   4/20/2001  03:39p   5.0.2184.1   28,672   Lsasrv~1.fi
   4/20/2001  03:39p   5.0.2184.1   33,280   Lsasrv~1.fr
   4/20/2001  03:39p   5.0.2184.1   33,280   Lsasrv~1.ger
   4/20/2001  03:39p   5.0.2184.1   31,232   Lsasrv~1.hu
   4/20/2001  03:39p   5.0.2184.1   32,256   Lsasrv~1.it
   4/20/2001  03:39p   5.0.2184.1   17,920   Lsasrv~1.jpn
   4/20/2001  03:39p   5.0.2184.1   32,256   Lsasrv~1.nl
   4/20/2001  03:39p   5.0.2184.1   28,160   Lsasrv~1.no
   4/20/2001  03:39p   5.0.2184.1   29,696   Lsasrv~1.pl
   4/20/2001  03:39p   5.0.2184.1   31,232   Lsasrv~1.pt
   4/20/2001  03:39p   5.0.2184.1   29,184   Lsasrv~1.ru
   4/20/2001  03:39p   5.0.2184.1   28,672   Lsasrv~1.sv
   4/18/2001  08:46p   5.0.2167.1   52,224   Netplw~1.br
   4/18/2001  08:46p   5.0.2167.1   51,200   Netplw~1.da
   4/18/2001  08:46p   5.0.2167.1   52,736   Netplw~1.es
   4/18/2001  08:46p   5.0.2167.1   50,176   Netplw~1.fi
   4/18/2001  08:46p   5.0.2167.1   57,856   Netplw~1.fr
   4/18/2001  08:46p   5.0.2167.1   56,320   Netplw~1.ger
   4/18/2001  08:46p   5.0.2167.1   53,760   Netplw~1.hu
   4/18/2001  08:46p   5.0.2167.1   52,736   Netplw~1.it
   4/18/2001  08:46p   5.0.2167.1   35,328   Netplw~1.jpn
   4/18/2001  08:46p   5.0.2167.1   54,272   Netplw~1.nl
   4/18/2001  08:46p   5.0.2167.1   49,152   Netplw~1.no
   4/18/2001  08:46p   5.0.2167.1   52,736   Netplw~1.pl
   4/18/2001  08:46p   5.0.2167.1   55,296   Netplw~1.pt
   4/18/2001  08:46p   5.0.2167.1   50,176   Netplw~1.ru
   4/18/2001  08:46p   5.0.2167.1   50,688   Netplw~1.sv

Note that this hotfix is not included in any Windows 2000 service pack. Regardless of the service pack that you have installed, if you are experiencing this MUI issue, you must install this hotfix. If you install additional MUI languages by using MUI setup after you first install MUI, you must reinstall the hotfix.

Back to the top

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Back to the top

MORE INFORMATION

For additional information about how to obtain a hotfix for Windows 2000 Datacenter Server, click the following article number to view the article in the Microsoft Knowledge Base:

265173 (http://support.microsoft.com/kb/265173/ ) The Datacenter Program and Windows 2000 Datacenter Server product

For additional information about how to install multiple hotfixes with only one reboot, click the following article number to view the article in the Microsoft Knowledge Base:

296861 (http://support.microsoft.com/kb/296861/ ) How to install multiple Windows updates or hotfixes with only one reboot

After you install MUI and modify the default language for menus and dialog boxes, all well-known security IDs (SIDs) such as Everyone, Authenticated Users, Interactive, and so on, are translated to the new language.

Local security settings are stored in the %SystemRoot%\Security\Secedit.sdb file, which is actually a Jet database. User and group accounts are stored as strings, not as SIDs. So, for example, after you change the language with MUI, the "Everyone" string cannot be mapped to a valid SID and privileges cannot be applied if they previously included an account whose name has changed. For additional information about how to install Windows 2000 and Windows 2000 hotfixes at the same time, click the following article number to view the article in the Microsoft Knowledge Base:

249149 (http://support.microsoft.com/kb/249149/ ) Installing Microsoft Windows 2000 and Windows 2000 hotfixes

Back to the top