1003 scesrv EventId on SBS2003
Ian Zahn
group policy is being updated, I assume the GPupdate isn't working because of
the error. As this only happens about an hour after a reboot and this is the
only time it is in the event logs.
I try a gpupdate manually and no errors come up, but none also to say they
have be applied updated. the group policies are getting applied.
Here is the event from event viewer
Notification of policy change from LSA/SAM has been retried and failed.
Error 4312 to save policy change for account
S-1-5-21-1957994488-1450960922-725345543-1135 in the default GPOs. For more
debugging information, please look security\logs\scepol.log under Windows
root.
Brandy Nee [MSFT]
Thank you for posting to the SBS Newsgroup.
I am sorry for the delayed response due to weekend. Please understand that
the newsgroups are staffed weekdays by Microsoft Support professionals to
answer your systems and applications questions. Your understanding is
greatly appreciated!
Due to lack of detail error information for research, I need your help to
gather the following information for troubleshooting:
1. When did this issue occur? Did you install any updates or make any
changes on the server recently? Is there any third party software installed
on the server?
2. Please send the file C:\WINDOWS\security\logs\scepol.log to me to
analysis.
3. Please explain in detail "I try a gpupdate manually and no errors come
up, but none also to say they have be applied updated. the group policies
are getting applied". Did Group Policy have been applied to client
workstations or not?
4. How many Domain controllers in your SBS 2K3 domain?
5. On the server, run "eventvwr" (without quotation marks), check whether
there is any other error, for example, Event ID 1001. If yes, please help
to gather the
\\domainname\sysvol\domainname\Policies\{GUID}\Machine\Microsoft\Windows
NT\SecEdit\GptTmpl.inf file. {GUID} is a sequence of number listed in the
Event ID 1001 Description.
6. Please help to gather the Winlogon.log file. Please refer to the
following KB article for detail steps to Enable Logging.
How to Enable Logging for Security Configuration Client Processing in
Windows 2000
http://support.microsoft.com/?id=245422
7. On the server, run "eventvwr" (without quotation marks), right click
Application, select Save Log File As. Please save the file as .evt file and
send the file to me.
Please send all the log files I require to my mailbox:
v-br...@microsoft.com.
I am appreciated your time and co-operation! If anything is unclear, please
feel free to let me know. I am looking forward to hearing from you!
Best regards,
Brandy Nee
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>Thread-Topic: 1003 scesrv EventId on SBS2003
>thread-index: AcW8AfTilDwaWPlqT3eUgDJ8TblI4g==
>X-WBNR-Posting-Host: 203.51.205.5
>From: "=?Utf-8?B?SWFuIFphaG4=?=" <Ian...@discussions.microsoft.com>
>Subject: 1003 scesrv EventId on SBS2003
>Date: Sat, 17 Sep 2005 20:35:03 -0700
>Lines: 13
>Message-ID: <BC5A71AB-764F-4BE0...@microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:154273
>X-Tomcat-NG: microsoft.public.windows.server.sbs